last executing test programs: 9.036438834s ago: executing program 0 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x4}) ptrace(0x10, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') read$FUSE(r1, &(0x7f0000003040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a80080006800800e500080000003e"], 0x44}}, 0x0) 8.645041538s ago: executing program 0 (id=545): syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/37, 0x0, 0x25, 0x0, 0x7664, 0x0, @void, @value}, 0x28) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(0x0, 0x2, 0x842) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x248, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000004140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.308126375s ago: executing program 4 (id=549): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000002400), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) execve(0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) prctl$PR_SET_NAME(0xf, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) syz_usb_connect$hid(0x5, 0x36, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2024) 7.125369276s ago: executing program 1 (id=550): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8008801) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000040)) 6.938299043s ago: executing program 1 (id=552): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000100013040000000000000008ac141441000000000000000000000000e0000001000000000000000000000000000000004e280800", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000000000000000000c0000000032000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000100000000000000fffffffffffffbff070000000000000008000000000000000200000000000000000000000800000000000000cc000000000000000000000000000000f600000000000080ffffffff0000000000000000020004010c00000000000000994e"], 0xf0}}, 0x404c0a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 6.731792416s ago: executing program 2 (id=553): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x3, 0x1000, 0x4000}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x204001, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={&(0x7f0000000340)="7ec9b8737e337111bbe85ae38443d815631addf3893587270e34a2f3d923a133531607fb358b87987433141757337ae5c9ee76b2db2c68df60c1b35faf7a903681d0d8b6d02de2d4df31efdb9571fd97dd3f9b763c32d2aaa08b899510b65ba9271dc8426cd1de9045f6e177d920c839f4f60dce86e76b8c71fcf918cd6fab6bfbd7dcf7ad695bda67d598ed117716382cebee31a5ba1a3afb536e35ceee5d49897fefe13692df827bd50b80c501e0c5e31bad868c0b3ad7ee642e3454dafd15e0956e9cd234808db5e632d00baeedbeab6579b3a68b6cbd3721bf49e95760a5cf4ee88ce0", &(0x7f00000004c0)=""/233, &(0x7f00000005c0)="5858ae39f482dd3b06e2abd09d6f3a8b50db5aabd4eb646ebfdc960e06b735118eeec4c1a711b579965c13cecdd32f4fdf301e3ab81c675069a39e0bad39951fe123721198e8f62ca4e42a4f4ba2564e4a67fdc8a34e511ed4e870e1105a43c08a0bd6f4d3cafe91153bbef60ae3cc92ee1c497cbd7c7d7f4681c12902b3e13e0eb003ceb69482c4d43317c43b317a481b435e507a7c69", &(0x7f0000000000)="94af16a3a10085a4b6eedf7e07097ed0dc367b82687a88b2ef1bb8cd7ff8eeb377b762c9", 0x10001, r0, 0x4}, 0x38) 5.786216949s ago: executing program 0 (id=554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f010000000000000000000424020009058103"], 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.583351287s ago: executing program 2 (id=555): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x78}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x4, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x3, 0x2) lseek(r5, 0x1000000, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0xf1) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x6bad}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000310}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x20004}, [@IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "68bb8b06c70df87fcf"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x24004084) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 5.423961409s ago: executing program 2 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x4}) ptrace(0x10, 0x1) 5.423292103s ago: executing program 1 (id=557): openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x20000080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000280)}, 0x20) getpeername$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1c, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x89}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x93}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000300)='syzkaller\x00', 0xc, 0xa3, &(0x7f00000005c0)=""/163, 0x40f00, 0x19, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x1, 0x2, 0x2}, {0x4, 0x4, 0x3, 0x7}, {0x3, 0x5, 0x0, 0x8c2ee9f52529e41e}, {0x0, 0x4, 0xa, 0x8}, {0x0, 0x2, 0x6, 0x6}, {0x1, 0x4, 0x2}, {0x3, 0x4, 0x2, 0x8}], 0x10, 0x7, @void, @value}, 0x94) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000200)) 4.728233572s ago: executing program 2 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 4.597286593s ago: executing program 1 (id=559): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r0) statx(r0, 0x0, 0x1000, 0xcf3433d97aab2983, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000080)={0x28, 0x4, r3, r3, 0x2, 0x80, 0x4}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 4.180504015s ago: executing program 2 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x4c}}, 0x2) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0xfffffffc, 0x3, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 3.874762511s ago: executing program 4 (id=562): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8008801) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000040)) 3.531450061s ago: executing program 4 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.467396633s ago: executing program 1 (id=564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) execve(0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 3.331757568s ago: executing program 4 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4000010) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x313, 0x0, 0x2}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x4}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000000000)=0x32) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000140), &(0x7f0000000500)={0x0, 0xfb, 0x15, 0x2, 0x3, "d0b0dbbb7d8247a4f7874aa2d5ac6c02"}, 0x15, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r9, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x84) read$FUSE(r8, 0x0, 0xfffffcd5) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000003000000050000000000000000000000f800000000000016ffffffff"]) 3.216881671s ago: executing program 3 (id=566): syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500)=""/37, 0x0, 0x25, 0x0, 0x7664, 0x0, @void, @value}, 0x28) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(0x0, 0x2, 0x842) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000004140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.158152367s ago: executing program 0 (id=567): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x78}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x4, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) lseek(r5, 0x1000000, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0xf1) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000310}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@setlink={0x40, 0x13, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x20004}, [@IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "68bb8b06c70df87fcf"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x24004084) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 2.887777789s ago: executing program 0 (id=568): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000400)=r1, 0x4) syz_open_procfs$namespace(0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x70}}, 0x24040880) syz_emit_vhci(&(0x7f0000000f80)=ANY=[@ANYBLOB="02c8007801740101000bc22800070000003baa2aaffc0f515a2d42396661941db6bd3a4cde690a1f5ae875d8cb010669494dc800000c06050000dd0900ba030108000700040000010400064c04000e000900050830000008fffb01800202feff04090003f5040007000d00050100050100070205000501010501010102020007027c9d050101038108004845050079008d0a01ef"], 0x17d) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 2.846961234s ago: executing program 4 (id=569): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000340)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r6 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1}) close_range(r6, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000000c0)=0xfffd, &(0x7f0000000100)=0x2) madvise(&(0x7f0000203000/0x4000)=nil, 0x4000, 0x8) munlock(&(0x7f0000549000/0x3000)=nil, 0x3000) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x5, 0x3, 0x9, 0x880}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) 2.53592308s ago: executing program 3 (id=570): socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4090, 0xffa) 2.177264493s ago: executing program 3 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 2.176075156s ago: executing program 2 (id=572): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x7f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x37c}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210011000000000000000000fc020000000000000000000000000000fc020000000000a8040000000000000000000000000000000004000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa330300000200000002000a0000000000000000000000ffff7f000001fe80000000000000000000000000004464010102000000000000000000000000200100000000000000000000000000003c0000000000000008000200"], 0xec}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r4, 0x0, 0x20000007, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, 0x0, 0xb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) 1.412825607s ago: executing program 3 (id=573): pipe2(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='xprt_reserve\x00', 0xffffffffffffffff, 0x0, 0x100000}, 0x18) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x101, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYBLOB="baffd89258d3246a15c7"], 0x20}, 0x1, 0x0, 0x0, 0x88000}, 0x20000044) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f0000000000000000000000000000000200000000000"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000003090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2f, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r5, @ANYRES8=r1, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 520.471822ms ago: executing program 0 (id=574): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r0) statx(r0, 0x0, 0x1000, 0xcf3433d97aab2983, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000080)={0x28, 0x4, r3, r3, 0x2, 0x80, 0x4}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 406.615295ms ago: executing program 3 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 225.708924ms ago: executing program 1 (id=576): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x0, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0xf9f6, 0x4}) 166.694434ms ago: executing program 4 (id=577): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000340)=0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000540)=0x16) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x23, 0x800000, @private2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0xd8}, 0x24040005) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf250100004004000180100002800c000180"], 0x28}}, 0x2000c050) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea, 0x0, 0x4004}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="93bffce623851797a8dc79018d7716840ffc6946a067f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb688db8aee2963a9a5c8b454270e3c084fd5232dd1e17566d440d9f479034f26806b25dcfc18c50ee6f365a1bd150cc423678f1ef69b0667c83d4ff77606", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c43", 0x6}], 0x1}}], 0x2, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 0s ago: executing program 3 (id=578): landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x2000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 82.272862][ T5816] cgroup: Unknown subsys name 'net' [ 82.423812][ T5816] cgroup: Unknown subsys name 'cpuset' [ 82.432614][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.037546][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.907383][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.916325][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.924661][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.937484][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.944933][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.946720][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.953317][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.961025][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.966853][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.974115][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.981351][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.990000][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.005597][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.007172][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.014596][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.040045][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.048216][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.051035][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.080003][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.084134][ T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.099227][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.100633][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.115363][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.115429][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.131684][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.690298][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.791547][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.938452][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.021744][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.029580][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.037720][ T5828] bridge_slave_0: entered allmulticast mode [ 89.046107][ T5828] bridge_slave_0: entered promiscuous mode [ 89.132794][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.140650][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.147917][ T5828] bridge_slave_1: entered allmulticast mode [ 89.156371][ T5828] bridge_slave_1: entered promiscuous mode [ 89.173571][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.221795][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.259345][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.292256][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.299449][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.307111][ T5827] bridge_slave_0: entered allmulticast mode [ 89.314978][ T5827] bridge_slave_0: entered promiscuous mode [ 89.348292][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.377237][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.384704][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.392859][ T5827] bridge_slave_1: entered allmulticast mode [ 89.400385][ T5827] bridge_slave_1: entered promiscuous mode [ 89.500356][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.507582][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.514978][ T5826] bridge_slave_0: entered allmulticast mode [ 89.523645][ T5826] bridge_slave_0: entered promiscuous mode [ 89.582295][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.589582][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.596897][ T5826] bridge_slave_1: entered allmulticast mode [ 89.605552][ T5826] bridge_slave_1: entered promiscuous mode [ 89.615364][ T5828] team0: Port device team_slave_0 added [ 89.638122][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.651518][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.687370][ T5828] team0: Port device team_slave_1 added [ 89.737304][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.744809][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.752192][ T5835] bridge_slave_0: entered allmulticast mode [ 89.759355][ T5835] bridge_slave_0: entered promiscuous mode [ 89.805369][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.812750][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.820024][ T5833] bridge_slave_0: entered allmulticast mode [ 89.827119][ T5833] bridge_slave_0: entered promiscuous mode [ 89.836942][ T5827] team0: Port device team_slave_0 added [ 89.843779][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.853592][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.861168][ T5835] bridge_slave_1: entered allmulticast mode [ 89.868301][ T5835] bridge_slave_1: entered promiscuous mode [ 89.895262][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.905423][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.912719][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.939386][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.951208][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.958357][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.966436][ T5833] bridge_slave_1: entered allmulticast mode [ 89.973739][ T5833] bridge_slave_1: entered promiscuous mode [ 89.983477][ T5827] team0: Port device team_slave_1 added [ 90.031183][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.041056][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.048024][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.074236][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.101915][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.111410][ T5839] Bluetooth: hci0: command tx timeout [ 90.117174][ T5839] Bluetooth: hci2: command tx timeout [ 90.117639][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.122722][ T5846] Bluetooth: hci1: command tx timeout [ 90.188451][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.197720][ T5140] Bluetooth: hci4: command tx timeout [ 90.204702][ T5140] Bluetooth: hci3: command tx timeout [ 90.226969][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.255259][ T5826] team0: Port device team_slave_0 added [ 90.262660][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.270190][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.296600][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.355568][ T5826] team0: Port device team_slave_1 added [ 90.364842][ T5835] team0: Port device team_slave_0 added [ 90.372084][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.379056][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.405984][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.422687][ T5833] team0: Port device team_slave_0 added [ 90.456498][ T5835] team0: Port device team_slave_1 added [ 90.472457][ T5833] team0: Port device team_slave_1 added [ 90.483971][ T5828] hsr_slave_0: entered promiscuous mode [ 90.492005][ T5828] hsr_slave_1: entered promiscuous mode [ 90.540919][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.547894][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.573981][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.615263][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.622313][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.649994][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.663304][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.670387][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.697714][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.710949][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.717985][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.744136][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.764629][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.774215][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.800699][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.852565][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.859551][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.885914][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.916149][ T5827] hsr_slave_0: entered promiscuous mode [ 90.923053][ T5827] hsr_slave_1: entered promiscuous mode [ 90.929245][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.937145][ T5827] Cannot create hsr debugfs directory [ 91.016433][ T5826] hsr_slave_0: entered promiscuous mode [ 91.023796][ T5826] hsr_slave_1: entered promiscuous mode [ 91.030304][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.037884][ T5826] Cannot create hsr debugfs directory [ 91.124025][ T5833] hsr_slave_0: entered promiscuous mode [ 91.131063][ T5833] hsr_slave_1: entered promiscuous mode [ 91.137122][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.144882][ T5833] Cannot create hsr debugfs directory [ 91.210754][ T5835] hsr_slave_0: entered promiscuous mode [ 91.217043][ T5835] hsr_slave_1: entered promiscuous mode [ 91.223389][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.231954][ T5835] Cannot create hsr debugfs directory [ 91.771032][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.788643][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.814691][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.834456][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.883246][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.911585][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.929046][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.955364][ T1541] cfg80211: failed to load regulatory.db [ 91.972963][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.027362][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.047864][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.072357][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.086352][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.191134][ T5140] Bluetooth: hci2: command tx timeout [ 92.191152][ T5839] Bluetooth: hci1: command tx timeout [ 92.191192][ T5839] Bluetooth: hci0: command tx timeout [ 92.218939][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.245501][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.269744][ T5839] Bluetooth: hci3: command tx timeout [ 92.279987][ T5839] Bluetooth: hci4: command tx timeout [ 92.303795][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.315135][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.376247][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.392639][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.404767][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.416049][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.437075][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.553242][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.586187][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.593461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.605631][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.612758][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.633929][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.667083][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.726292][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.747771][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.779035][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.786231][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.796739][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.803956][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.837411][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.844610][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.854899][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.862084][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.917364][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.036815][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.053749][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.117153][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.124414][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.145067][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.152275][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.195019][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.227154][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.234765][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.303579][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.310802][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.438081][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.693380][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.712877][ T5827] veth0_vlan: entered promiscuous mode [ 93.762720][ T5827] veth1_vlan: entered promiscuous mode [ 93.806009][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.996360][ T5828] veth0_vlan: entered promiscuous mode [ 94.012015][ T5828] veth1_vlan: entered promiscuous mode [ 94.019100][ T5827] veth0_macvtap: entered promiscuous mode [ 94.052786][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.061963][ T5826] veth0_vlan: entered promiscuous mode [ 94.078983][ T5827] veth1_macvtap: entered promiscuous mode [ 94.136342][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.146439][ T5826] veth1_vlan: entered promiscuous mode [ 94.162905][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.204950][ T5828] veth0_macvtap: entered promiscuous mode [ 94.221070][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.248842][ T5828] veth1_macvtap: entered promiscuous mode [ 94.262174][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.274714][ T5839] Bluetooth: hci2: command tx timeout [ 94.275283][ T5846] Bluetooth: hci1: command tx timeout [ 94.281383][ T5839] Bluetooth: hci0: command tx timeout [ 94.297192][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.308086][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.318276][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.351006][ T5839] Bluetooth: hci4: command tx timeout [ 94.351091][ T5846] Bluetooth: hci3: command tx timeout [ 94.478614][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.490502][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.502223][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.526509][ T5826] veth0_macvtap: entered promiscuous mode [ 94.575274][ T5835] veth0_vlan: entered promiscuous mode [ 94.582923][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.596379][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.608716][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.623645][ T5826] veth1_macvtap: entered promiscuous mode [ 94.647711][ T5835] veth1_vlan: entered promiscuous mode [ 94.660569][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.668522][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.671872][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.693584][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.702471][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711271][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.797165][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.809271][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.820576][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.831639][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.845890][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.855278][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.868351][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.879637][ T5833] veth0_vlan: entered promiscuous mode [ 94.889525][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.903410][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.913936][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.925182][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.936450][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.962731][ T5833] veth1_vlan: entered promiscuous mode [ 95.033708][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.043714][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.057339][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.066751][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.107498][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.161438][ T5835] veth0_macvtap: entered promiscuous mode [ 95.173111][ T5833] veth0_macvtap: entered promiscuous mode [ 95.184993][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.208056][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.256227][ T5833] veth1_macvtap: entered promiscuous mode [ 95.282731][ T5835] veth1_macvtap: entered promiscuous mode [ 95.312883][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.341942][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.358539][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.376099][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.397237][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.408201][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.424299][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.437493][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.476439][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.551931][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.566047][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.576787][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.588261][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.609536][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.649250][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.663251][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.692705][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.702385][ T120] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.716773][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.726764][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.736511][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.773815][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.792350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.811475][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.831093][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.870975][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.884334][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.899857][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.913847][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.925183][ T120] usb 2-1: config 0 has no interfaces? [ 95.925626][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.949068][ T120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 95.950368][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.959016][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.980073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.996441][ T120] usb 2-1: Product: syz [ 96.007050][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.089718][ T120] usb 2-1: Manufacturer: syz [ 96.094400][ T120] usb 2-1: SerialNumber: syz [ 96.129407][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.164473][ T120] usb 2-1: config 0 descriptor?? [ 96.199224][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.229058][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.256004][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.268057][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.282782][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.293637][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.311096][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.327921][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.338194][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.352698][ T5846] Bluetooth: hci1: command tx timeout [ 96.353353][ T5839] Bluetooth: hci2: command tx timeout [ 96.364417][ T5846] Bluetooth: hci0: command tx timeout [ 96.380492][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.430341][ T5839] Bluetooth: hci4: command tx timeout [ 96.435855][ T5839] Bluetooth: hci3: command tx timeout [ 96.544627][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.555430][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565329][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.582579][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.606552][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.636353][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.669956][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.687375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.708611][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.749015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.878331][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.894816][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.940124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.036593][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.055443][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.100412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.227572][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.236189][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.450273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.738476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.820740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.829906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.592988][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.659858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 98.898727][ T47] usb 2-1: USB disconnect, device number 2 [ 98.948709][ T5960] 8021q: VLANs not supported on caif0 [ 99.779993][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.613409][ T5881] usb 1-1: config 0 has no interfaces? [ 100.650155][ T5881] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.659330][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.669215][ T5881] usb 1-1: Product: syz [ 100.683200][ T5881] usb 1-1: Manufacturer: syz [ 100.700821][ T5881] usb 1-1: SerialNumber: syz [ 100.743407][ T5881] usb 1-1: config 0 descriptor?? [ 101.156166][ T5995] syz.1.23: attempt to access beyond end of device [ 101.156166][ T5995] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 101.169175][ T5995] qnx6: unable to read the first superblock [ 101.175445][ T5995] syz.1.23: attempt to access beyond end of device [ 101.175445][ T5995] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 101.188091][ T5995] qnx6: unable to read the first superblock [ 101.194140][ T5995] qnx6: unable to read the first superblock [ 101.404079][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 101.418227][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.922245][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.409281][ T6012] TCP: out of memory -- consider tuning tcp_mem [ 104.763911][ T5893] usb 4-1: config index 0 descriptor too short (expected 37691, got 77) [ 104.790418][ T5893] usb 4-1: config 83 has too many interfaces: 132, using maximum allowed: 32 [ 104.799359][ T5893] usb 4-1: config 83 has an invalid descriptor of length 153, skipping remainder of the config [ 104.870626][ T5893] usb 4-1: config 83 has 0 interfaces, different from the descriptor's value: 132 [ 105.166181][ T5893] usb 4-1: string descriptor 0 read error: -71 [ 105.188731][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.257850][ T1541] usb 1-1: USB disconnect, device number 2 [ 105.271704][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.336711][ T5893] usb 4-1: can't set config #83, error -71 [ 105.405841][ T5893] usb 4-1: USB disconnect, device number 2 [ 106.019831][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.216091][ T5893] usb 1-1: config 0 has no interfaces? [ 106.245377][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 106.294614][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.531025][ T5893] usb 1-1: Product: syz [ 106.535272][ T5893] usb 1-1: Manufacturer: syz [ 106.627634][ T6045] could not allocate digest TFM handle sha384-arm64 [ 106.658295][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.739711][ T5893] usb 1-1: SerialNumber: syz [ 106.849950][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.332502][ T5893] usb 1-1: config 0 descriptor?? [ 107.524151][ T5881] usb 3-1: config 0 has no interfaces? [ 107.609448][ T5881] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 107.635705][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.650265][ T5881] usb 3-1: Product: syz [ 107.658972][ T5881] usb 3-1: Manufacturer: syz [ 107.712767][ T5881] usb 3-1: SerialNumber: syz [ 107.766711][ T5881] usb 3-1: config 0 descriptor?? [ 107.944198][ T6057] bridge0: port 3(macvlan0) entered blocking state [ 108.702678][ T6057] bridge0: port 3(macvlan0) entered disabled state [ 108.831687][ T6057] macvlan0: entered allmulticast mode [ 108.855192][ T9] IPVS: starting estimator thread 0... [ 108.919757][ T6057] veth1_vlan: entered allmulticast mode [ 108.934219][ T6057] macvlan0: entered promiscuous mode [ 108.954189][ T6057] bridge0: port 3(macvlan0) entered blocking state [ 108.954336][ T6057] bridge0: port 3(macvlan0) entered forwarding state [ 109.124153][ T6061] IPVS: using max 48 ests per chain, 115200 per kthread [ 109.973418][ T6071] Bluetooth: MGMT ver 1.23 [ 110.903763][ T9] usb 3-1: USB disconnect, device number 2 [ 111.281524][ T6074] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 111.281595][ T6074] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 111.851972][ T9] usb 1-1: USB disconnect, device number 3 [ 116.104295][ T6138] netlink: 56 bytes leftover after parsing attributes in process `syz.2.57'. [ 116.113503][ T6138] nbd: must specify at least one socket [ 116.903593][ T6133] sctp: failed to load transform for md5: -2 [ 117.258807][ T6156] netlink: 72 bytes leftover after parsing attributes in process `syz.2.60'. [ 120.380935][ T6191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.70'. [ 120.390030][ T6191] nbd: must specify at least one socket [ 121.579832][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.772372][ T9] usb 2-1: config 0 has no interfaces? [ 121.787710][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 121.797414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.807276][ T9] usb 2-1: Product: syz [ 121.828712][ T9] usb 2-1: Manufacturer: syz [ 121.846333][ T9] usb 2-1: SerialNumber: syz [ 121.871739][ T9] usb 2-1: config 0 descriptor?? [ 121.956212][ T6208] syzkaller0: entered promiscuous mode [ 121.962085][ T6208] syzkaller0: entered allmulticast mode [ 123.407933][ T6218] loop2: detected capacity change from 0 to 7 [ 123.466769][ T6218] Dev loop2: unable to read RDB block 7 [ 123.502486][ T6218] loop2: AHDI p2 [ 123.539968][ T6218] loop2: partition table partially beyond EOD, truncated [ 123.901686][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 123.910853][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 124.641537][ T6229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.81'. [ 124.650672][ T6229] nbd: must specify at least one socket [ 126.089098][ T5893] usb 2-1: USB disconnect, device number 3 [ 126.210746][ T6239] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 129.943628][ T6276] futex_wake_op: syz.4.92 tries to shift op by -1; fix this program [ 129.963734][ T6274] syz.1.93: attempt to access beyond end of device [ 129.963734][ T6274] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 129.976603][ T6274] qnx6: unable to read the first superblock [ 129.983077][ T6274] syz.1.93: attempt to access beyond end of device [ 129.983077][ T6274] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 129.996547][ T6274] qnx6: unable to read the first superblock [ 130.002564][ T6274] qnx6: unable to read the first superblock [ 130.099513][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 130.108393][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 131.589679][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.808274][ T5844] usb 1-1: config 0 has no interfaces? [ 131.877167][ T5844] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.888857][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.912656][ T5844] usb 1-1: Product: syz [ 131.927509][ T5844] usb 1-1: Manufacturer: syz [ 131.948713][ T5844] usb 1-1: SerialNumber: syz [ 131.980994][ T5844] usb 1-1: config 0 descriptor?? [ 132.050948][ T6293] netlink: 'syz.1.99': attribute type 7 has an invalid length. [ 132.060219][ T6293] netlink: 'syz.1.99': attribute type 8 has an invalid length. [ 132.914309][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920876][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.188351][ T6302] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 133.592126][ T5844] usb 1-1: USB disconnect, device number 4 [ 133.721318][ T6306] bond_slave_0: entered promiscuous mode [ 133.727282][ T6306] bond_slave_1: entered promiscuous mode [ 133.922173][ T6306] vlan2: entered promiscuous mode [ 133.927305][ T6306] bond0: entered promiscuous mode [ 134.875962][ T6314] 8021q: VLANs not supported on caif0 [ 135.337504][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.580180][ T6324] Zero length message leads to an empty skb [ 135.705932][ T47] usb 5-1: config 0 has no interfaces? [ 135.722145][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.732263][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.438074][ T47] usb 5-1: Product: syz [ 136.540200][ T47] usb 5-1: Manufacturer: syz [ 136.544830][ T47] usb 5-1: SerialNumber: syz [ 136.641556][ T47] usb 5-1: config 0 descriptor?? [ 136.940516][ T5844] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.059883][ T6333] ======================================================= [ 137.059883][ T6333] WARNING: The mand mount option has been deprecated and [ 137.059883][ T6333] and is ignored by this kernel. Remove the mand [ 137.059883][ T6333] option from the mount to silence this warning. [ 137.059883][ T6333] ======================================================= [ 137.096058][ T6333] cgroup2: Unknown parameter 'lowerdir' [ 137.882337][ T5844] usb 1-1: config index 0 descriptor too short (expected 8192, got 18) [ 137.890888][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.909827][ T5844] usb 1-1: config 0 has no interfaces? [ 137.919327][ T5844] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 137.928891][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.937310][ T5844] usb 1-1: Product: syz [ 137.946035][ T5844] usb 1-1: Manufacturer: syz [ 137.953443][ T5844] usb 1-1: SerialNumber: syz [ 137.961848][ T5844] usb 1-1: config 0 descriptor?? [ 138.249080][ T5844] usb 1-1: USB disconnect, device number 5 [ 139.190047][ T5880] usb 5-1: USB disconnect, device number 2 [ 140.371777][ T6343] could not allocate digest TFM handle sha384-arm64 [ 140.433459][ T6362] bond_slave_0: entered promiscuous mode [ 140.439214][ T6362] bond_slave_1: entered promiscuous mode [ 140.475061][ T6362] vlan2: entered promiscuous mode [ 140.480273][ T6362] bond0: entered promiscuous mode [ 141.792096][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 142.699548][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 142.715201][ T6386] tipc: Can't bind to reserved service type 0 [ 143.576074][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.789881][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 143.814140][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 143.831216][ T6393] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 143.849201][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.869154][ T6393] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 143.871403][ T5883] usb 2-1: Product: syz [ 143.901263][ T5883] usb 2-1: Manufacturer: syz [ 143.906053][ T5883] usb 2-1: SerialNumber: syz [ 143.918981][ T5883] usb 2-1: config 0 descriptor?? [ 143.934902][ T5883] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 144.162131][ T5883] gspca_sunplus: reg_w_riv err -71 [ 144.262087][ T6385] syz.1.124 uses obsolete (PF_INET,SOCK_PACKET) [ 144.271858][ T5883] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 144.312598][ T5883] usb 2-1: USB disconnect, device number 4 [ 144.846952][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'. [ 145.482006][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 146.970839][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.157665][ T5880] usb 3-1: config 0 has no interfaces? [ 147.196049][ T5880] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.227163][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.236966][ T5880] usb 3-1: Product: syz [ 147.245947][ T5880] usb 3-1: Manufacturer: syz [ 147.254543][ T5880] usb 3-1: SerialNumber: syz [ 147.264631][ T5880] usb 3-1: config 0 descriptor?? [ 147.327203][ T6447] bridge_slave_0: left allmulticast mode [ 147.355639][ T6447] bridge_slave_0: left promiscuous mode [ 147.422622][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.467496][ T6447] bridge_slave_1: left allmulticast mode [ 147.479824][ T5844] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 147.486913][ T6447] bridge_slave_1: left promiscuous mode [ 147.570063][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.622982][ T6447] bond0: (slave bond_slave_0): Releasing backup interface [ 147.674838][ T5844] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 147.690483][ T5844] usb 4-1: config 0 has no interface number 0 [ 147.703589][ T5844] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 147.729127][ T6447] bond0: (slave bond_slave_1): Releasing backup interface [ 147.768925][ T5844] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 147.778163][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.792484][ T5844] usb 4-1: Product: syz [ 147.796834][ T5844] usb 4-1: Manufacturer: syz [ 147.809514][ T5844] usb 4-1: SerialNumber: syz [ 147.819919][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.877454][ T6447] team0: Port device team_slave_0 removed [ 147.888987][ T6447] team0: Port device team_slave_1 removed [ 147.895997][ T5844] usb 4-1: config 0 descriptor?? [ 147.903800][ T6446] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.916258][ T5844] usb-storage 4-1:0.20: USB Mass Storage device detected [ 147.924287][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.932328][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 147.949236][ T5844] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 147.957684][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.971518][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.989849][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 147.996496][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.008831][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.057633][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.118078][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.131377][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.146594][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 148.156239][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 148.178770][ T5881] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 148.237574][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.250527][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.147'. [ 148.310314][ T6446] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 148.355753][ T6446] team0: entered promiscuous mode [ 148.404914][ T5881] usb 1-1: config 0 descriptor?? [ 148.418030][ T6446] team_slave_0: entered promiscuous mode [ 148.481944][ T6446] team_slave_1: entered promiscuous mode [ 149.010140][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.062503][ T5883] usb 4-1: USB disconnect, device number 3 [ 149.088817][ T5881] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 149.238506][ T5880] usb 5-1: config 0 has no interfaces? [ 149.370152][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.413428][ T5880] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 149.427160][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.439397][ T5880] usb 5-1: Product: syz [ 149.467760][ T5880] usb 5-1: Manufacturer: syz [ 149.510453][ T5880] usb 5-1: SerialNumber: syz [ 149.510693][ T5844] usb 1-1: USB disconnect, device number 6 [ 149.536051][ T5880] usb 5-1: config 0 descriptor?? [ 149.553446][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 149.610615][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 149.660059][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.749684][ T5920] usb 2-1: Product: syz [ 149.753911][ T5920] usb 2-1: Manufacturer: syz [ 149.882719][ T5920] usb 2-1: SerialNumber: syz [ 150.660949][ T5920] usb 2-1: config 0 descriptor?? [ 150.696570][ T5920] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 150.708404][ T5880] usb 3-1: USB disconnect, device number 3 [ 150.795418][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.804843][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.058350][ T5920] gspca_sunplus: reg_w_riv err -71 [ 151.077467][ T5920] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 151.378503][ T5920] usb 2-1: USB disconnect, device number 5 [ 152.696258][ T5881] usb 5-1: USB disconnect, device number 3 [ 154.403573][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 154.489831][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.946837][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.043915][ T5844] usb 5-1: config 0 has no interfaces? [ 155.068689][ T5844] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.125908][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.192073][ T5844] usb 5-1: config 0 descriptor?? [ 155.399739][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.608225][ T47] usb 4-1: config 0 has no interfaces? [ 155.746283][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.757535][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.766029][ T47] usb 4-1: Product: syz [ 155.770338][ T47] usb 4-1: Manufacturer: syz [ 155.775030][ T47] usb 4-1: SerialNumber: syz [ 155.794751][ T47] usb 4-1: config 0 descriptor?? [ 156.112469][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.289838][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 156.307862][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 156.321891][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.365332][ T47] usb 2-1: Product: syz [ 156.394614][ T47] usb 2-1: Manufacturer: syz [ 156.459655][ T47] usb 2-1: SerialNumber: syz [ 156.528871][ T47] usb 2-1: config 0 descriptor?? [ 156.555814][ T47] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 156.754721][ T47] gspca_sunplus: reg_w_riv err -71 [ 156.789947][ T47] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 156.801128][ T47] usb 2-1: USB disconnect, device number 6 [ 157.005990][ T6551] vlan2: entered promiscuous mode [ 158.191486][ T47] usb 5-1: USB disconnect, device number 4 [ 159.741954][ T47] usb 4-1: USB disconnect, device number 4 [ 159.895901][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 159.969471][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 159.978639][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 160.654982][ T6611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.177'. [ 160.664215][ T6611] nbd: must specify at least one socket [ 161.476442][ T6614] vlan2: entered promiscuous mode [ 161.713635][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.893641][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 161.919462][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 161.935771][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.954525][ T47] usb 2-1: Product: syz [ 161.958752][ T47] usb 2-1: Manufacturer: syz [ 161.965715][ T47] usb 2-1: SerialNumber: syz [ 162.014123][ T47] usb 2-1: config 0 descriptor?? [ 162.037174][ T47] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 162.231431][ T47] gspca_sunplus: reg_w_riv err -71 [ 162.236630][ T47] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 162.329822][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.390182][ T47] usb 2-1: USB disconnect, device number 7 [ 162.482831][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.494293][ T9] usb 4-1: config 0 has no interfaces? [ 162.557933][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.579821][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.053911][ T9] usb 4-1: config 0 descriptor?? [ 163.249708][ T5893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.419840][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.601432][ T5893] usb 1-1: config 0 has no interfaces? [ 163.614922][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.624772][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.644664][ T5893] usb 1-1: Product: syz [ 163.648901][ T5893] usb 1-1: Manufacturer: syz [ 163.671523][ T5893] usb 1-1: SerialNumber: syz [ 163.839189][ T5893] usb 1-1: config 0 descriptor?? [ 163.879342][ T5883] usb 2-1: config 0 has no interfaces? [ 163.899753][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.955989][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.981211][ T5883] usb 2-1: Product: syz [ 164.022869][ T5883] usb 2-1: Manufacturer: syz [ 164.067813][ T5883] usb 2-1: SerialNumber: syz [ 164.183949][ T5883] usb 2-1: config 0 descriptor?? [ 164.489961][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 164.536144][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 164.545017][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 164.625805][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.921008][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 165.003882][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 165.066322][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.078529][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 165.097987][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.180337][ T9] usb 5-1: config 0 descriptor?? [ 165.795413][ T5883] usb 4-1: USB disconnect, device number 5 [ 166.420273][ T5883] usb 2-1: USB disconnect, device number 8 [ 166.972613][ T5893] usb 1-1: USB disconnect, device number 7 [ 166.980533][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.167583][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 167.194761][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 167.232178][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.286986][ T5883] usb 2-1: Product: syz [ 167.347033][ T5883] usb 2-1: Manufacturer: syz [ 167.365849][ T5883] usb 2-1: SerialNumber: syz [ 167.522465][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 167.547928][ T5883] usb 2-1: config 0 descriptor?? [ 167.556216][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 167.624366][ T5883] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 167.668944][ T9] usb 5-1: USB disconnect, device number 5 [ 167.898119][ T5883] gspca_sunplus: reg_w_riv err -71 [ 167.920067][ T5883] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 167.958116][ T5883] usb 2-1: USB disconnect, device number 9 [ 168.294424][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 170.061390][ T6717] input: syz0 as /devices/virtual/input/input5 [ 170.192750][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 170.568282][ T6723] cgroup2: Unknown parameter 'lowerdir' [ 172.174164][ T6736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 172.184463][ T6736] nbd: must specify at least one socket [ 172.790137][ T6738] syz.0.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.870301][ T6732] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.192136][ T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 174.261745][ T5917] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 174.349912][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 174.356566][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.356587][ T47] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.356611][ T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 174.356624][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.358664][ T47] usb 1-1: config 0 descriptor?? [ 174.455650][ T5917] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 174.455672][ T5917] usb 3-1: config 0 has no interface number 0 [ 174.455699][ T5917] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 174.457934][ T5917] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 174.457956][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.457970][ T5917] usb 3-1: Product: syz [ 174.457979][ T5917] usb 3-1: Manufacturer: syz [ 174.457988][ T5917] usb 3-1: SerialNumber: syz [ 174.460734][ T5917] usb 3-1: config 0 descriptor?? [ 174.461937][ T6746] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.463122][ T5917] usb-storage 3-1:0.20: USB Mass Storage device detected [ 174.516599][ T5917] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 174.651037][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.670399][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.670792][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.679126][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 174.679153][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 174.714858][ T6746] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 174.719391][ T6746] team0: entered promiscuous mode [ 174.719411][ T6746] team_slave_0: entered promiscuous mode [ 174.722246][ T6746] team_slave_1: entered promiscuous mode [ 174.726926][ T6746] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 174.726975][ T6746] Cannot create hsr debugfs directory [ 174.740935][ T5917] usb 3-1: USB disconnect, device number 4 [ 174.820655][ T9] usb 4-1: config 0 has no interfaces? [ 174.842366][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.842402][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.842423][ T9] usb 4-1: Product: syz [ 174.842439][ T9] usb 4-1: Manufacturer: syz [ 174.842454][ T9] usb 4-1: SerialNumber: syz [ 174.849272][ T9] usb 4-1: config 0 descriptor?? [ 176.029809][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.196914][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 176.211270][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 176.211307][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.211326][ T5917] usb 5-1: Product: syz [ 176.211342][ T5917] usb 5-1: Manufacturer: syz [ 176.211357][ T5917] usb 5-1: SerialNumber: syz [ 176.217232][ T5917] usb 5-1: config 0 descriptor?? [ 176.222967][ T5917] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 176.456370][ T5917] gspca_sunplus: reg_w_riv err -71 [ 176.457452][ T5917] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 177.196412][ T5917] usb 5-1: USB disconnect, device number 6 [ 177.317020][ T6741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.318493][ T47] usb 1-1: USB disconnect, device number 8 [ 177.346054][ T6775] bond_slave_0: entered promiscuous mode [ 177.346134][ T6775] bond_slave_1: entered promiscuous mode [ 177.346271][ T6775] vlan2: entered promiscuous mode [ 177.346287][ T6775] bond0: entered promiscuous mode [ 178.630441][ T5917] usb 4-1: USB disconnect, device number 6 [ 179.982258][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.190269][ T9] usb 4-1: config 0 has no interfaces? [ 180.207459][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.216923][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.237218][ T9] usb 4-1: Product: syz [ 180.253275][ T9] usb 4-1: Manufacturer: syz [ 180.320952][ T9] usb 4-1: SerialNumber: syz [ 180.357169][ T9] usb 4-1: config 0 descriptor?? [ 182.789777][ T5893] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.841404][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 183.240714][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 183.861783][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 183.991112][ T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 184.020594][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.090750][ T5844] usb 4-1: USB disconnect, device number 7 [ 184.102133][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.116006][ T5893] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.136830][ T47] usb 3-1: Product: syz [ 184.149705][ T5893] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.158937][ T47] usb 3-1: Manufacturer: syz [ 184.184498][ T47] usb 3-1: SerialNumber: syz [ 184.198039][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.221392][ T47] usb 3-1: config 0 descriptor?? [ 184.249108][ T5893] usb 5-1: config 0 descriptor?? [ 184.267123][ T47] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 184.495261][ T47] gspca_sunplus: reg_w_riv err -71 [ 184.766409][ T47] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 184.837703][ T47] usb 3-1: USB disconnect, device number 5 [ 184.871196][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.042152][ T9] usb 2-1: config 0 has no interfaces? [ 185.056264][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.065747][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.075116][ T9] usb 2-1: Product: syz [ 185.079937][ T9] usb 2-1: Manufacturer: syz [ 185.100503][ T9] usb 2-1: SerialNumber: syz [ 185.123510][ T9] usb 2-1: config 0 descriptor?? [ 185.512679][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.539978][ T9] usb 5-1: USB disconnect, device number 7 [ 187.818974][ T5844] usb 2-1: USB disconnect, device number 10 [ 188.959899][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.215753][ T9] usb 1-1: config 0 has no interfaces? [ 189.379814][ T5881] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.511903][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 189.679791][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 190.106258][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.121407][ T9] usb 1-1: Product: syz [ 190.125585][ T9] usb 1-1: Manufacturer: syz [ 190.136110][ T9] usb 1-1: SerialNumber: syz [ 190.146446][ T9] usb 1-1: config 0 descriptor?? [ 190.208250][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 190.234720][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.273547][ T5881] usb 2-1: Product: syz [ 190.287551][ T5881] usb 2-1: Manufacturer: syz [ 190.327874][ T5881] usb 2-1: SerialNumber: syz [ 190.380731][ T5881] usb 2-1: config 0 descriptor?? [ 190.423034][ T5881] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 190.828469][ T5881] gspca_sunplus: reg_w_riv err -71 [ 190.833882][ T5881] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 190.857883][ T5881] usb 2-1: USB disconnect, device number 11 [ 191.569776][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.872928][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 191.884099][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.948151][ T5844] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.985524][ T5844] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 192.016211][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.042352][ T5844] usb 3-1: config 0 descriptor?? [ 192.419455][ T5844] usb 1-1: USB disconnect, device number 9 [ 192.517747][ T6978] syz.3.254: attempt to access beyond end of device [ 192.517747][ T6978] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 192.531009][ T6978] qnx6: unable to read the first superblock [ 192.538283][ T6978] syz.3.254: attempt to access beyond end of device [ 192.538283][ T6978] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 192.551394][ T6978] qnx6: unable to read the first superblock [ 192.557356][ T6978] qnx6: unable to read the first superblock [ 193.336073][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 193.419128][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.430885][ T5917] usb 3-1: USB disconnect, device number 6 [ 193.883039][ T6989] cgroup2: Unknown parameter 'lowerdir' [ 194.380935][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387325][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.658161][ T7003] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 200.109918][ T5917] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.139687][ T1541] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.417100][ T1541] usb 2-1: config 0 has no interfaces? [ 200.499276][ T5917] usb 4-1: config 0 has no interfaces? [ 200.532810][ T5917] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.567712][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.760060][ T5917] usb 4-1: Product: syz [ 200.764252][ T5917] usb 4-1: Manufacturer: syz [ 200.772401][ T1541] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.864700][ T7037] syz.2.267: attempt to access beyond end of device [ 200.864700][ T7037] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 200.877843][ T7037] qnx6: unable to read the first superblock [ 200.885278][ T7037] syz.2.267: attempt to access beyond end of device [ 200.885278][ T7037] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 200.898234][ T7037] qnx6: unable to read the first superblock [ 200.904264][ T7037] qnx6: unable to read the first superblock [ 201.362718][ T5917] usb 4-1: SerialNumber: syz [ 201.377138][ T5917] usb 4-1: config 0 descriptor?? [ 201.459911][ T1541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.473663][ T1541] usb 2-1: Product: syz [ 201.477843][ T1541] usb 2-1: Manufacturer: syz [ 201.579865][ T1541] usb 2-1: SerialNumber: syz [ 201.602307][ T1541] usb 2-1: config 0 descriptor?? [ 202.349649][ T5893] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 202.670307][ T7045] cgroup2: Unknown parameter 'lowerdir' [ 203.327096][ T5893] usb 1-1: config 0 has no interfaces? [ 203.463940][ T5917] usb 2-1: USB disconnect, device number 12 [ 203.489889][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.564964][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.585383][ T5893] usb 1-1: Product: syz [ 203.599841][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 203.609243][ T5893] usb 1-1: Manufacturer: syz [ 203.795607][ T5893] usb 1-1: SerialNumber: syz [ 203.969883][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 204.540812][ T5893] usb 1-1: config 0 descriptor?? [ 204.558474][ T5893] usb 1-1: can't set config #0, error -71 [ 204.571760][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.586954][ T5893] usb 1-1: USB disconnect, device number 10 [ 204.622495][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.678074][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 204.737260][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.811010][ T9] usb 3-1: config 0 descriptor?? [ 204.849778][ T9] usb 3-1: can't set config #0, error -71 [ 204.885194][ T9] usb 3-1: USB disconnect, device number 7 [ 208.694020][ T9] usb 4-1: USB disconnect, device number 8 [ 209.769661][ T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.221275][ T47] usb 4-1: config 0 has no interfaces? [ 210.271623][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 210.297706][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.328462][ T47] usb 4-1: Product: syz [ 210.348838][ T47] usb 4-1: Manufacturer: syz [ 210.363337][ T47] usb 4-1: SerialNumber: syz [ 210.527551][ T47] usb 4-1: config 0 descriptor?? [ 211.715040][ T7110] loop2: detected capacity change from 0 to 7 [ 211.723587][ T7110] Dev loop2: unable to read RDB block 7 [ 211.809760][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.894269][ T7110] loop2: AHDI p2 [ 211.899676][ T7110] loop2: partition table partially beyond EOD, truncated [ 212.020626][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 212.026859][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 212.037294][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 212.049052][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 212.056056][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 212.679666][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 212.734524][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.754122][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.764349][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.775907][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.797933][ T9] usb 1-1: config 0 descriptor?? [ 216.838424][ T5880] usb 4-1: USB disconnect, device number 9 [ 218.566815][ T7135] input: syz0 as /devices/virtual/input/input6 [ 218.598157][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 218.648857][ T5880] usb 1-1: USB disconnect, device number 11 [ 221.719520][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'. [ 221.744390][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 221.753580][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'. [ 222.539757][ T5880] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.780583][ T5880] usb 2-1: config 0 has no interfaces? [ 222.849951][ T5880] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 222.981603][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.074419][ T5880] usb 2-1: Product: syz [ 223.111112][ T5880] usb 2-1: Manufacturer: syz [ 223.140214][ T5880] usb 2-1: SerialNumber: syz [ 223.265099][ T5880] usb 2-1: config 0 descriptor?? [ 223.459670][ T47] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 224.161046][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 224.310269][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.560050][ T47] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.630429][ T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 224.659634][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.707595][ T47] usb 1-1: config 0 descriptor?? [ 225.207099][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.312'. [ 225.848768][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 226.082925][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 226.092269][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 226.201384][ T7207] bridge_slave_0: left allmulticast mode [ 226.225093][ T7207] bridge_slave_0: left promiscuous mode [ 226.256208][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.701805][ T7207] bridge_slave_1: left allmulticast mode [ 226.777744][ T7207] bridge_slave_1: left promiscuous mode [ 226.796921][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.838181][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.888284][ T5880] usb 2-1: USB disconnect, device number 13 [ 226.924026][ T7207] bond0: (slave bond_slave_0): Releasing backup interface [ 227.014273][ T7207] bond_slave_0: left promiscuous mode [ 227.027513][ T7207] bond0: (slave bond_slave_1): Releasing backup interface [ 227.042835][ T5883] usb 1-1: USB disconnect, device number 12 [ 227.053024][ T7207] bond_slave_1: left promiscuous mode [ 227.070558][ T7207] team_slave_0: left promiscuous mode [ 227.093829][ T7207] team0: Port device team_slave_0 removed [ 227.103005][ T7207] team_slave_1: left promiscuous mode [ 227.133307][ T7207] team0: Port device team_slave_1 removed [ 227.161061][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.180687][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.193454][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.256824][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.916295][ T7229] cgroup2: Unknown parameter 'lowerdir' [ 228.971286][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 229.070708][ T7243] vlan2: entered promiscuous mode [ 229.078636][ T7243] batadv0: entered promiscuous mode [ 230.542467][ T7259] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 230.639721][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 230.830183][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 230.845268][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.855819][ T5829] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.865296][ T5829] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 230.888263][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.913527][ T5829] usb 3-1: config 0 descriptor?? [ 231.437779][ T7265] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 231.531656][ T7265] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 231.799598][ T30] audit: type=1326 audit(1744550755.745:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 232.047904][ T30] audit: type=1326 audit(1744550755.745:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 232.083486][ T30] audit: type=1326 audit(1744550755.755:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 232.159501][ T7281] cgroup2: Unknown parameter 'lowerdir' [ 232.721310][ T30] audit: type=1326 audit(1744550755.755:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 232.939966][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.954303][ T30] audit: type=1326 audit(1744550755.755:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 232.989839][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.015838][ T9] usb 3-1: USB disconnect, device number 8 [ 233.077485][ T30] audit: type=1326 audit(1744550755.755:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 233.174695][ T30] audit: type=1326 audit(1744550755.775:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 233.256043][ T30] audit: type=1326 audit(1744550755.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 233.278560][ T30] audit: type=1326 audit(1744550755.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 233.300050][ T30] audit: type=1326 audit(1744550755.785:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.1.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfcb8d169 code=0x7fc00000 [ 233.323909][ T5881] usb 4-1: config 0 has no interfaces? [ 233.490086][ T5881] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.525224][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.619637][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.712512][ T5881] usb 4-1: Product: syz [ 233.738604][ T5881] usb 4-1: Manufacturer: syz [ 233.766099][ T5881] usb 4-1: SerialNumber: syz [ 233.771522][ T9] usb 3-1: config 0 has no interfaces? [ 233.779495][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.794322][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.829279][ T9] usb 3-1: Product: syz [ 233.838462][ T9] usb 3-1: Manufacturer: syz [ 233.850757][ T9] usb 3-1: SerialNumber: syz [ 233.860167][ T9] usb 3-1: config 0 descriptor?? [ 233.981695][ T5881] usb 4-1: config 0 descriptor?? [ 234.109509][ T9] IPVS: starting estimator thread 0... [ 234.367861][ T7297] IPVS: using max 28 ests per chain, 67200 per kthread [ 236.568222][ T9] usb 3-1: USB disconnect, device number 9 [ 236.680109][ T7320] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 236.844343][ T7324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.344'. [ 238.726572][ T5893] usb 4-1: USB disconnect, device number 10 [ 239.104508][ T7332] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 239.137106][ T7340] bridge_slave_0: left allmulticast mode [ 239.156759][ T7332] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 239.181362][ T7340] bridge_slave_0: left promiscuous mode [ 239.205180][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.425039][ T7340] bridge_slave_1: left allmulticast mode [ 239.545618][ T7340] bridge_slave_1: left promiscuous mode [ 239.686456][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.807984][ T7340] bond0: (slave bond_slave_0): Releasing backup interface [ 239.870995][ T7340] bond_slave_0: left promiscuous mode [ 239.895886][ T7340] bond0: (slave bond_slave_1): Releasing backup interface [ 239.983557][ T7340] bond_slave_1: left promiscuous mode [ 240.006379][ T7340] team_slave_0: left promiscuous mode [ 240.084026][ T7340] team0: Port device team_slave_0 removed [ 240.101125][ T7340] team_slave_1: left promiscuous mode [ 240.296592][ T7340] team0: Port device team_slave_1 removed [ 240.341766][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.352633][ T7340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.403181][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.582927][ T7340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.702109][ T7371] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 243.499850][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 244.157826][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 244.644871][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.666396][ T5844] usb 2-1: config 0 has no interfaces? [ 244.680298][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.709840][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.743726][ T5844] usb 2-1: config 0 descriptor?? [ 245.372949][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 245.648195][ T5893] usb 5-1: config 0 has no interfaces? [ 245.662469][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 245.671815][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.701768][ T5893] usb 5-1: Product: syz [ 245.720018][ T5893] usb 5-1: Manufacturer: syz [ 245.743150][ T5893] usb 5-1: SerialNumber: syz [ 245.823733][ T5893] usb 5-1: config 0 descriptor?? [ 246.087966][ T5893] usb 2-1: USB disconnect, device number 14 [ 247.937418][ T5883] usb 5-1: USB disconnect, device number 8 [ 249.479797][ T47] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 249.568422][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 249.568443][ T30] audit: type=1326 audit(1744550773.515:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.0.382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f219398d169 code=0x0 [ 249.683349][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.723075][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 249.751078][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.779428][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.803044][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.838521][ T47] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 250.301208][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 250.984184][ T47] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 251.951522][ T47] usb 4-1: config 0 has no interfaces? [ 251.961859][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.971420][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.979832][ T47] usb 4-1: Product: syz [ 251.984040][ T47] usb 4-1: Manufacturer: syz [ 251.988700][ T47] usb 4-1: SerialNumber: syz [ 252.017446][ T47] usb 4-1: config 0 descriptor?? [ 252.775961][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 253.014045][ T5844] usb 5-1: USB disconnect, device number 9 [ 254.276690][ T5844] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 254.510017][ T5844] usb 3-1: config 0 has no interfaces? [ 254.559628][ T5844] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.598825][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.607286][ T5844] usb 3-1: Product: syz [ 254.612754][ T5844] usb 3-1: Manufacturer: syz [ 254.617473][ T5844] usb 3-1: SerialNumber: syz [ 254.724233][ T5844] usb 3-1: config 0 descriptor?? [ 254.803149][ T47] usb 4-1: USB disconnect, device number 11 [ 255.028112][ T7537] input: syz0 as /devices/virtual/input/input7 [ 255.042960][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 255.679762][ T5844] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 255.844459][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.851180][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.869085][ T5844] usb 4-1: config 0 has no interfaces? [ 255.878332][ T5844] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 255.887698][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.895967][ T5844] usb 4-1: Product: syz [ 255.900324][ T5844] usb 4-1: Manufacturer: syz [ 255.905065][ T5844] usb 4-1: SerialNumber: syz [ 255.915301][ T5844] usb 4-1: config 0 descriptor?? [ 256.735621][ T9] usb 3-1: USB disconnect, device number 10 [ 257.269694][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 257.433429][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.452631][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 257.615399][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.658793][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.675993][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.740003][ T9] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 258.693532][ T5844] usb 4-1: USB disconnect, device number 12 [ 259.179664][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.339890][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 259.356397][ T47] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 259.366679][ T47] usb 4-1: config 0 has no interface number 0 [ 259.373412][ T47] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 259.416550][ T47] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 259.525311][ T47] usb 4-1: config 0 interface 41 has no altsetting 0 [ 259.615311][ T47] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 259.629645][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.668505][ T47] usb 4-1: Product: syz [ 259.705580][ T47] usb 4-1: Manufacturer: syz [ 259.729660][ T47] usb 4-1: SerialNumber: syz [ 259.767546][ T47] usb 4-1: config 0 descriptor?? [ 259.794710][ T7581] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.803340][ T7581] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.889712][ T9] usb 3-1: USB disconnect, device number 11 [ 260.040285][ T7581] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 260.049952][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 260.069037][ T7581] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.402621][ T5881] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 261.681158][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.698984][ T7602] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 261.721282][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.880235][ T5881] usb 2-1: config 0 has no interfaces? [ 261.919725][ T5883] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 261.968447][ T5881] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.017431][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.074292][ T5881] usb 2-1: Product: syz [ 262.083085][ T5881] usb 2-1: Manufacturer: syz [ 262.097341][ T5881] usb 2-1: SerialNumber: syz [ 262.111613][ T5881] usb 2-1: config 0 descriptor?? [ 262.347870][ T5883] usb 3-1: config 0 has no interfaces? [ 262.550041][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 262.577051][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.598794][ T5883] usb 3-1: Product: syz [ 262.611467][ T5883] usb 3-1: Manufacturer: syz [ 262.626533][ T5883] usb 3-1: SerialNumber: syz [ 262.666463][ T5883] usb 3-1: config 0 descriptor?? [ 262.803075][ T47] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 262.869361][ T47] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 262.920515][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 263.101371][ T47] usb 4-1: USB disconnect, device number 13 [ 263.345222][ T5881] usb 5-1: config 0 has no interfaces? [ 263.403505][ T5881] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 263.426960][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.449350][ T5881] usb 5-1: Product: syz [ 263.466070][ T5881] usb 5-1: Manufacturer: syz [ 263.481165][ T5881] usb 5-1: SerialNumber: syz [ 263.504781][ T5881] usb 5-1: config 0 descriptor?? [ 264.207138][ T9] usb 5-1: USB disconnect, device number 10 [ 264.302426][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.424'. [ 266.975902][ T9] usb 3-1: USB disconnect, device number 12 [ 267.066438][ T7653] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 267.252096][ T9] usb 2-1: USB disconnect, device number 15 [ 267.419755][ T7653] dlm: plock device version mismatch: kernel (1.2.0), user (2047.4.64) [ 269.266449][ T7681] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 269.545269][ T7692] input: syz1 as /devices/virtual/input/input8 [ 269.642710][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 269.652346][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 269.715253][ T7692] geneve2: entered promiscuous mode [ 269.721510][ T7692] geneve2: entered allmulticast mode [ 270.599789][ T5829] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 270.755151][ T5829] usb 1-1: config 0 has no interfaces? [ 271.073406][ T5829] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.109808][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.139785][ T5829] usb 1-1: Product: syz [ 271.148697][ T5829] usb 1-1: Manufacturer: syz [ 271.158755][ T5829] usb 1-1: SerialNumber: syz [ 271.224341][ T5829] usb 1-1: config 0 descriptor?? [ 271.619932][ T7712] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 271.840170][ T5829] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.098289][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 272.517889][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.611021][ T5829] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.629309][ T5829] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 272.639264][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.665139][ T5829] usb 4-1: config 0 descriptor?? [ 273.036862][ T7730] kvm: kvm [7729]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 273.790209][ T5844] usb 1-1: USB disconnect, device number 13 [ 273.951025][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 274.068873][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 274.106906][ T7747] 8021q: VLANs not supported on caif0 [ 274.145528][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.156294][ T47] usb 3-1: config 0 has no interfaces? [ 274.162419][ T47] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.172186][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.194124][ T47] usb 3-1: config 0 descriptor?? [ 274.286493][ T7750] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 274.411585][ T9] usb 3-1: USB disconnect, device number 13 [ 274.660381][ T7703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.671927][ T9] usb 4-1: USB disconnect, device number 14 [ 274.867199][ T7755] bridge_slave_0: left allmulticast mode [ 274.874248][ T7755] bridge_slave_0: left promiscuous mode [ 274.881098][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.906667][ T7755] bridge_slave_1: left allmulticast mode [ 274.933806][ T7755] bridge_slave_1: left promiscuous mode [ 274.992526][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.202592][ T7755] bond0: (slave bond_slave_0): Releasing backup interface [ 275.362916][ T7755] bond0: (slave bond_slave_1): Releasing backup interface [ 275.466070][ T7755] team0: Port device team_slave_0 removed [ 275.514225][ T7755] team0: Port device team_slave_1 removed [ 275.546619][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.562263][ T7755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.661776][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.675600][ T7755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.796333][ T7755] macvlan0: left allmulticast mode [ 275.842319][ T7755] veth1_vlan: left allmulticast mode [ 275.847860][ T7755] macvlan0: left promiscuous mode [ 275.857140][ T7755] bridge0: port 3(macvlan0) entered disabled state [ 276.451376][ T7774] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 276.474136][ T7774] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 276.713211][ T7785] process 'syz.1.465' launched './file0' with NULL argv: empty string added [ 276.899629][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 276.960564][ T5844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 277.177383][ T5917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.231034][ T5844] usb 1-1: config index 0 descriptor too short (expected 21700, got 77) [ 277.262984][ T5844] usb 1-1: config 128 has too many interfaces: 190, using maximum allowed: 32 [ 277.276573][ T9] usb 3-1: config 0 has no interfaces? [ 277.449788][ T5844] usb 1-1: config 128 has an invalid descriptor of length 97, skipping remainder of the config [ 277.534318][ T5844] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 190 [ 277.556454][ T5844] usb 1-1: New USB device found, idVendor=011e, idProduct=0000, bcdDevice= 0.00 [ 277.570174][ T5917] usb 5-1: config 0 has no interfaces? [ 277.690694][ T47] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.728825][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 277.760964][ T5917] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 277.809938][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.818044][ T5917] usb 5-1: Product: syz [ 277.822303][ T5844] usb 1-1: SerialNumber: syz [ 277.891760][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 277.917048][ T5917] usb 5-1: Manufacturer: syz [ 277.929244][ T5917] usb 5-1: SerialNumber: syz [ 277.967808][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.981620][ T5917] usb 5-1: config 0 descriptor?? [ 278.001904][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 278.047452][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.057594][ T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 278.067195][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.086216][ T47] usb 4-1: config 0 descriptor?? [ 278.092630][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.110667][ T9] usb 3-1: Product: syz [ 278.118536][ T9] usb 3-1: Manufacturer: syz [ 278.234245][ T9] usb 3-1: SerialNumber: syz [ 278.277973][ T9] usb 3-1: config 0 descriptor?? [ 279.113659][ T5844] usb 1-1: USB disconnect, device number 14 [ 279.744544][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 280.074748][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.085046][ T5881] usb 1-1: config 0 has no interfaces? [ 280.094473][ T5881] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.107098][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.146457][ T5881] usb 1-1: config 0 descriptor?? [ 280.399949][ T5917] usb 5-1: USB disconnect, device number 11 [ 280.425408][ T5881] usb 1-1: USB disconnect, device number 15 [ 280.529763][ T7802] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 280.612996][ T5881] usb 3-1: USB disconnect, device number 14 [ 280.744601][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.779241][ T5917] usb 4-1: USB disconnect, device number 15 [ 281.219633][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 281.520102][ T5881] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 281.590073][ T5881] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.726277][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.919945][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.946782][ T5881] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.085717][ T5881] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 282.196661][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.205525][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.480143][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.527755][ T7827] futex_wake_op: syz.1.479 tries to shift op by -33; fix this program [ 282.569689][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 282.757286][ T9] usb 1-1: config 0 has no interfaces? [ 282.802443][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.825831][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.995858][ T9] usb 1-1: Product: syz [ 283.467172][ T9] usb 1-1: Manufacturer: syz [ 283.474155][ T9] usb 1-1: SerialNumber: syz [ 283.503328][ T9] usb 1-1: config 0 descriptor?? [ 283.561053][ T7838] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 283.919391][ T9] usb 5-1: USB disconnect, device number 12 [ 284.267674][ T5844] usb 1-1: USB disconnect, device number 16 [ 284.329716][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 284.527907][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.531919][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'. [ 284.562992][ T7854] vlan2: entered promiscuous mode [ 284.568268][ T7854] batadv0: entered promiscuous mode [ 284.600099][ T9] usb 5-1: config 0 has no interfaces? [ 284.605653][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.615348][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.630631][ T9] usb 5-1: config 0 descriptor?? [ 284.848551][ T9] usb 5-1: USB disconnect, device number 13 [ 285.007316][ T7861] xt_bpf: check failed: parse error [ 285.342727][ T47] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 285.709451][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 285.720781][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 285.736891][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 285.756107][ T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.779742][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.849794][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 285.962618][ T47] usb 3-1: Product: syz [ 285.972514][ T47] usb 3-1: Manufacturer: syz [ 285.984326][ T47] usb 3-1: SerialNumber: syz [ 286.000399][ T47] usb 3-1: config 0 descriptor?? [ 286.009760][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 286.019427][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 286.022336][ T47] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 286.036518][ T9] usb 5-1: config 0 has no interface number 0 [ 286.056914][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 286.084931][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 286.103087][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 286.123964][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 286.137509][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.155271][ T9] usb 5-1: Product: syz [ 286.166427][ T9] usb 5-1: Manufacturer: syz [ 286.177300][ T9] usb 5-1: SerialNumber: syz [ 286.278530][ T9] usb 5-1: config 0 descriptor?? [ 286.290828][ T7869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 286.298488][ T7869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 286.465397][ T47] usb 3-1: USB disconnect, device number 15 [ 286.518733][ T7869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 286.530096][ T7869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 286.803576][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 286.839726][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 286.877982][ T9] usb 5-1: USB disconnect, device number 14 [ 286.913447][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.159804][ T5881] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 288.321743][ T5881] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 288.330344][ T5881] usb 5-1: config 7 has no interface number 0 [ 288.360205][ T5881] usb 5-1: config 7 interface 252 has no altsetting 0 [ 288.381546][ T5881] usb 5-1: string descriptor 0 read error: -22 [ 288.387930][ T5881] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 288.428227][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.802932][ T5881] usb 5-1: USB disconnect, device number 15 [ 290.491047][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.505'. [ 292.141342][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 292.597487][ T7877] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 292.663738][ T7877] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 293.023168][ T7940] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.959783][ T5844] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.292741][ T5844] usb 5-1: config 0 has no interfaces? [ 296.306750][ T5844] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.317027][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.327017][ T5844] usb 5-1: Product: syz [ 296.331888][ T5844] usb 5-1: Manufacturer: syz [ 296.336583][ T5844] usb 5-1: SerialNumber: syz [ 296.368199][ T5844] usb 5-1: config 0 descriptor?? [ 296.719488][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 296.743012][ T5844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 296.899662][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 296.940163][ T5844] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 296.974365][ T5844] usb 4-1: config 0 has no interface number 0 [ 297.196658][ T5844] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 297.309028][ T5844] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 297.336006][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 297.394734][ T5844] usb 4-1: config 0 interface 41 has no altsetting 0 [ 297.476605][ T5844] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 297.538113][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.546399][ T5844] usb 4-1: Product: syz [ 297.550673][ T5844] usb 4-1: Manufacturer: syz [ 297.555351][ T5844] usb 4-1: SerialNumber: syz [ 297.622476][ T5917] usb 3-1: config 0 has no interfaces? [ 297.629278][ T5844] usb 4-1: config 0 descriptor?? [ 297.654335][ T7980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.710589][ T7980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.727621][ T5917] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 297.827596][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.862860][ T5917] usb 3-1: Product: syz [ 297.876510][ T5917] usb 3-1: Manufacturer: syz [ 297.905597][ T5917] usb 3-1: SerialNumber: syz [ 297.928914][ T7980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.938193][ T5917] usb 3-1: config 0 descriptor?? [ 297.969653][ T5893] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 298.001775][ T7980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.131937][ T5893] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 298.140574][ T5893] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 298.175478][ T5893] usb 2-1: config 8 has no interface number 0 [ 298.200809][ T5893] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.241897][ T5893] usb 2-1: config 8 interface 177 has no altsetting 0 [ 298.265420][ T5844] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 298.278719][ T5893] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 298.319683][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.322581][ T5844] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 298.360948][ T5893] ir_toy 2-1:8.177: required endpoints not found [ 298.363452][ T5844] usb 4-1: USB disconnect, device number 16 [ 298.605936][ T5893] usb 2-1: USB disconnect, device number 16 [ 299.251303][ T5893] usb 5-1: USB disconnect, device number 16 [ 299.293855][ T8000] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 299.321315][ T8000] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 299.335686][ T8000] macvtap1: entered promiscuous mode [ 299.431132][ T8000] macvtap1: entered allmulticast mode [ 299.576207][ T8000] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 300.604430][ T5844] usb 3-1: USB disconnect, device number 16 [ 302.365172][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 303.421070][ T8048] ptrace attach of "./syz-executor exec"[5826] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  ÿÿÿÿ  ÿÿÿÿ  "[8048] [ 304.259689][ T5883] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 305.121548][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 305.130693][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.184524][ T5844] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 305.241365][ T5883] usb 1-1: config 0 descriptor?? [ 305.466090][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 305.472380][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 305.507098][ T5844] usb 4-1: config 0 has no interfaces? [ 305.568295][ T5883] usb 1-1: USB disconnect, device number 17 [ 305.674859][ T5844] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 305.719085][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.588019][ T5844] usb 4-1: Product: syz [ 306.680942][ T5844] usb 4-1: Manufacturer: syz [ 306.699790][ T5844] usb 4-1: SerialNumber: syz [ 306.735940][ T5844] usb 4-1: config 0 descriptor?? [ 306.969657][ T5883] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 307.060510][ T8091] ptrace attach of "./syz-executor exec"[5828] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  ÿÿÿÿ  ÿÿÿÿ  "[8091] [ 307.160303][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 307.320361][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.672453][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.723575][ T5883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.753914][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 307.823163][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.850538][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.873036][ T5883] usb 1-1: SerialNumber: syz [ 307.994548][ T5883] cdc_acm 1-1:1.0: skipping garbage [ 308.077633][ T8097] capability: warning: `syz.2.558' uses deprecated v2 capabilities in a way that may be insecure [ 308.169210][ T5883] usb 4-1: USB disconnect, device number 17 [ 308.276694][ T5893] usb 1-1: USB disconnect, device number 18 [ 309.469809][ T5883] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 309.689192][ T5883] usb 2-1: config 0 has no interfaces? [ 309.721626][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.731132][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.748615][ T5883] usb 2-1: Product: syz [ 309.763024][ T5883] usb 2-1: Manufacturer: syz [ 309.850126][ T5883] usb 2-1: SerialNumber: syz [ 309.873769][ T5883] usb 2-1: config 0 descriptor?? [ 310.319893][ T8133] mmap: syz.1.564 (8133) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 310.548948][ T56] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 311.662126][ T8143] syz.3.573: attempt to access beyond end of device [ 311.662126][ T8143] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 311.675722][ T8143] qnx6: unable to read the first superblock [ 311.681958][ T8143] syz.3.573: attempt to access beyond end of device [ 311.681958][ T8143] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 311.694675][ T8143] qnx6: unable to read the first superblock [ 311.700818][ T8143] qnx6: unable to read the first superblock [ 312.187230][ T5917] usb 2-1: USB disconnect, device number 17 [ 312.439310][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 312.633339][ T8160] [ 312.635733][ T8160] ====================================================== [ 312.642851][ T8160] WARNING: possible circular locking dependency detected [ 312.649882][ T8160] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted [ 312.657031][ T8160] ------------------------------------------------------ [ 312.664069][ T8160] syz.3.578/8160 is trying to acquire lock: [ 312.669980][ T8160] ffff88802d2b70d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0xccd/0x3680 [ 312.679687][ T8160] [ 312.679687][ T8160] but task is already holding lock: [ 312.687061][ T8160] ffffffff900eb188 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0xa9a/0x3680 [ 312.696215][ T8160] [ 312.696215][ T8160] which lock already depends on the new lock. [ 312.696215][ T8160] [ 312.706617][ T8160] [ 312.706617][ T8160] the existing dependency chain (in reverse order) is: [ 312.715633][ T8160] [ 312.715633][ T8160] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 312.722861][ T8160] lock_acquire+0x116/0x2f0 [ 312.727890][ T8160] __mutex_lock+0x1a5/0x10c0 [ 312.733018][ T8160] ip_mroute_setsockopt+0x161/0x11f0 [ 312.738850][ T8160] do_ip_setsockopt+0x1114/0x39c0 [ 312.744405][ T8160] ip_setsockopt+0x63/0x100 [ 312.749430][ T8160] smc_setsockopt+0x25c/0xd50 [ 312.754640][ T8160] do_sock_setsockopt+0x3b1/0x710 [ 312.760187][ T8160] __x64_sys_setsockopt+0x1ee/0x280 [ 312.766001][ T8160] do_syscall_64+0xf3/0x230 [ 312.771032][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.777445][ T8160] [ 312.777445][ T8160] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 312.786056][ T8160] lock_acquire+0x116/0x2f0 [ 312.791085][ T8160] __mutex_lock+0x1a5/0x10c0 [ 312.796198][ T8160] smc_switch_to_fallback+0x35/0xda0 [ 312.802008][ T8160] smc_sendmsg+0x11f/0x530 [ 312.806946][ T8160] __sock_sendmsg+0x221/0x270 [ 312.812161][ T8160] __sys_sendto+0x365/0x4c0 [ 312.817190][ T8160] __x64_sys_sendto+0xde/0x100 [ 312.822483][ T8160] do_syscall_64+0xf3/0x230 [ 312.827598][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.834012][ T8160] [ 312.834012][ T8160] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 312.841755][ T8160] validate_chain+0xa69/0x24e0 [ 312.847043][ T8160] __lock_acquire+0xad5/0xd80 [ 312.852256][ T8160] lock_acquire+0x116/0x2f0 [ 312.857297][ T8160] lock_sock_nested+0x48/0x100 [ 312.862599][ T8160] do_ipv6_setsockopt+0xccd/0x3680 [ 312.868247][ T8160] ipv6_setsockopt+0x5d/0x170 [ 312.873460][ T8160] do_sock_setsockopt+0x3b1/0x710 [ 312.879017][ T8160] __x64_sys_setsockopt+0x1ee/0x280 [ 312.884739][ T8160] do_syscall_64+0xf3/0x230 [ 312.889773][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.896189][ T8160] [ 312.896189][ T8160] other info that might help us debug this: [ 312.896189][ T8160] [ 312.906419][ T8160] Chain exists of: [ 312.906419][ T8160] sk_lock-AF_INET6 --> &smc->clcsock_release_lock --> rtnl_mutex [ 312.906419][ T8160] [ 312.920080][ T8160] Possible unsafe locking scenario: [ 312.920080][ T8160] [ 312.927535][ T8160] CPU0 CPU1 [ 312.932897][ T8160] ---- ---- [ 312.938259][ T8160] lock(rtnl_mutex); [ 312.942512][ T8160] lock(&smc->clcsock_release_lock); [ 312.950411][ T8160] lock(rtnl_mutex); [ 312.956913][ T8160] lock(sk_lock-AF_INET6); [ 312.961423][ T8160] [ 312.961423][ T8160] *** DEADLOCK *** [ 312.961423][ T8160] [ 312.969564][ T8160] 1 lock held by syz.3.578/8160: [ 312.974498][ T8160] #0: ffffffff900eb188 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0xa9a/0x3680 [ 312.984212][ T8160] [ 312.984212][ T8160] stack backtrace: [ 312.990114][ T8160] CPU: 0 UID: 0 PID: 8160 Comm: syz.3.578 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 312.990136][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.990145][ T8160] Call Trace: [ 312.990154][ T8160] [ 312.990161][ T8160] dump_stack_lvl+0x241/0x360 [ 312.990186][ T8160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.990206][ T8160] ? __pfx__printk+0x10/0x10 [ 312.990226][ T8160] ? print_lock+0x171/0x1a0 [ 312.990245][ T8160] print_circular_bug+0x2e1/0x300 [ 312.990264][ T8160] check_noncircular+0x142/0x160 [ 312.990284][ T8160] validate_chain+0xa69/0x24e0 [ 312.990305][ T8160] ? __pfx___mutex_trylock_common+0x10/0x10 [ 312.990325][ T8160] ? look_up_lock_class+0x7b/0x170 [ 312.990343][ T8160] ? register_lock_class+0x54/0x330 [ 312.990356][ T8160] ? __mutex_lock+0x380/0x10c0 [ 312.990375][ T8160] __lock_acquire+0xad5/0xd80 [ 312.990391][ T8160] lock_acquire+0x116/0x2f0 [ 312.990403][ T8160] ? do_ipv6_setsockopt+0xccd/0x3680 [ 312.990429][ T8160] lock_sock_nested+0x48/0x100 [ 312.990450][ T8160] ? do_ipv6_setsockopt+0xccd/0x3680 [ 312.990471][ T8160] do_ipv6_setsockopt+0xccd/0x3680 [ 312.990494][ T8160] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 312.990523][ T8160] ? __pfx___futex_wait+0x10/0x10 [ 312.990538][ T8160] ? __pfx_futex_wake_mark+0x10/0x10 [ 312.990555][ T8160] ? futex_hash+0x1e/0x1f0 [ 312.990574][ T8160] ? futex_wait+0x287/0x370 [ 312.990588][ T8160] ? __pfx_futex_wait+0x10/0x10 [ 312.990600][ T8160] ? file_init_path+0x3b/0x570 [ 312.990620][ T8160] ? __lock_acquire+0xad5/0xd80 [ 312.990635][ T8160] ? __lock_acquire+0xad5/0xd80 [ 312.990648][ T8160] ipv6_setsockopt+0x5d/0x170 [ 312.990670][ T8160] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 312.990690][ T8160] do_sock_setsockopt+0x3b1/0x710 [ 312.990707][ T8160] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 312.990721][ T8160] ? __fget_files+0x2a/0x420 [ 312.990739][ T8160] ? __fget_files+0x39d/0x420 [ 312.990754][ T8160] ? __fget_files+0x2a/0x420 [ 312.990772][ T8160] __x64_sys_setsockopt+0x1ee/0x280 [ 312.990788][ T8160] do_syscall_64+0xf3/0x230 [ 312.990806][ T8160] ? clear_bhb_loop+0x45/0xa0 [ 312.990822][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.990837][ T8160] RIP: 0033:0x7fb0f638d169 [ 312.990851][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.990864][ T8160] RSP: 002b:00007fb0f7209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 312.990881][ T8160] RAX: ffffffffffffffda RBX: 00007fb0f65a6160 RCX: 00007fb0f638d169 [ 312.990893][ T8160] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000005 [ 312.990902][ T8160] RBP: 00007fb0f640e990 R08: 0000000000000108 R09: 0000000000000000 [ 312.990911][ T8160] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 312.990921][ T8160] R13: 0000000000000000 R14: 00007fb0f65a6160 R15: 00007fff39c300f8 [ 312.990936][ T8160] [ 313.278430][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.623370][ T30] audit: type=1326 audit(1744550837.415:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f638d169 code=0x7ffc0000 [ 313.687479][ T30] audit: type=1326 audit(1744550837.415:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f638d169 code=0x7ffc0000 [ 313.713615][ T30] audit: type=1326 audit(1744550837.415:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb0f638d169 code=0x7ffc0000 [ 313.740119][ T30] audit: type=1326 audit(1744550837.415:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f638d169 code=0x7ffc0000 [ 313.764461][ T30] audit: type=1326 audit(1744550837.415:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f638d169 code=0x7ffc0000 [ 317.231908][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238259][ T1299] ieee802154 phy1 wpan1: encryption failed: -22