last executing test programs: 10m14.84316378s ago: executing program 1 (id=183): prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x2) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x100, 0x9, 0x101, 0x64b0, 0xfac, 0x10}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) io_setup(0x30, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x6ea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) 10m9.983916072s ago: executing program 1 (id=197): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000"], 0x48) mount$9p_fd(0x20, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r10, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) io_submit(r6, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0x0, 0xe3}, 0x0]) 10m7.121053146s ago: executing program 1 (id=206): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e0102030109021200010000000009"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 10m4.527074558s ago: executing program 1 (id=216): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000"], 0x48) mount$9p_fd(0x20, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r10, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) io_submit(r6, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0x0, 0xe3}, 0x0]) 10m0.868908297s ago: executing program 1 (id=219): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) 9m58.246843615s ago: executing program 2 (id=224): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) writev(r1, &(0x7f0000001900), 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) 9m58.056126126s ago: executing program 2 (id=226): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/file0\x00', 0x0) fsmount(r4, 0x0, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0xc100, 0x0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000019300)='hfsplus\x00', 0x8010, 0x0) 9m57.241867619s ago: executing program 2 (id=229): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f0000"], 0x48) mount$9p_fd(0x20, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r10, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) io_submit(r6, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0x0, 0xe3}, 0x0]) 9m53.138493052s ago: executing program 2 (id=231): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) 9m35.030475298s ago: executing program 33 (id=234): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x13d) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) 6m53.882488694s ago: executing program 5 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$xdp(0x2c, 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b1500080000000000000000", @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e640000000004000280", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 6m51.896836721s ago: executing program 5 (id=548): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) r2 = dup2(r0, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 6m48.451033492s ago: executing program 5 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x8, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x7, 0x105, 0x2, 0x10000425, 0x2000001, 0x40000cc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0xa1a, 0x1, 0x9, 0xfffffff7, 0x40400, 0x8, 0x48f3, 0x1ff, 0x6, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7fffffe, 0x485b]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x242) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) 6m43.278645947s ago: executing program 5 (id=566): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x7d, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 18.046951478s ago: executing program 0 (id=1470): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r2], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 16.93785293s ago: executing program 6 (id=1471): socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x8, 0x800) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 14.416269284s ago: executing program 6 (id=1478): socket$inet_icmp_raw(0x2, 0x3, 0x1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 13.82002413s ago: executing program 6 (id=1481): capset(0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 13.340561097s ago: executing program 4 (id=1482): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x18, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x6, 0x1c, 0x0, 0x1, [@generic="579d"]}]}, 0x18}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="2c86ce4c6d7766", @ANYRESHEX=r6, @ANYBLOB=',version=9p20']) close_range(r0, 0xffffffffffffffff, 0x0) 11.79110529s ago: executing program 7 (id=1484): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20008000) mknodat$loop(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 11.738706016s ago: executing program 4 (id=1486): pipe(&(0x7f00000001c0)) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x1000, 0x0, 0x28b}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) 11.1864669s ago: executing program 7 (id=1487): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f0000000300)=[r1], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10.640467585s ago: executing program 0 (id=1488): socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, 0x0, 0x8, 0x800) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 10.540506786s ago: executing program 7 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x43400078, 0x1000000000, 0x5, 0x100000000, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3], 0x10000, 0x202}) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000000c0)) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x0, 0x10c) read$char_usb(r7, &(0x7f0000000340)=""/170, 0xaa) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x40, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0xd000, [0x7, 0x0, 0x40000000001]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.036100232s ago: executing program 6 (id=1492): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES8=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r3, 0x0, 0x0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0xf8) fallocate(r5, 0x0, 0x1000000, 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001180)='V', 0x1}], 0x1}, 0x20000000) 9.312147329s ago: executing program 0 (id=1494): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004010) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x100, "9e6e2745585f050000004ddcd7798796660eaa95161c79eb72d462050aa20a4f", 0x43564548}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000002c0)={0x3, "c5c2a91e002b1ba00000ffe73d5eff0010ffffffe70000ffe7fffffffffffffd", 0x3, 0x4, 0x0, 0x1000, 0xb5217881d29ded7e, 0x4}) 8.780390703s ago: executing program 6 (id=1496): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x18, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x6, 0x1c, 0x0, 0x1, [@generic="579d"]}]}, 0x18}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="2c86ce4c6d7766", @ANYRESHEX=r6, @ANYBLOB=',version=9p20']) close_range(r0, 0xffffffffffffffff, 0x0) 6.859251893s ago: executing program 0 (id=1497): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20008000) mknodat$loop(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 6.764388549s ago: executing program 6 (id=1498): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r2], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 6.76240819s ago: executing program 3 (id=1499): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f0000000300)=[r1], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.67018431s ago: executing program 7 (id=1500): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$ppp(r2, &(0x7f0000000500)='k\'', 0x2) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000140)) 6.248141164s ago: executing program 3 (id=1501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4008}, 0x40404) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="002bd37800"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008020000b704000000000000850000000300000095000000000000"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @loopback}, &(0x7f00000005c0)=0xc) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000300010001", 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0x8, 0x0) 5.44416186s ago: executing program 0 (id=1502): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') 5.263826703s ago: executing program 3 (id=1503): openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.147515102s ago: executing program 4 (id=1504): r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x8, 0x800) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 4.300305784s ago: executing program 3 (id=1505): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x106) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.106193303s ago: executing program 3 (id=1506): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x2f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019f40)=""/102384, 0x18ff0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/meminfo\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000540)={0x2, 0x2, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, 0x0, 0x1) write$6lowpan_control(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x3}, 0x20) r8 = dup(r2) read$msr(r8, &(0x7f00000001c0)=""/131, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffe6f) 4.099203701s ago: executing program 7 (id=1507): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004010) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x100, "9e6e2745585f050000004ddcd7798796660eaa95161c79eb72d462050aa20a4f", 0x43564548}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000002c0)={0x3, "c5c2a91e002b1ba00000ffe73d5eff0010ffffffe70000ffe7fffffffffffffd", 0x3, 0x4, 0x0, 0x1000, 0xb5217881d29ded7e, 0x4}) 4.098386006s ago: executing program 4 (id=1508): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x18, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x6, 0x1c, 0x0, 0x1, [@generic="579d"]}]}, 0x18}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="2c86ce4c6d7766", @ANYRESHEX=r6, @ANYBLOB=',version=9p20']) close_range(r0, 0xffffffffffffffff, 0x0) 2.398067662s ago: executing program 7 (id=1509): syz_usb_connect(0x5, 0x48, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xa8, 0xa5, 0xaf, 0x20, 0x2040, 0xb900, 0xc159, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x3, 0x7, 0x5, 0x60, 0xf, "", [{{0x9, 0x4, 0x7c, 0x23, 0x0, 0x53, 0x5c, 0x28, 0x2}}, {{0x9, 0x4, 0x0, 0xa3, 0x2, 0xda, 0x38, 0xad, 0xf2, [], [{{0x9, 0x5, 0x85, 0x2, 0x8, 0x6, 0xd, 0xc0}}, {{0x9, 0x5, 0x9, 0x14, 0x200, 0x8, 0x5, 0x7d}}]}}, {{0x9, 0x4, 0x34, 0x10, 0x0, 0x6, 0x81, 0x76, 0x6}}]}}]}}, 0x0) 2.353692972s ago: executing program 4 (id=1510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/file0\x00', 0x0) fsmount(r4, 0x0, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0xc100, 0x0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000019300)='hfsplus\x00', 0x8010, 0x0) 2.297079992s ago: executing program 3 (id=1511): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x294402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, &(0x7f0000001080)) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/84) syz_open_dev$video(&(0x7f0000000000), 0x10a7, 0x28202) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x35, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x6) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x5e) 0s ago: executing program 4 (id=1512): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20008000) mknodat$loop(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) kernel console output (not intermixed with test programs): [ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.793411][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.804980][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.228896][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 405.228935][ T5810] Bluetooth: hci0: Malformed LE Event: 0x02 [ 406.955165][ T5810] Bluetooth: hci3: command tx timeout [ 408.194137][ T8622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 408.194188][ T8622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 409.705419][ T5810] Bluetooth: hci3: command tx timeout [ 409.931170][ T8634] overlayfs: missing 'lowerdir' [ 412.210706][ T5810] Bluetooth: hci3: command tx timeout [ 412.383978][ T1469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.347438][ T1469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.857201][ T5810] Bluetooth: hci3: command tx timeout [ 415.065467][ T8677] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 415.065500][ T8677] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 415.509384][ T1469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.765790][ T8689] overlayfs: missing 'lowerdir' [ 416.962903][ T1469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.202152][ T8590] chnl_net:caif_netlink_parms(): no params data found [ 417.541544][ T8707] netlink: 'syz.0.630': attribute type 39 has an invalid length. [ 419.287319][ T8732] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 419.287350][ T8732] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 419.696702][ T8747] overlayfs: missing 'lowerdir' [ 419.714636][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.714749][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.715466][ T8590] bridge_slave_0: entered allmulticast mode [ 419.766006][ T8590] bridge_slave_0: entered promiscuous mode [ 419.791836][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.791937][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.792112][ T8590] bridge_slave_1: entered allmulticast mode [ 419.817605][ T8590] bridge_slave_1: entered promiscuous mode [ 421.032624][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.106433][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.157239][ T1469] bridge_slave_1: left allmulticast mode [ 421.157265][ T1469] bridge_slave_1: left promiscuous mode [ 421.157511][ T1469] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.236865][ T1469] bridge_slave_0: left allmulticast mode [ 421.236892][ T1469] bridge_slave_0: left promiscuous mode [ 421.237138][ T1469] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.879218][ T8782] overlayfs: missing 'lowerdir' [ 423.526179][ T8788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.526211][ T8788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.997510][ T8797] netlink: 'syz.6.652': attribute type 1 has an invalid length. [ 424.000356][ T8797] netlink: 280 bytes leftover after parsing attributes in process `syz.6.652'. [ 425.216588][ T8816] overlayfs: missing 'lowerdir' [ 427.180673][ T8839] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 427.182136][ T8839] netlink: 280 bytes leftover after parsing attributes in process `syz.0.665'. [ 428.479126][ T1469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.053638][ T1469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.173487][ T1469] bond0 (unregistering): Released all slaves [ 429.208473][ T8857] overlayfs: missing 'lowerdir' [ 430.239622][ T8590] team0: Port device team_slave_0 added [ 430.280401][ T8590] team0: Port device team_slave_1 added [ 430.379968][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.379983][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.380005][ T8590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.382056][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.382068][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.382089][ T8590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.615955][ T8590] hsr_slave_0: entered promiscuous mode [ 430.645614][ T8590] hsr_slave_1: entered promiscuous mode [ 431.787078][ T8885] comedi comedi3: pcl726: I/O port conflict (0x7,16) [ 433.903861][ T808] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 434.446502][ T808] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 434.446530][ T808] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 434.446551][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.484948][ T808] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 434.484975][ T808] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 434.484992][ T808] usb 5-1: Product: syz [ 434.485005][ T808] usb 5-1: Manufacturer: syz [ 434.485016][ T808] usb 5-1: SerialNumber: syz [ 434.491047][ T808] usb 5-1: config 0 descriptor?? [ 434.550365][ T808] usb 5-1: selecting invalid altsetting 0 [ 435.028367][ T1469] hsr_slave_0: left promiscuous mode [ 435.064921][ T1469] hsr_slave_1: left promiscuous mode [ 435.068310][ T1469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.068335][ T1469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.128850][ T1469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.128875][ T1469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.330743][ T1469] veth1_macvtap: left promiscuous mode [ 435.332944][ T1469] veth0_macvtap: left promiscuous mode [ 435.333094][ T1469] veth1_vlan: left promiscuous mode [ 435.334284][ T1469] veth0_vlan: left promiscuous mode [ 436.074964][ T8893] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 436.122675][ T5790] usb 5-1: USB disconnect, device number 10 [ 436.486114][ T8925] overlayfs: missing 'workdir' [ 439.145629][ T1469] team0 (unregistering): Port device team_slave_1 removed [ 439.185609][ T1469] team0 (unregistering): Port device team_slave_0 removed [ 439.989258][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.989326][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.555688][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 440.959257][ T5872] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 440.959285][ T5872] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 440.959305][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 440.964072][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.964097][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 440.964113][ T5872] usb 4-1: Product: syz [ 440.964127][ T5872] usb 4-1: Manufacturer: syz [ 440.964139][ T5872] usb 4-1: SerialNumber: syz [ 441.076433][ T5872] usb 4-1: config 0 descriptor?? [ 441.101518][ T5872] usb 4-1: selecting invalid altsetting 0 [ 441.239101][ T8964] overlayfs: missing 'workdir' [ 441.369026][ T8590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.430646][ T8590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 441.523493][ T8590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 442.052943][ T8590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 443.069696][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.111434][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.136752][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.136882][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.166904][ T5872] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 443.190794][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.190921][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.240584][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 444.240613][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.275675][ T5872] usb 1-1: config 0 descriptor?? [ 444.300978][ T5872] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 444.336756][ T5888] usb 4-1: USB disconnect, device number 4 [ 445.836598][ T8992] netlink: 'syz.0.706': attribute type 4 has an invalid length. [ 445.836611][ T8992] netlink: 152 bytes leftover after parsing attributes in process `syz.0.706'. [ 445.842891][ T8992] .`: renamed from bond0 (while UP) [ 447.395405][ T5872] usb 1-1: USB disconnect, device number 16 [ 447.912990][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.721'. [ 447.966785][ T9063] netlink: 14 bytes leftover after parsing attributes in process `syz.0.721'. [ 449.022857][ T9063] smc: removing net device bond0 with user defined pnetid SYZ2 [ 449.065512][ T9063] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.155474][ T9063] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.207939][ T9063] .` (unregistering): Released all slaves [ 450.596660][ T8590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.065457][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.737'. [ 457.785733][ T8590] veth0_vlan: entered promiscuous mode [ 457.886039][ T8590] veth1_vlan: entered promiscuous mode [ 458.935530][ T8590] veth0_macvtap: entered promiscuous mode [ 458.995827][ T5888] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 459.024597][ T8590] veth1_macvtap: entered promiscuous mode [ 459.129437][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.148242][ T5888] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.148261][ T5888] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.148282][ T5888] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.148293][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.195476][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.219155][ T9144] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 459.244620][ T1541] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.245715][ T1541] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.245950][ T1541] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.248434][ T1541] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.292619][ T5888] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.713772][ T5888] usb 7-1: USB disconnect, device number 6 [ 459.887351][ T1541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.887370][ T1541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.204205][ T7729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.204222][ T7729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.555301][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 464.345677][ T9198] random: crng reseeded on system resumption [ 464.355565][ T9198] overlayfs: failed to resolve './file0': -2 [ 465.807330][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.756'. [ 465.954941][ T5872] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 466.005111][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.758'. [ 466.576980][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.590867][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.600179][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.603658][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.607238][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.003490][ T37] audit: type=1800 audit(2000000378.569:4): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.763" name="file0" dev="overlay" ino=634 res=0 errno=0 [ 469.075072][ T5810] Bluetooth: hci4: command tx timeout [ 470.915008][ T809] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 471.136991][ T5810] Bluetooth: hci4: command tx timeout [ 471.184531][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.184591][ T809] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 471.184612][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.440445][ T9271] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.757'. [ 472.036889][ T809] usb 1-1: config 0 descriptor?? [ 472.052449][ T809] pwc: Askey VC010 type 2 USB webcam detected. [ 472.354943][ T5888] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 472.448029][ T809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 472.448791][ T809] pwc: recv_control_msg error -32 req 02 val 2700 [ 472.449526][ T809] pwc: recv_control_msg error -32 req 02 val 2c00 [ 472.450542][ T809] pwc: recv_control_msg error -32 req 04 val 1000 [ 472.511334][ T5888] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 472.511361][ T5888] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 472.511377][ T5888] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 472.511394][ T5888] usb 7-1: config 220 has no interface number 2 [ 472.511861][ T5888] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 472.511888][ T5888] usb 7-1: config 220 interface 0 has no altsetting 0 [ 472.512895][ T5888] usb 7-1: config 220 interface 76 has no altsetting 0 [ 472.512916][ T5888] usb 7-1: config 220 interface 1 has no altsetting 0 [ 472.589106][ T5888] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 472.589129][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.589177][ T5888] usb 7-1: Product: syz [ 472.589185][ T5888] usb 7-1: Manufacturer: syz [ 472.589192][ T5888] usb 7-1: SerialNumber: syz [ 472.657170][ T809] pwc: recv_control_msg error -71 req 04 val 1400 [ 472.658110][ T809] pwc: recv_control_msg error -71 req 02 val 2000 [ 472.659158][ T809] pwc: recv_control_msg error -71 req 02 val 2100 [ 472.659828][ T809] pwc: recv_control_msg error -71 req 04 val 1500 [ 472.662346][ T809] pwc: recv_control_msg error -71 req 02 val 2500 [ 472.663154][ T809] pwc: recv_control_msg error -71 req 02 val 2400 [ 472.663896][ T809] pwc: recv_control_msg error -71 req 02 val 2600 [ 472.664659][ T809] pwc: recv_control_msg error -71 req 02 val 2900 [ 472.724063][ T809] pwc: recv_control_msg error -71 req 02 val 2800 [ 472.737772][ T809] pwc: recv_control_msg error -71 req 04 val 1100 [ 472.740939][ T809] pwc: recv_control_msg error -71 req 04 val 1200 [ 472.781442][ T809] pwc: Registered as video103. [ 472.847560][ T809] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 474.050839][ T5810] Bluetooth: hci4: command tx timeout [ 474.448354][ T809] usb 1-1: USB disconnect, device number 17 [ 474.458084][ T5888] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 474.458123][ T5888] uvcvideo 7-1:220.0: No valid video chain found. [ 474.458246][ T5888] usb 7-1: selecting invalid altsetting 0 [ 474.511046][ T1469] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.631222][ T5888] usb 7-1: selecting invalid altsetting 0 [ 474.631252][ T5888] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 474.647599][ T5888] usb 7-1: USB disconnect, device number 7 [ 474.712175][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.779'. [ 475.337168][ T9311] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.780'. [ 476.147217][ T5810] Bluetooth: hci4: command tx timeout [ 476.711729][ T1469] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.297946][ T1469] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.494871][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 478.677213][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.677265][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 478.677288][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.735224][ T5888] usb 5-1: config 0 descriptor?? [ 478.744296][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 478.987402][ T1469] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.233507][ T9357] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.790'. [ 479.884906][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 479.887829][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 479.888687][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 479.890509][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 480.095692][ T5888] pwc: recv_control_msg error -71 req 04 val 1400 [ 480.096182][ T5888] pwc: recv_control_msg error -71 req 02 val 2000 [ 480.096699][ T5888] pwc: recv_control_msg error -71 req 02 val 2100 [ 480.097168][ T5888] pwc: recv_control_msg error -71 req 04 val 1500 [ 480.097608][ T5888] pwc: recv_control_msg error -71 req 02 val 2500 [ 480.101439][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 480.112596][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 480.113137][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 480.123555][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 480.124519][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 480.125092][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 480.164745][ T5888] pwc: Registered as video103. [ 480.169588][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 480.183364][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 480.326287][ T5888] usb 5-1: USB disconnect, device number 12 [ 481.812511][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.812667][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.812855][ T9230] bridge_slave_0: entered allmulticast mode [ 481.816164][ T9230] bridge_slave_0: entered promiscuous mode [ 481.843879][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.843999][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.844241][ T9230] bridge_slave_1: entered allmulticast mode [ 481.852372][ T9230] bridge_slave_1: entered promiscuous mode [ 482.160615][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.164749][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.718274][ T9396] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.800'. [ 482.820709][ T1469] bridge_slave_1: left allmulticast mode [ 482.849696][ T1469] bridge_slave_1: left promiscuous mode [ 482.874218][ T1469] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.283107][ T1469] bridge_slave_0: left allmulticast mode [ 483.283165][ T1469] bridge_slave_0: left promiscuous mode [ 483.283794][ T1469] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.796112][ T1469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.918450][ T1469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.008616][ T1469] bond0 (unregistering): Released all slaves [ 488.060299][ T9230] team0: Port device team_slave_0 added [ 489.297230][ T9230] team0: Port device team_slave_1 added [ 489.844620][ T9468] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.817'. [ 490.926788][ T9465] random: crng reseeded on system resumption [ 491.786317][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.786333][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.786355][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.788409][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.788423][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.788445][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.229362][ T9230] hsr_slave_0: entered promiscuous mode [ 493.230169][ T9230] hsr_slave_1: entered promiscuous mode [ 493.230691][ T9230] debugfs: 'hsr0' already exists in 'hsr' [ 493.230708][ T9230] Cannot create hsr debugfs directory [ 495.004614][ T9529] random: crng reseeded on system resumption [ 495.797634][ T1469] hsr_slave_0: left promiscuous mode [ 495.852587][ T1469] hsr_slave_1: left promiscuous mode [ 495.853657][ T1469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.853677][ T1469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.908045][ T1469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.908071][ T1469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.001876][ T1469] veth1_macvtap: left promiscuous mode [ 496.004252][ T1469] veth0_macvtap: left promiscuous mode [ 496.019684][ T1469] veth1_vlan: left promiscuous mode [ 496.019858][ T1469] veth0_vlan: left promiscuous mode [ 496.685068][ T808] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 496.836831][ T808] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.836862][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 496.836884][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 496.836904][ T808] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.836943][ T808] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.836964][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.841802][ T808] usb 7-1: config 0 descriptor?? [ 497.314241][ T9567] random: crng reseeded on system resumption [ 497.658868][ T1469] team0 (unregistering): Port device team_slave_1 removed [ 497.929963][ T1469] team0 (unregistering): Port device team_slave_0 removed [ 497.967016][ T808] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 499.318749][ T5872] usb 7-1: USB disconnect, device number 8 [ 499.933493][ T9587] kvm: user requested TSC rate below hardware speed [ 499.986306][ T9587] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 499.986559][ T9587] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 500.949505][ T9609] random: crng reseeded on system resumption [ 501.421167][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.421234][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.882734][ T9668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.863'. [ 507.387096][ T9230] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 508.705658][ T9230] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 508.836134][ T9230] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 508.874410][ T9230] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 512.512460][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.929333][ T9723] random: crng reseeded on system resumption [ 513.028094][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.049598][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.049791][ T7733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.083119][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.083398][ T7733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.619488][ T9737] kvm: pic: non byte read [ 514.619545][ T9737] kvm: pic: non byte read [ 514.619586][ T9737] kvm: pic: non byte read [ 514.619627][ T9737] kvm: pic: non byte read [ 514.619667][ T9737] kvm: pic: non byte read [ 514.619707][ T9737] kvm: pic: non byte read [ 514.619748][ T9737] kvm: pic: non byte read [ 514.619788][ T9737] kvm: pic: non byte read [ 514.619829][ T9737] kvm: pic: non byte read [ 514.619869][ T9737] kvm: pic: non byte read [ 514.683580][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 514.764873][ T808] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 514.917155][ T808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.917174][ T808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.917197][ T808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.917208][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.133624][ T808] usb 1-1: usb_control_msg returned -32 [ 515.133653][ T808] usbtmc 1-1:16.0: can't read capabilities [ 515.239700][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.460092][ T9230] veth0_vlan: entered promiscuous mode [ 516.466294][ T9230] veth1_vlan: entered promiscuous mode [ 516.652265][ T9230] veth0_macvtap: entered promiscuous mode [ 516.687198][ T9230] veth1_macvtap: entered promiscuous mode [ 516.761500][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.787600][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.817624][ T7655] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.819306][ T7729] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.819412][ T7655] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.819446][ T7655] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.289394][ T1541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.289407][ T1541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.347064][ T1541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.347078][ T1541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.804613][ T10] usb 1-1: USB disconnect, device number 18 [ 520.667797][ T9799] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 520.667859][ T9799] netlink: 280 bytes leftover after parsing attributes in process `syz.4.889'. [ 522.295778][ T9823] netlink: 24 bytes leftover after parsing attributes in process `syz.7.894'. [ 522.974890][ T5888] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 523.127183][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.127212][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.127250][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.127270][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.368504][ T5888] usb 5-1: usb_control_msg returned -32 [ 523.368533][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 523.546266][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546362][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546417][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546470][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546525][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546580][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546635][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546694][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 523.546741][ T9849] netlink: 'syz.6.900': attribute type 3 has an invalid length. [ 525.784995][ T10] usb 5-1: USB disconnect, device number 13 [ 526.538043][ T5888] kernel write not supported for file /vbi9 (pid: 5888 comm: kworker/0:6) [ 527.332022][ T9901] autofs: Unknown parameter '00000000000000000000' [ 527.844093][ T9918] validate_nla: 42 callbacks suppressed [ 527.844113][ T9918] netlink: 'syz.7.917': attribute type 2 has an invalid length. [ 527.866802][ T5888] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 527.963357][ T9922] netlink: 'syz.7.917': attribute type 2 has an invalid length. [ 528.020015][ T5888] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.020043][ T5888] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.020083][ T5888] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.020104][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.361649][ T9922] !: entered promiscuous mode [ 528.393003][ T5888] usb 7-1: usb_control_msg returned -32 [ 528.393032][ T5888] usbtmc 7-1:16.0: can't read capabilities [ 530.657966][ T9] usb 7-1: USB disconnect, device number 9 [ 531.056976][ T9960] autofs: Unknown parameter '00000000000000000000' [ 532.008687][ T9981] blktrace: Concurrent blktraces are not allowed on loop4 [ 533.404646][ T9997] autofs: Unknown parameter '00000000000000000000' [ 533.706872][T10003] netlink: 'syz.7.945': attribute type 2 has an invalid length. [ 533.709423][T10003] netlink: 'syz.7.945': attribute type 2 has an invalid length. [ 536.473007][ T5790] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 537.039406][ T5790] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 537.039425][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.052673][ T5790] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.052690][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.052700][ T5790] usb 4-1: Product: syz [ 537.052708][ T5790] usb 4-1: Manufacturer: syz [ 537.052715][ T5790] usb 4-1: SerialNumber: syz [ 537.146352][ T5790] usb 4-1: config 0 descriptor?? [ 537.147403][T10018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 537.177586][ T5790] usb 4-1: selecting invalid altsetting 0 [ 537.629841][T10033] autofs: Unknown parameter '00000000000000000000' [ 539.731318][T10018] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 539.749546][ T808] usb 4-1: USB disconnect, device number 5 [ 540.237821][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 540.587992][ T9037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 540.736382][ T9037] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.113243][T10067] random: crng reseeded on system resumption [ 541.478165][T10066] overlayfs: missing 'lowerdir' [ 541.479816][T10070] autofs: Unknown parameter 'fd00000000000000000000' [ 541.886474][T10079] netlink: 'syz.4.968': attribute type 2 has an invalid length. [ 541.900618][T10079] netlink: 'syz.4.968': attribute type 2 has an invalid length. [ 544.157076][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 544.774974][ T5888] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 544.775007][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 544.777344][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.777369][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.777386][ T5888] usb 4-1: Product: syz [ 544.777395][ T5888] usb 4-1: Manufacturer: syz [ 544.777402][ T5888] usb 4-1: SerialNumber: syz [ 544.847174][ T5888] usb 4-1: config 0 descriptor?? [ 544.847995][T10091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.865238][T10094] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 544.919928][ T5888] usb 4-1: selecting invalid altsetting 0 [ 545.629282][ T5888] usb 4-1: USB disconnect, device number 6 [ 545.931656][ T8024] udevd[8024]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.987306][T10122] random: crng reseeded on system resumption [ 546.996297][T10122] overlayfs: missing 'lowerdir' [ 548.461219][T10135] sp0: Synchronizing with TNC [ 549.916909][T10133] [U] è [ 550.764714][ T5790] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 550.927616][ T5790] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 550.927640][ T5790] usb 7-1: config 0 interface 0 has no altsetting 0 [ 550.929852][ T5790] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 550.929885][ T5790] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 550.929903][ T5790] usb 7-1: Product: syz [ 550.929917][ T5790] usb 7-1: Manufacturer: syz [ 550.929930][ T5790] usb 7-1: SerialNumber: syz [ 550.933181][ T5790] usb 7-1: config 0 descriptor?? [ 550.933878][T10156] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 551.062210][ T5790] usb 7-1: selecting invalid altsetting 0 [ 551.216392][ T5790] usb 7-1: USB disconnect, device number 10 [ 551.290969][T10161] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 552.219829][ T8024] udevd[8024]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.286318][T10170] input: syz0 as /devices/virtual/input/input16 [ 553.805278][T10193] netlink: 'syz.6.994': attribute type 2 has an invalid length. [ 553.868132][T10192] netlink: 'syz.6.994': attribute type 2 has an invalid length. [ 553.868831][T10193] !: entered promiscuous mode [ 553.901937][T10188] random: crng reseeded on system resumption [ 554.043703][T10190] overlayfs: missing 'lowerdir' [ 555.027936][T10205] comedi comedi3: pcl726: I/O port conflict (0x7,16) [ 557.634929][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 558.103763][ T9] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 558.103782][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.119945][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.119970][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 558.119983][ T9] usb 4-1: Product: syz [ 558.119990][ T9] usb 4-1: Manufacturer: syz [ 558.120004][ T9] usb 4-1: SerialNumber: syz [ 558.157887][ T9] usb 4-1: config 0 descriptor?? [ 558.158652][T10218] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 558.181648][ T9] usb 4-1: selecting invalid altsetting 0 [ 558.844894][ T5872] usb 4-1: USB disconnect, device number 7 [ 559.505283][T10238] random: crng reseeded on system resumption [ 559.887125][T10236] overlayfs: missing 'lowerdir' [ 560.184974][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 560.337379][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 560.337412][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 560.337451][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 560.337472][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.398291][ T9] usb 1-1: config 0 descriptor?? [ 560.488752][T10258] netlink: 'syz.6.1017': attribute type 2 has an invalid length. [ 560.617176][ T9] ath6kl: Failed to submit usb control message: -71 [ 560.617208][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 560.617216][ T9] ath6kl: Unable to send get target info: -71 [ 560.617761][ T9] ath6kl: Failed to init ath6kl core: -71 [ 560.619244][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 560.663037][ T9] usb 1-1: USB disconnect, device number 19 [ 560.788019][T10258] netlink: 'syz.6.1017': attribute type 2 has an invalid length. [ 561.966464][T10263] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 562.861738][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.861778][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.046554][ T6052] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 565.371320][ T6052] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 565.371374][ T6052] usb 1-1: config 0 interface 0 has no altsetting 0 [ 565.406436][ T6052] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 565.406747][ T6052] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 565.407045][ T6052] usb 1-1: Product: syz [ 565.407365][ T6052] usb 1-1: Manufacturer: syz [ 565.407702][ T6052] usb 1-1: SerialNumber: syz [ 565.476673][ T6052] usb 1-1: config 0 descriptor?? [ 565.477538][T10276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.512688][ T6052] usb 1-1: selecting invalid altsetting 0 [ 567.444515][ T6052] usb 1-1: USB disconnect, device number 20 [ 571.596858][T10325] random: crng reseeded on system resumption [ 571.909103][T10324] overlayfs: missing 'lowerdir' [ 572.078509][T10329] overlayfs: failed to resolve './bus': -2 [ 572.520709][T10334] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 572.751596][T10336] bond2: (slave gretap1): making interface the new active one [ 572.752395][T10336] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 572.813450][T10334] vlan2: entered allmulticast mode [ 572.813464][T10334] bond2: entered allmulticast mode [ 572.813472][T10334] gretap1: entered allmulticast mode [ 572.840504][T10334] bond2: (slave vlan2): Opening slave failed [ 573.833033][T10338] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 574.394915][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 575.292391][ T5888] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 575.292421][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 575.304378][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 575.304395][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 575.304406][ T5888] usb 4-1: Product: syz [ 575.304412][ T5888] usb 4-1: Manufacturer: syz [ 575.304419][ T5888] usb 4-1: SerialNumber: syz [ 575.307963][ T5888] usb 4-1: config 0 descriptor?? [ 575.314964][T10342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.387629][ T5888] usb 4-1: selecting invalid altsetting 0 [ 577.613763][T10341] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 577.617706][T10363] random: crng reseeded on system resumption [ 577.635340][T10363] overlayfs: missing 'lowerdir' [ 577.739414][ T5888] usb 4-1: USB disconnect, device number 8 [ 579.516024][T10387] overlayfs: failed to resolve './file0': -2 [ 580.694837][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 582.064804][T10406] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 582.203704][ T5872] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 582.203734][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 582.223590][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 582.223616][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 582.223635][ T5872] usb 4-1: Product: syz [ 582.223647][ T5872] usb 4-1: Manufacturer: syz [ 582.223657][ T5872] usb 4-1: SerialNumber: syz [ 582.273728][ T5872] usb 4-1: config 0 descriptor?? [ 582.274431][T10399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 582.299806][ T5872] usb 4-1: selecting invalid altsetting 0 [ 582.557643][T10414] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 582.651357][T10414] smc: adding net device bond0 with user defined pnetid SYZ2 [ 583.191712][T10418] bond0: (slave gretap1): making interface the new active one [ 583.194484][T10418] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 583.304306][T10414] vlan2: entered allmulticast mode [ 583.304321][T10414] bond0: entered allmulticast mode [ 583.304328][T10414] gretap1: entered allmulticast mode [ 583.330178][T10414] bond0: (slave vlan2): Opening slave failed [ 583.616575][ T809] usb 4-1: USB disconnect, device number 9 [ 585.474925][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 585.706172][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.706205][ T5888] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 585.706217][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.709356][ T5888] usb 4-1: config 0 descriptor?? [ 586.697163][T10453] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 587.406055][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 587.632768][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 587.641908][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 587.642796][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 587.661746][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 587.662532][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 587.665284][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 587.687449][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 587.688614][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 587.893188][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 588.197171][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 588.197525][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 588.197837][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 588.198254][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.198569][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.217568][ T5888] pwc: Registered as video103. [ 588.220567][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 588.934243][ T37] audit: type=1326 audit(2000000756.163:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934292][ T37] audit: type=1326 audit(2000000756.163:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934340][ T37] audit: type=1326 audit(2000000756.173:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934378][ T37] audit: type=1326 audit(2000000756.173:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934414][ T37] audit: type=1326 audit(2000000756.183:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934451][ T37] audit: type=1326 audit(2000000756.183:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934489][ T37] audit: type=1326 audit(2000000756.183:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934525][ T37] audit: type=1326 audit(2000000756.183:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934561][ T37] audit: type=1326 audit(2000000756.193:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.934596][ T37] audit: type=1326 audit(2000000756.193:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10457 comm="syz.7.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7705c819 code=0x7ffc0000 [ 588.967131][ T5888] usb 4-1: USB disconnect, device number 10 [ 589.974964][ T5888] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 589.983282][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 590.144503][ T5888] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 590.144535][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 590.155215][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 590.155250][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 590.155269][ T5888] usb 4-1: Product: syz [ 590.155282][ T5888] usb 4-1: Manufacturer: syz [ 590.155295][ T5888] usb 4-1: SerialNumber: syz [ 590.543869][ T5888] usb 4-1: config 0 descriptor?? [ 590.549034][T10465] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.584161][ T5888] usb 4-1: selecting invalid altsetting 0 [ 590.778496][ T5888] usb 4-1: USB disconnect, device number 11 [ 591.585492][ T808] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 592.460043][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 592.460065][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 592.460088][ T808] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 592.460100][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.520419][ T808] usb 1-1: config 0 descriptor?? [ 592.723419][ T808] ath6kl: Failed to submit usb control message: -71 [ 592.723449][ T808] ath6kl: unable to send the bmi data to the device: -71 [ 592.723456][ T808] ath6kl: Unable to send get target info: -71 [ 592.724007][ T808] ath6kl: Failed to init ath6kl core: -71 [ 592.751201][ T808] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 593.024979][ T808] usb 1-1: USB disconnect, device number 21 [ 593.314839][ T9037] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 593.527230][ T9037] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.527284][ T9037] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.527305][ T9037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.564963][ T9037] usb 5-1: config 0 descriptor?? [ 593.595010][ T9037] pwc: Askey VC010 type 2 USB webcam detected. [ 593.980984][ T9037] pwc: recv_control_msg error -32 req 02 val 2b00 [ 593.982526][ T9037] pwc: recv_control_msg error -32 req 02 val 2700 [ 593.983972][ T9037] pwc: recv_control_msg error -32 req 02 val 2c00 [ 594.016410][ T9037] pwc: recv_control_msg error -32 req 04 val 1000 [ 594.022117][ T9037] pwc: recv_control_msg error -32 req 04 val 1300 [ 594.022808][ T9037] pwc: recv_control_msg error -32 req 04 val 1400 [ 594.023465][ T9037] pwc: recv_control_msg error -32 req 02 val 2000 [ 594.024113][ T9037] pwc: recv_control_msg error -32 req 02 val 2100 [ 594.225544][ T9037] pwc: recv_control_msg error -32 req 02 val 2500 [ 594.335975][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 594.443731][ T9037] pwc: recv_control_msg error -71 req 02 val 2600 [ 594.444402][ T9037] pwc: recv_control_msg error -71 req 02 val 2900 [ 594.450253][ T9037] pwc: recv_control_msg error -71 req 02 val 2800 [ 594.588488][ T9037] pwc: recv_control_msg error -71 req 04 val 1100 [ 594.638831][ T9037] pwc: recv_control_msg error -71 req 04 val 1200 [ 595.214569][ T9037] pwc: Registered as video103. [ 595.220199][ T9037] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 595.236119][ T9037] usb 5-1: USB disconnect, device number 14 [ 598.514472][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 598.685248][ T9037] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 598.846312][ T9037] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 598.846331][ T9037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.848072][ T9037] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.848087][ T9037] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.848097][ T9037] usb 5-1: Product: syz [ 598.848104][ T9037] usb 5-1: Manufacturer: syz [ 598.848111][ T9037] usb 5-1: SerialNumber: syz [ 598.850980][ T9037] usb 5-1: config 0 descriptor?? [ 598.852138][T10522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 598.906565][ T9037] usb 5-1: selecting invalid altsetting 0 [ 599.184681][T10532] team0: Port device team_slave_0 removed [ 599.475958][ T9037] usb 5-1: USB disconnect, device number 15 [ 599.661826][ T8024] udevd[8024]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.440238][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1111'. [ 601.575624][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 601.625105][T10529] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 603.015539][T10561] comedi comedi3: pcl726: I/O port conflict (0x7,16) [ 606.997864][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1124'. [ 610.561721][T10622] comedi comedi3: pcl726: I/O port conflict (0x7,16) [ 611.360564][T10625] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 611.877148][T10632] cgroup: fork rejected by pids controller in /syz7 [ 616.187765][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.212230][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.222923][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 616.222939][ T37] audit: type=1326 audit(2000000783.833:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.234929][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.243498][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.244432][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.289261][ T3781] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.539685][ T37] audit: type=1326 audit(2000000784.103:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539720][ T37] audit: type=1326 audit(2000000784.113:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539743][ T37] audit: type=1326 audit(2000000784.113:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539765][ T37] audit: type=1326 audit(2000000784.113:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539786][ T37] audit: type=1326 audit(2000000784.113:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539807][ T37] audit: type=1326 audit(2000000784.113:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539827][ T37] audit: type=1326 audit(2000000784.113:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539850][ T37] audit: type=1326 audit(2000000784.113:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 616.539870][ T37] audit: type=1326 audit(2000000784.113:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10670 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 617.162695][ T3781] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.700865][ T3781] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.294850][ T5118] Bluetooth: hci3: command tx timeout [ 618.436131][ T3781] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.956656][T10675] chnl_net:caif_netlink_parms(): no params data found [ 620.392676][ T5118] Bluetooth: hci3: command tx timeout [ 620.408382][ T6052] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 620.889530][ T6052] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.889573][ T6052] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 620.889601][ T6052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.315092][ T6052] usb 7-1: config 0 descriptor?? [ 621.551582][ T6052] ath6kl: Failed to submit usb control message: -71 [ 621.551632][ T6052] ath6kl: unable to send the bmi data to the device: -71 [ 621.551645][ T6052] ath6kl: Unable to send get target info: -71 [ 622.345253][ T6052] ath6kl: Failed to init ath6kl core: -71 [ 622.351296][ T6052] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 622.422260][ T3781] bridge_slave_1: left allmulticast mode [ 622.422279][ T3781] bridge_slave_1: left promiscuous mode [ 622.422424][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.429317][ T6052] usb 7-1: USB disconnect, device number 11 [ 622.454864][ T5118] Bluetooth: hci3: command tx timeout [ 622.526253][ T3781] bridge_slave_0: left allmulticast mode [ 622.526281][ T3781] bridge_slave_0: left promiscuous mode [ 622.526539][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.822417][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 623.822435][ T37] audit: type=1326 audit(2000000791.433:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.822891][ T37] audit: type=1326 audit(2000000791.433:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.822933][ T37] audit: type=1326 audit(2000000791.433:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.822971][ T37] audit: type=1326 audit(2000000791.433:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.823736][ T37] audit: type=1326 audit(2000000791.433:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.823776][ T37] audit: type=1326 audit(2000000791.433:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.823812][ T37] audit: type=1326 audit(2000000791.433:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.823851][ T37] audit: type=1326 audit(2000000791.433:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.865292][ T37] audit: type=1326 audit(2000000791.483:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 623.869334][ T37] audit: type=1326 audit(2000000791.483:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10741 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecf13c819 code=0x7ffc0000 [ 624.213293][T10755] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1168'. [ 624.213315][T10755] netlink: 'syz.6.1168': attribute type 2 has an invalid length. [ 624.302781][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.302847][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.556237][ T5118] Bluetooth: hci3: command tx timeout [ 625.855593][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.798929][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.243930][ T3781] bond0 (unregistering): Released all slaves [ 627.414276][ T3781] !: left promiscuous mode [ 627.534946][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.535063][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.535311][T10675] bridge_slave_0: entered allmulticast mode [ 627.541539][T10675] bridge_slave_0: entered promiscuous mode [ 627.579868][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.579993][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.580145][T10675] bridge_slave_1: entered allmulticast mode [ 627.587304][T10675] bridge_slave_1: entered promiscuous mode [ 628.062060][T10675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.067031][T10675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.171448][T10788] cgroup: fork rejected by pids controller in /syz6 [ 628.253508][T10675] team0: Port device team_slave_0 added [ 628.305134][T10675] team0: Port device team_slave_1 added [ 630.240539][T10819] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1184'. [ 631.180451][T10675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.180467][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.180489][T10675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.182672][T10675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.182685][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.182708][T10675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.731552][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.745065][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.747190][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.748362][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.749302][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.105544][ T3781] hsr_slave_0: left promiscuous mode [ 632.466002][ T3781] hsr_slave_1: left promiscuous mode [ 632.466653][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.466669][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.496732][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.496749][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.568189][ T3781] veth1_macvtap: left promiscuous mode [ 632.568292][ T3781] veth0_macvtap: left promiscuous mode [ 632.568538][ T3781] veth1_vlan: left promiscuous mode [ 632.568740][ T3781] veth0_vlan: left promiscuous mode [ 633.899855][ T5118] Bluetooth: hci4: command tx timeout [ 634.285439][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 634.327142][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 634.620812][T10675] hsr_slave_0: entered promiscuous mode [ 634.621595][T10675] hsr_slave_1: entered promiscuous mode [ 635.211526][T10855] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1195'. [ 635.885806][T10858] Bluetooth: MGMT ver 1.23 [ 635.953490][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1196'. [ 635.974984][ T5118] Bluetooth: hci4: command tx timeout [ 636.310241][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 636.310268][ T37] audit: type=1800 audit(2000000803.883:92): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1198" name="file0" dev="overlay" ino=1777 res=0 errno=0 [ 636.314818][ T5872] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 636.461372][ T5872] usb 5-1: device descriptor read/64, error -71 [ 636.715992][ T5872] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 636.854945][ T5872] usb 5-1: device descriptor read/64, error -71 [ 636.981843][ T5872] usb usb5-port1: attempt power cycle [ 637.040913][T10824] chnl_net:caif_netlink_parms(): no params data found [ 637.395220][ T5872] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 637.592981][ T5872] usb 5-1: device descriptor read/8, error -71 [ 637.905595][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 637.939315][ T5872] usb 5-1: device descriptor read/8, error -71 [ 638.051025][ T5872] usb usb5-port1: unable to enumerate USB device [ 638.141566][ T5118] Bluetooth: hci4: command tx timeout [ 640.240177][T10919] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1207'. [ 640.257203][ T5118] Bluetooth: hci4: command tx timeout [ 641.337670][ T3781] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.784907][ T5790] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 642.015901][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.016013][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.016251][T10824] bridge_slave_0: entered allmulticast mode [ 642.016847][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.016897][ T5790] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 642.016919][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.026186][T10824] bridge_slave_0: entered promiscuous mode [ 642.027335][ T5790] usb 5-1: config 0 descriptor?? [ 642.085517][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 642.320763][ T3781] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.412132][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.412423][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.412635][T10824] bridge_slave_1: entered allmulticast mode [ 642.441602][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 642.442551][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 642.443353][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 642.444302][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 642.453288][T10824] bridge_slave_1: entered promiscuous mode [ 642.482522][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 642.483127][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 642.483648][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 642.484350][ T5790] pwc: recv_control_msg error -32 req 02 val 2100 [ 642.686954][ T5790] pwc: recv_control_msg error -32 req 02 val 2500 [ 642.821392][ T3781] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.890740][ T5790] pwc: recv_control_msg error -71 req 02 val 2600 [ 642.891108][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 642.891464][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 642.891887][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 642.892245][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 642.953321][ T5790] pwc: Registered as video103. [ 642.962605][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 642.988548][ T5790] usb 5-1: USB disconnect, device number 20 [ 644.009800][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.251269][ T3781] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.275263][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 644.407958][ T9] usb 4-1: device descriptor read/64, error -71 [ 644.411754][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.636625][T10824] team0: Port device team_slave_0 added [ 644.650635][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 644.659976][T10824] team0: Port device team_slave_1 added [ 644.775161][ T9] usb 4-1: device descriptor read/64, error -71 [ 644.802761][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.802776][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.802800][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.887173][ T9] usb usb4-port1: attempt power cycle [ 644.904909][T10675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 644.929468][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.929485][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.929507][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.977455][T10675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 645.108124][T10675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 645.323994][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 645.556974][ T9] usb 4-1: device descriptor read/8, error -71 [ 645.648643][T10675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 645.754662][T10824] hsr_slave_0: entered promiscuous mode [ 645.758930][T10824] hsr_slave_1: entered promiscuous mode [ 645.759564][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 645.759580][T10824] Cannot create hsr debugfs directory [ 645.794915][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 645.816199][ T9] usb 4-1: device descriptor read/8, error -71 [ 645.879404][ T3781] bridge_slave_1: left allmulticast mode [ 645.879430][ T3781] bridge_slave_1: left promiscuous mode [ 645.879755][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.925229][ T9] usb usb4-port1: unable to enumerate USB device [ 645.956773][ T3781] bridge_slave_0: left allmulticast mode [ 645.956793][ T3781] bridge_slave_0: left promiscuous mode [ 645.956942][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.009324][ T3781] smc: removing net device bond0 with user defined pnetid SYZ2 [ 652.050714][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.195448][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.227398][ T3781] bond0 (unregistering): Released all slaves [ 652.233075][ T3781] bond1 (unregistering): Released all slaves [ 655.725212][ T3781] !: left promiscuous mode [ 656.170012][ T37] audit: type=1326 audit(2000000823.733:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10986 comm="syz.3.1226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x0 [ 657.486793][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.515021][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.518975][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.533914][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.539505][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.964894][ T3781] hsr_slave_0: left promiscuous mode [ 658.985212][ T3781] hsr_slave_1: left promiscuous mode [ 658.985932][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.985948][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.076093][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.076113][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.198509][ T3781] veth1_macvtap: left promiscuous mode [ 659.198572][ T3781] veth0_macvtap: left promiscuous mode [ 659.198708][ T3781] veth1_vlan: left promiscuous mode [ 659.198800][ T3781] veth0_vlan: left promiscuous mode [ 659.654936][ T5118] Bluetooth: hci2: command tx timeout [ 660.707519][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 661.286733][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 661.735314][ T5118] Bluetooth: hci2: command tx timeout [ 663.815082][ T5118] Bluetooth: hci2: command tx timeout [ 664.596513][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.745037][ T5790] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 664.885218][ T5790] usb 4-1: device descriptor read/64, error -71 [ 664.939759][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.073703][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.073800][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.124836][ T5790] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 665.129376][T10999] chnl_net:caif_netlink_parms(): no params data found [ 665.178420][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.178505][ T7733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.254158][T10824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 665.264872][ T5790] usb 4-1: device descriptor read/64, error -71 [ 665.348652][T10824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 665.375351][ T5790] usb usb4-port1: attempt power cycle [ 665.450785][T10824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 665.563902][T10824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 665.715685][ T5790] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 665.737789][ T5790] usb 4-1: device descriptor read/8, error -71 [ 665.801763][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.812942][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.813200][T10999] bridge_slave_0: entered allmulticast mode [ 665.839444][T10999] bridge_slave_0: entered promiscuous mode [ 665.868543][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.894843][ T5118] Bluetooth: hci2: command tx timeout [ 665.935942][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.936506][T10999] bridge_slave_1: entered allmulticast mode [ 665.939100][T10999] bridge_slave_1: entered promiscuous mode [ 665.975017][ T5790] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 665.997270][ T5790] usb 4-1: device descriptor read/8, error -71 [ 666.105220][ T5790] usb usb4-port1: unable to enumerate USB device [ 666.312614][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.324164][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.857857][T10999] team0: Port device team_slave_0 added [ 666.862553][T10999] team0: Port device team_slave_1 added [ 667.298812][ T3781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.537757][ T3781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.719056][ T5790] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 668.893289][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.893301][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.893314][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.953532][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.953548][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.953573][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.046946][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.046981][ T5790] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 669.046993][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.049859][ T5790] usb 1-1: config 0 descriptor?? [ 669.053050][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 669.242067][ T3781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.456113][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 669.460760][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 669.461372][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 669.465292][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 669.468077][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 669.468926][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 669.469695][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 669.471549][ T5790] pwc: recv_control_msg error -32 req 02 val 2100 [ 669.681453][ T5790] pwc: recv_control_msg error -32 req 02 val 2500 [ 669.791581][ T3781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.884074][ T5790] pwc: recv_control_msg error -71 req 02 val 2600 [ 669.884412][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 669.887370][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 669.905185][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 669.907383][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 669.910303][ T5790] pwc: Registered as video103. [ 669.912007][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 669.983469][ T5790] usb 1-1: USB disconnect, device number 22 [ 669.989499][T10999] hsr_slave_0: entered promiscuous mode [ 670.022791][T10999] hsr_slave_1: entered promiscuous mode [ 670.024618][T10999] debugfs: 'hsr0' already exists in 'hsr' [ 670.024643][T10999] Cannot create hsr debugfs directory [ 670.128456][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.541495][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.616385][ T3781] bridge_slave_1: left allmulticast mode [ 671.616411][ T3781] bridge_slave_1: left promiscuous mode [ 671.616644][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.839182][ T3781] bridge_slave_0: left allmulticast mode [ 671.839209][ T3781] bridge_slave_0: left promiscuous mode [ 671.839452][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.723972][ T3781] bond2 (unregistering): (slave gretap1): Releasing active interface [ 673.723993][ T3781] gretap1 (unregistering): left allmulticast mode [ 674.196086][ T5118] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 674.196115][ T5118] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 674.196140][ T5118] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 674.196152][ T5118] Bluetooth: hci1: Malformed LE Event: 0x02 [ 674.232483][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.308404][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.327270][ T3781] bond0 (unregistering): Released all slaves [ 674.333259][ T3781] bond1 (unregistering): Released all slaves [ 674.342367][ T3781] bond2 (unregistering): Released all slaves [ 674.676515][ T3781] !: left promiscuous mode [ 674.938077][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.001370][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.002045][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.007077][ T809] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 675.045624][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.045817][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.053136][T10675] veth0_vlan: entered promiscuous mode [ 675.156454][ T809] usb 1-1: config index 0 descriptor too short (expected 12336, got 27) [ 675.156470][ T809] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 675.156480][ T809] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 675.156490][ T809] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 675.156509][ T809] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 675.156520][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.363252][ T809] usb 1-1: string descriptor 0 read error: -71 [ 675.379379][ T809] usb 1-1: USB disconnect, device number 23 [ 675.950540][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 675.954517][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 675.956874][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 675.965023][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 675.965690][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 678.067766][ T5810] Bluetooth: hci5: command tx timeout [ 678.387841][ T3781] hsr_slave_0: left promiscuous mode [ 678.439286][ T3781] hsr_slave_1: left promiscuous mode [ 678.439965][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.439981][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.458794][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.458817][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.520426][ T3781] veth1_macvtap: left promiscuous mode [ 678.520488][ T3781] veth0_macvtap: left promiscuous mode [ 678.520623][ T3781] veth1_vlan: left promiscuous mode [ 678.520715][ T3781] veth0_vlan: left promiscuous mode [ 678.983355][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 678.983382][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 678.983407][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 678.983421][ T5810] Bluetooth: hci0: Malformed LE Event: 0x02 [ 679.751664][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 679.822715][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 680.166741][ T5810] Bluetooth: hci5: command tx timeout [ 682.218362][ T5810] Bluetooth: hci5: command tx timeout [ 682.346626][T10999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.426410][T10999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 683.028853][T10999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 683.298259][T10999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 684.304849][ T5810] Bluetooth: hci5: command tx timeout [ 685.104598][T11158] chnl_net:caif_netlink_parms(): no params data found [ 685.855270][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.855312][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.003322][ T3781] IPVS: stop unused estimator thread 0... [ 686.100082][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.270501][ T5810] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 686.270529][ T5810] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 686.270555][ T5810] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 686.270570][ T5810] Bluetooth: hci1: Malformed LE Event: 0x02 [ 686.521614][T11246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 686.521639][T11246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 686.632644][T11158] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.632757][T11158] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.632965][T11158] bridge_slave_0: entered allmulticast mode [ 686.655538][T11158] bridge_slave_0: entered promiscuous mode [ 686.664098][T11158] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.664384][T11158] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.664551][T11158] bridge_slave_1: entered allmulticast mode [ 686.706434][T11158] bridge_slave_1: entered promiscuous mode [ 686.708109][T11246] vhci_hcd vhci_hcd.0: Device attached [ 686.931213][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 687.728537][T11158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.777979][T11158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.147835][T11248] vhci_hcd: connection closed [ 688.153095][ T7733] vhci_hcd vhci_hcd.3: stop threads [ 688.154064][ T7733] vhci_hcd vhci_hcd.3: release socket [ 688.163263][ T7733] vhci_hcd vhci_hcd.3: disconnect device [ 688.189077][T11158] team0: Port device team_slave_0 added [ 688.214870][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 688.261488][T11158] team0: Port device team_slave_1 added [ 689.277528][T11158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.277544][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.277568][T11158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.354545][T11158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.354562][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.354587][T11158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.501200][T10824] veth0_vlan: entered promiscuous mode [ 689.966529][T10999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.076233][T11158] hsr_slave_0: entered promiscuous mode [ 690.077510][T11158] hsr_slave_1: entered promiscuous mode [ 690.079822][T11158] debugfs: 'hsr0' already exists in 'hsr' [ 690.079853][T11158] Cannot create hsr debugfs directory [ 690.341137][T10824] veth1_vlan: entered promiscuous mode [ 691.519019][T10999] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.288468][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.288544][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.407231][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.407359][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.434808][ T5790] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 692.538146][ T3781] bridge_slave_1: left allmulticast mode [ 692.538165][ T3781] bridge_slave_1: left promiscuous mode [ 692.538301][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.597111][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.597162][ T5790] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 692.597183][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.609705][ T5790] usb 1-1: config 0 descriptor?? [ 692.614537][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 692.619575][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.625249][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.631030][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.635537][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.636227][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.789789][ T3781] bridge_slave_0: left allmulticast mode [ 692.789818][ T3781] bridge_slave_0: left promiscuous mode [ 692.790041][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.024991][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 693.025699][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 693.026388][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 693.026915][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 693.027497][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 693.028031][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 693.028605][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 693.029211][ T5790] pwc: recv_control_msg error -32 req 02 val 2100 [ 693.279468][ T5790] pwc: recv_control_msg error -32 req 02 val 2500 [ 693.482871][ T5790] pwc: recv_control_msg error -71 req 02 val 2600 [ 693.483403][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 693.483858][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 693.484489][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 693.487213][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 693.540326][ T5790] pwc: Registered as video103. [ 693.542045][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 693.595227][ T5790] usb 1-1: USB disconnect, device number 24 [ 694.695291][ T5118] Bluetooth: hci3: command tx timeout [ 695.026673][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.285595][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.351403][ T3781] bond0 (unregistering): Released all slaves [ 696.314928][ T3781] hsr_slave_0: left promiscuous mode [ 696.354917][ T3781] hsr_slave_1: left promiscuous mode [ 696.355607][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.390698][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.479210][ T3781] veth0_vlan: left promiscuous mode [ 696.897991][ T5810] Bluetooth: hci3: command tx timeout [ 698.697034][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 698.735444][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 698.945134][ T5810] Bluetooth: hci3: command tx timeout [ 700.444847][ T37] audit: type=1326 audit(2000000868.013:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449399][ T37] audit: type=1326 audit(2000000868.013:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449441][ T37] audit: type=1326 audit(2000000868.013:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449478][ T37] audit: type=1326 audit(2000000868.013:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449514][ T37] audit: type=1326 audit(2000000868.013:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449550][ T37] audit: type=1326 audit(2000000868.013:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449588][ T37] audit: type=1326 audit(2000000868.013:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449626][ T37] audit: type=1326 audit(2000000868.013:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449661][ T37] audit: type=1326 audit(2000000868.013:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.449695][ T37] audit: type=1326 audit(2000000868.013:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11367 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 700.814910][ T808] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 700.994906][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 700.996931][ T808] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 700.996957][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.001855][ T808] usb 1-1: config 0 descriptor?? [ 701.014898][ T5810] Bluetooth: hci3: command tx timeout [ 701.018771][ T808] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 701.112880][T11310] chnl_net:caif_netlink_parms(): no params data found [ 701.464821][T11158] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 701.587788][T11158] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 701.679562][T11158] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 702.229577][T11158] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 702.310729][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.310872][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.311360][T11310] bridge_slave_0: entered allmulticast mode [ 702.330401][T11310] bridge_slave_0: entered promiscuous mode [ 702.362997][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.363250][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.364183][T11310] bridge_slave_1: entered allmulticast mode [ 702.394958][T11310] bridge_slave_1: entered promiscuous mode [ 702.684324][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.708363][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.339932][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.302340][ T808] gspca_sonixj: reg_w1 err -110 [ 704.302428][ T808] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 704.464096][ T5888] usb 1-1: USB disconnect, device number 25 [ 706.586076][T11310] team0: Port device team_slave_0 added [ 706.632734][T11310] team0: Port device team_slave_1 added [ 706.706175][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.706186][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.706200][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.726525][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.726541][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.726565][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.069805][T11310] hsr_slave_0: entered promiscuous mode [ 707.070660][T11310] hsr_slave_1: entered promiscuous mode [ 707.325874][T10999] veth0_vlan: entered promiscuous mode [ 707.765453][ T3781] bridge_slave_1: left allmulticast mode [ 707.765471][ T3781] bridge_slave_1: left promiscuous mode [ 707.765616][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.835725][ T3781] bridge_slave_0: left allmulticast mode [ 707.835743][ T3781] bridge_slave_0: left promiscuous mode [ 707.835909][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.284853][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 708.508680][ T10] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 708.508705][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 708.508733][ T10] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 708.508747][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 708.508765][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 708.508777][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.587347][ T10] usb 4-1: config 0 descriptor?? [ 708.871032][ T10] usb 4-1: string descriptor 0 read error: -71 [ 708.895391][ T10] ath6kl: Failed to submit usb control message: -71 [ 708.895430][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 708.895441][ T10] ath6kl: Unable to send get target info: -71 [ 708.928843][ T10] ath6kl: Failed to init ath6kl core: -71 [ 708.929345][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 708.956325][ T10] usb 4-1: USB disconnect, device number 20 [ 709.269083][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.368858][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.433386][ T3781] bond0 (unregistering): Released all slaves [ 709.472760][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 709.472774][ T37] audit: type=1326 audit(2000000877.083:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472804][ T37] audit: type=1326 audit(2000000877.083:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472827][ T37] audit: type=1326 audit(2000000877.083:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472849][ T37] audit: type=1326 audit(2000000877.083:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472869][ T37] audit: type=1326 audit(2000000877.083:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472890][ T37] audit: type=1326 audit(2000000877.083:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472910][ T37] audit: type=1326 audit(2000000877.083:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472938][ T37] audit: type=1326 audit(2000000877.083:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472959][ T37] audit: type=1326 audit(2000000877.083:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.472980][ T37] audit: type=1326 audit(2000000877.083:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11441 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff18d5cc819 code=0x7ffc0000 [ 709.847869][T10999] veth1_vlan: entered promiscuous mode [ 710.306687][ T3781] hsr_slave_0: left promiscuous mode [ 710.345075][ T3781] hsr_slave_1: left promiscuous mode [ 710.345787][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.385394][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.464996][ T3781] veth1_vlan: left promiscuous mode [ 710.465129][ T3781] veth0_vlan: left promiscuous mode [ 711.709268][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 711.782836][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 712.510164][T11158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.726928][T11158] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.728175][T10999] veth0_macvtap: entered promiscuous mode [ 712.773783][T10999] veth1_macvtap: entered promiscuous mode [ 712.790030][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.793467][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.956007][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.957121][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.048498][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.260284][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.385117][ T1541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.549597][ T1541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.554293][ T1541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.561731][ T1541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.450235][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.450253][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.646510][T11310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 714.689321][ T1541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.689334][ T1541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.690547][T11310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 714.742015][T11310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 714.797687][T11310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 714.922212][T11158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.206396][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.266642][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.297326][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.297401][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.333918][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.340573][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.142899][T11158] veth0_vlan: entered promiscuous mode [ 716.193564][T11158] veth1_vlan: entered promiscuous mode [ 716.761090][T11158] veth0_macvtap: entered promiscuous mode [ 716.781158][T11158] veth1_macvtap: entered promiscuous mode [ 716.918247][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.281141][T11158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.311713][T11542] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 717.342693][T11542] !: entered promiscuous mode [ 717.356928][T11542] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 717.426703][T11158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.453215][ T1541] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.454405][ T1541] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.493610][ T1541] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.507225][ T1541] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.426182][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.426195][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.983228][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.983248][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.205785][T11310] veth0_vlan: entered promiscuous mode [ 719.226158][T11310] veth1_vlan: entered promiscuous mode [ 719.311400][T11310] veth0_macvtap: entered promiscuous mode [ 719.332220][T11310] veth1_macvtap: entered promiscuous mode [ 719.791623][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.809355][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.849526][ T3781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.859909][ T3781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.873877][ T3781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.892180][ T3781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.528464][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.528484][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.747244][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.747263][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.771614][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 720.771641][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 720.771665][ T5810] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 720.771679][ T5810] Bluetooth: hci0: Malformed LE Event: 0x02 [ 721.043181][T11593] fuse: Unknown parameter 'user00000000000000000000' [ 722.682781][T11616] netlink: 'syz.7.1351': attribute type 2 has an invalid length. [ 723.254422][T11616] !: entered promiscuous mode [ 725.712546][T11647] fuse: Unknown parameter 'user_i00000000000000000000' [ 726.600780][T11658] kvm: kvm [11657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xc80c00000080 [ 726.600906][T11658] kvm: kvm [11657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x940000000000 [ 726.605259][T11658] kvm: kvm [11657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x47d200000080 [ 726.605330][T11658] kvm: kvm [11657]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 726.609798][T11658] kvm: kvm [11657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffff619d00000000 [ 726.609908][T11658] kvm: kvm [11657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a3800000080 [ 727.732342][T11671] gfs2: error -5 reading superblock [ 728.746025][T11682] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 728.752081][T11682] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 729.425560][ T5810] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 729.425589][ T5810] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 729.425615][ T5810] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 729.425629][ T5810] Bluetooth: hci1: Malformed LE Event: 0x02 [ 730.307670][T11698] fuse: Unknown parameter 'user_i00000000000000000000' [ 731.284820][ T36] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 731.447126][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.447181][ T36] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 731.447202][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.491503][ T36] usb 7-1: config 0 descriptor?? [ 731.509005][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 732.072255][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 732.277755][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 732.280307][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 732.300452][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 732.301506][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 732.302360][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 732.511500][ T36] pwc: recv_control_msg error -71 req 02 val 2100 [ 732.511984][ T36] pwc: recv_control_msg error -71 req 04 val 1500 [ 732.512446][ T36] pwc: recv_control_msg error -71 req 02 val 2500 [ 732.512897][ T36] pwc: recv_control_msg error -71 req 02 val 2400 [ 732.513407][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 732.513876][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 732.514315][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 732.564217][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 732.564566][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 732.577106][ T36] pwc: Registered as video103. [ 732.626218][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 732.645399][ T36] usb 7-1: USB disconnect, device number 12 [ 733.269373][T11720] Bluetooth: MGMT ver 1.23 [ 733.270150][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1382'. [ 734.759951][T11739] fuse: Unknown parameter 'user_i00000000000000000000' [ 735.400562][T11749] netlink: 'syz.0.1390': attribute type 2 has an invalid length. [ 735.412009][T11749] !: entered promiscuous mode [ 735.418105][T11749] netlink: 'syz.0.1390': attribute type 2 has an invalid length. [ 736.155368][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1394'. [ 737.151578][ T1430] kworker/u8:10 (1430) used greatest stack depth: 18584 bytes left [ 737.596300][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 737.596318][ T37] audit: type=1326 audit(2000000905.163:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596363][ T37] audit: type=1326 audit(2000000905.183:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596388][ T37] audit: type=1326 audit(2000000905.183:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596409][ T37] audit: type=1326 audit(2000000905.183:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596431][ T37] audit: type=1326 audit(2000000905.183:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596452][ T37] audit: type=1326 audit(2000000905.183:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596475][ T37] audit: type=1326 audit(2000000905.183:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596495][ T37] audit: type=1326 audit(2000000905.183:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596516][ T37] audit: type=1326 audit(2000000905.193:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 737.596538][ T37] audit: type=1326 audit(2000000905.193:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.3.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8c158dc819 code=0x7ffc0000 [ 738.164812][T11742] capability: warning: `syz.7.1389' uses 32-bit capabilities (legacy support in use) [ 739.454459][ T5810] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 739.455452][ T5810] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 739.455481][ T5810] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 739.455494][ T5810] Bluetooth: hci3: Malformed LE Event: 0x02 [ 740.088831][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 740.501526][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'. [ 743.684461][T11835] netlink: 'syz.7.1413': attribute type 2 has an invalid length. [ 743.695865][T11835] netlink: 'syz.7.1413': attribute type 2 has an invalid length. [ 743.994499][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1418'. [ 747.180312][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.180352][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.600482][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 752.590295][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1430'. [ 755.708499][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1440'. [ 757.340024][T11929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1443'. [ 757.874817][ T5790] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 758.027396][ T5790] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.027449][ T5790] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.027470][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.064926][ T36] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 758.118669][ T5790] usb 7-1: config 0 descriptor?? [ 758.142989][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 758.175759][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 758.238355][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 758.241964][ T36] usb 1-1: string descriptor 0 read error: -22 [ 758.242082][ T36] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 758.242104][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.324773][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 758.327898][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 758.327922][ T9] usb 5-1: config 0 has no interface number 0 [ 758.327963][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.328033][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 758.328058][ T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 30768, setting to 1024 [ 758.328081][ T9] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 758.328101][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 758.332207][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 758.332232][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.332300][ T9] usb 5-1: Product: syz [ 758.332313][ T9] usb 5-1: Manufacturer: syz [ 758.332326][ T9] usb 5-1: SerialNumber: syz [ 758.548264][ T9] usb 5-1: config 0 descriptor?? [ 758.573052][T11937] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 758.648708][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input30 [ 758.687864][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 758.688947][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 758.692632][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 758.696898][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 758.697787][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 758.698559][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 758.699341][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 758.700186][ T5790] pwc: recv_control_msg error -32 req 02 val 2100 [ 758.735929][ T5153] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 759.112202][ T5790] pwc: recv_control_msg error -32 req 02 val 2500 [ 759.646836][ T5790] pwc: recv_control_msg error -71 req 02 val 2600 [ 759.647624][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 759.648400][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 759.651698][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 759.657125][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 760.572280][ T5790] pwc: Registered as video103. [ 760.613768][ C0] bcm5974 5-1:0.119: trackpad urb failed: -1 [ 760.704826][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 760.753432][ C0] bcm5974 5-1:0.119: trackpad urb failed: -1 [ 760.785975][ T5790] usb 7-1: USB disconnect, device number 13 [ 760.956027][ T5872] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 761.207778][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 761.207798][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 761.224792][ C1] bcm5974 5-1:0.119: trackpad urb failed: -19 [ 761.225171][ T808] usb 5-1: USB disconnect, device number 21 [ 761.281420][ T36] usbhid 1-1:1.0: can't add hid device: -71 [ 761.281531][ T36] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 761.295862][ T5872] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 761.295888][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.295906][ T5872] usb 4-1: Product: syz [ 761.295919][ T5872] usb 4-1: Manufacturer: syz [ 761.295930][ T5872] usb 4-1: SerialNumber: syz [ 761.398015][ T36] usb 1-1: USB disconnect, device number 26 [ 761.978365][ T5872] usb 4-1: config 0 descriptor?? [ 761.979514][T11954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 761.979683][T11954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.222668][T11954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.224244][T11954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 762.284902][ T36] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 762.333457][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1452'. [ 762.767926][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 762.836519][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 762.845731][ T36] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 762.845759][ T36] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 762.845776][ T36] usb 1-1: Product: syz [ 762.845788][ T36] usb 1-1: Manufacturer: syz [ 762.845801][ T36] usb 1-1: SerialNumber: syz [ 762.849409][ T5872] Error reading MAC address [ 763.006675][ T36] usb 1-1: config 0 descriptor?? [ 763.007554][T11963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 763.009508][ T5872] usb 4-1: USB disconnect, device number 21 [ 764.765223][ T5790] usb 1-1: USB disconnect, device number 27 [ 764.812606][T11986] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1455'. [ 767.167269][T12015] max out of range [ 767.877926][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 769.584964][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 770.234801][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 770.243588][ T9] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 770.243604][ T9] usb 8-1: config 0 has no interface number 0 [ 770.243629][ T9] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 770.243642][ T9] usb 8-1: config 0 interface 196 has no altsetting 0 [ 770.254104][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 770.254121][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.254130][ T9] usb 8-1: Product: syz [ 770.254137][ T9] usb 8-1: Manufacturer: syz [ 770.254144][ T9] usb 8-1: SerialNumber: syz [ 770.328322][ T9] usb 8-1: config 0 descriptor?? [ 770.334071][T12025] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 770.835648][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1472'. [ 770.883091][T12030] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 771.766159][ T9] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 771.766445][ T9] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 771.833008][ T9] usb 8-1: USB disconnect, device number 2 [ 773.587499][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1479'. [ 775.536457][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1483'. [ 776.294686][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 776.294703][ T37] audit: type=1326 audit(2000000943.903:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.300878][ T37] audit: type=1326 audit(2000000943.903:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.301056][ T37] audit: type=1326 audit(2000000943.903:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.301093][ T37] audit: type=1326 audit(2000000943.903:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.301137][ T37] audit: type=1326 audit(2000000943.903:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.301176][ T37] audit: type=1326 audit(2000000943.913:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.357798][ T37] audit: type=1326 audit(2000000943.973:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.357845][ T37] audit: type=1326 audit(2000000943.973:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.431441][ T37] audit: type=1326 audit(2000000943.983:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 776.431491][ T37] audit: type=1326 audit(2000000943.993:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb340c819 code=0x7ffc0000 [ 777.196977][ T809] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 777.384724][ T809] usb 8-1: Using ep0 maxpacket: 32 [ 777.386609][ T809] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 777.386633][ T809] usb 8-1: config 0 has no interface number 0 [ 777.386673][ T809] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 777.386694][ T809] usb 8-1: config 0 interface 196 has no altsetting 0 [ 777.389452][ T809] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 777.389473][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.389483][ T809] usb 8-1: Product: syz [ 777.389490][ T809] usb 8-1: Manufacturer: syz [ 777.389497][ T809] usb 8-1: SerialNumber: syz [ 777.393162][ T809] usb 8-1: config 0 descriptor?? [ 777.397288][T12108] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 778.152633][T12123] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 778.209952][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 780.003981][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 780.451292][ T809] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 780.451575][ T809] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 780.474862][ T809] usb 8-1: USB disconnect, device number 3 [ 783.376947][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1507'. [ 785.244789][ T5872] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 785.424807][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 785.427432][ T5872] usb 8-1: config 7 has an invalid interface number: 124 but max is 2 [ 785.427456][ T5872] usb 8-1: config 7 has an invalid interface number: 52 but max is 2 [ 785.427474][ T5872] usb 8-1: config 7 has no interface number 1 [ 785.427488][ T5872] usb 8-1: config 7 has no interface number 2 [ 785.427554][ T5872] usb 8-1: config 7 interface 0 altsetting 163 bulk endpoint 0x85 has invalid maxpacket 8 [ 785.427577][ T5872] usb 8-1: config 7 interface 0 altsetting 163 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 785.427600][ T5872] usb 8-1: config 7 interface 124 has no altsetting 0 [ 785.427617][ T5872] usb 8-1: config 7 interface 0 has no altsetting 0 [ 785.427632][ T5872] usb 8-1: config 7 interface 52 has no altsetting 0 [ 785.429900][ T5872] usb 8-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=c1.59 [ 785.429924][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.429942][ T5872] usb 8-1: Product: syz [ 785.429954][ T5872] usb 8-1: Manufacturer: syz [ 785.429967][ T5872] usb 8-1: SerialNumber: syz [ 787.337865][ T5872] smsusb:smsusb_probe: board id=8, interface number 124 [ 787.379828][ T5872] smsusb:smsusb_probe: board id=8, interface number 0 [ 787.468487][ T5872] smsusb:siano_media_device_register: media controller created [ 787.472429][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.472567][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.472631][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.472694][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.546071][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.546153][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.546217][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.546280][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.546612][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.546680][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 787.548338][ T5872] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 787.548394][ T5872] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 787.548406][ T5872] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 787.548418][ T5872] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 787.550695][ T5872] ------------[ cut here ]------------ [ 787.550705][ T5872] !PageLargeKmalloc(page) [ 787.550719][ T5872] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#1: kworker/1:3/5872 [ 787.550760][ T5872] Modules linked in: [ 787.550797][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 787.550824][ T5872] Tainted: [L]=SOFTLOCKUP [ 787.550831][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 787.550848][ T5872] Workqueue: usb_hub_wq hub_event [ 787.550875][ T5872] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 787.550896][ T5872] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 de b4 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 55 f6 57 8d 5b 41 5e 5d e9 07 8d 08 ff [ 787.550914][ T5872] RSP: 0018:ffffc900052e6b20 EFLAGS: 00010206 [ 787.550930][ T5872] RAX: 00000000ff000000 RBX: ffffea0001f6d880 RCX: 0000000000000001 [ 787.550944][ T5872] RDX: ffffc9001c063000 RSI: ffff88807db62000 RDI: ffffea0001f6d880 [ 787.550959][ T5872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 787.550971][ T5872] R10: dffffc0000000000 R11: ffffed1006d44f01 R12: 1ffff11006f66c82 [ 787.550986][ T5872] R13: ffff888028bb2280 R14: ffff888036a27860 R15: dffffc0000000000 [ 787.551000][ T5872] FS: 0000000000000000(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 787.551016][ T5872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.551029][ T5872] CR2: 00007ffcaa209c0c CR3: 000000005f9be000 CR4: 00000000003526f0 [ 787.551049][ T5872] Call Trace: [ 787.551057][ T5872] [ 787.551069][ T5872] usb_free_urb+0xd0/0x120 [ 787.551090][ T5872] smsusb_term_device+0x1d7/0x3e0 [ 787.551117][ T5872] smsusb_probe+0x1aba/0x2280 [ 787.551154][ T5872] ? __pfx_smsusb_probe+0x10/0x10 [ 787.551183][ T5872] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 787.551220][ T5872] ? __pm_runtime_set_status+0x99c/0xc70 [ 787.551255][ T5872] usb_probe_interface+0x668/0xc90 [ 787.551291][ T5872] ? __pfx_usb_probe_interface+0x10/0x10 [ 787.551314][ T5872] really_probe+0x267/0xaf0 [ 787.551346][ T5872] __driver_probe_device+0x18c/0x320 [ 787.551382][ T5872] driver_probe_device+0x4f/0x240 [ 787.551411][ T5872] __device_attach_driver+0x279/0x430 [ 787.551441][ T5872] bus_for_each_drv+0x25b/0x2f0 [ 787.551463][ T5872] ? __pfx___device_attach_driver+0x10/0x10 [ 787.551489][ T5872] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.551509][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.551544][ T5872] __device_attach+0x2c8/0x450 [ 787.551570][ T5872] ? __pfx___device_attach+0x10/0x10 [ 787.551594][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.551625][ T5872] device_initial_probe+0xa1/0xd0 [ 787.551652][ T5872] bus_probe_device+0x12d/0x220 [ 787.551670][ T5872] ? device_add+0x726/0xb80 [ 787.551694][ T5872] device_add+0x7b6/0xb80 [ 787.551722][ T5872] usb_set_configuration+0x1a87/0x2110 [ 787.551776][ T5872] usb_generic_driver_probe+0x8d/0x150 [ 787.551802][ T5872] usb_probe_device+0x1c4/0x3b0 [ 787.551830][ T5872] ? __pfx_usb_probe_device+0x10/0x10 [ 787.551851][ T5872] really_probe+0x267/0xaf0 [ 787.551883][ T5872] __driver_probe_device+0x18c/0x320 [ 787.551911][ T5872] driver_probe_device+0x4f/0x240 [ 787.551939][ T5872] __device_attach_driver+0x279/0x430 [ 787.551969][ T5872] bus_for_each_drv+0x25b/0x2f0 [ 787.551989][ T5872] ? __pfx___device_attach_driver+0x10/0x10 [ 787.552014][ T5872] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.552034][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.552068][ T5872] __device_attach+0x2c8/0x450 [ 787.552093][ T5872] ? __pfx___device_attach+0x10/0x10 [ 787.552117][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.552149][ T5872] device_initial_probe+0xa1/0xd0 [ 787.552175][ T5872] bus_probe_device+0x12d/0x220 [ 787.552193][ T5872] ? device_add+0x726/0xb80 [ 787.552218][ T5872] device_add+0x7b6/0xb80 [ 787.552245][ T5872] usb_new_device+0x9f8/0x16e0 [ 787.552274][ T5872] ? __pfx_usb_new_device+0x10/0x10 [ 787.552301][ T5872] hub_event+0x2a49/0x4f60 [ 787.552366][ T5872] ? __pfx_hub_event+0x10/0x10 [ 787.552403][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 787.552427][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 787.552453][ T5872] process_scheduled_works+0xb6e/0x18c0 [ 787.552511][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 787.552544][ T5872] ? assign_work+0x3d5/0x5e0 [ 787.552573][ T5872] worker_thread+0xa53/0xfc0 [ 787.552628][ T5872] kthread+0x388/0x470 [ 787.552653][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 787.552676][ T5872] ? __pfx_kthread+0x10/0x10 [ 787.552698][ T5872] ret_from_fork+0x51e/0xb90 [ 787.552732][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 787.552755][ T5872] ? __switch_to+0xc7d/0x1450 [ 787.552779][ T5872] ? __pfx_kthread+0x10/0x10 [ 787.552803][ T5872] ret_from_fork_asm+0x1a/0x30 [ 787.552840][ T5872] [ 787.552860][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 787.552880][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 787.552905][ T5872] Tainted: [L]=SOFTLOCKUP [ 787.552911][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 787.552923][ T5872] Workqueue: usb_hub_wq hub_event [ 787.552946][ T5872] Call Trace: [ 787.552953][ T5872] [ 787.552961][ T5872] vpanic+0x56c/0xa60 [ 787.552988][ T5872] ? __pfx__printk+0x10/0x10 [ 787.553008][ T5872] ? __pfx_vpanic+0x10/0x10 [ 787.553032][ T5872] ? is_bpf_text_address+0x292/0x2b0 [ 787.553057][ T5872] ? is_bpf_text_address+0x26/0x2b0 [ 787.553091][ T5872] panic+0xc5/0xd0 [ 787.553115][ T5872] ? __pfx_panic+0x10/0x10 [ 787.553148][ T5872] ? ret_from_fork_asm+0x1a/0x30 [ 787.553173][ T5872] __warn+0x315/0x4f0 [ 787.553196][ T5872] ? free_large_kmalloc+0xa3/0x140 [ 787.553218][ T5872] ? free_large_kmalloc+0xa3/0x140 [ 787.553239][ T5872] __report_bug+0x29a/0x540 [ 787.553257][ T5872] ? device_initial_probe+0xa1/0xd0 [ 787.553279][ T5872] ? bus_probe_device+0x12d/0x220 [ 787.553296][ T5872] ? device_add+0x7b6/0xb80 [ 787.553321][ T5872] ? free_large_kmalloc+0xa3/0x140 [ 787.553341][ T5872] ? __pfx___report_bug+0x10/0x10 [ 787.553360][ T5872] ? usb_new_device+0x9f8/0x16e0 [ 787.553385][ T5872] ? hub_event+0x2a49/0x4f60 [ 787.553410][ T5872] ? do_raw_spin_lock+0x12b/0x2f0 [ 787.553530][ T5872] ? free_large_kmalloc+0xa3/0x140 [ 787.553579][ T5872] report_bug+0x16a/0x220 [ 787.553615][ T5872] ? free_large_kmalloc+0xa3/0x140 [ 787.553661][ T5872] ? free_large_kmalloc+0xa5/0x140 [ 787.553708][ T5872] handle_bug+0x9c/0x200 [ 787.553762][ T5872] exc_invalid_op+0x1a/0x50 [ 787.553817][ T5872] asm_exc_invalid_op+0x1a/0x20 [ 787.553869][ T5872] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 787.553918][ T5872] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 de b4 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 55 f6 57 8d 5b 41 5e 5d e9 07 8d 08 ff [ 787.553949][ T5872] RSP: 0018:ffffc900052e6b20 EFLAGS: 00010206 [ 787.553993][ T5872] RAX: 00000000ff000000 RBX: ffffea0001f6d880 RCX: 0000000000000001 [ 787.554021][ T5872] RDX: ffffc9001c063000 RSI: ffff88807db62000 RDI: ffffea0001f6d880 [ 787.554050][ T5872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 787.554076][ T5872] R10: dffffc0000000000 R11: ffffed1006d44f01 R12: 1ffff11006f66c82 [ 787.554117][ T5872] R13: ffff888028bb2280 R14: ffff888036a27860 R15: dffffc0000000000 [ 787.554166][ T5872] usb_free_urb+0xd0/0x120 [ 787.554219][ T5872] smsusb_term_device+0x1d7/0x3e0 [ 787.554261][ T5872] smsusb_probe+0x1aba/0x2280 [ 787.554327][ T5872] ? __pfx_smsusb_probe+0x10/0x10 [ 787.554389][ T5872] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 787.554453][ T5872] ? __pm_runtime_set_status+0x99c/0xc70 [ 787.554514][ T5872] usb_probe_interface+0x668/0xc90 [ 787.554592][ T5872] ? __pfx_usb_probe_interface+0x10/0x10 [ 787.554713][ T5872] really_probe+0x267/0xaf0 [ 787.554786][ T5872] __driver_probe_device+0x18c/0x320 [ 787.554853][ T5872] driver_probe_device+0x4f/0x240 [ 787.554924][ T5872] __device_attach_driver+0x279/0x430 [ 787.554996][ T5872] bus_for_each_drv+0x25b/0x2f0 [ 787.555033][ T5872] ? __pfx___device_attach_driver+0x10/0x10 [ 787.555102][ T5872] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.555151][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.555237][ T5872] __device_attach+0x2c8/0x450 [ 787.555307][ T5872] ? __pfx___device_attach+0x10/0x10 [ 787.555360][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.555438][ T5872] device_initial_probe+0xa1/0xd0 [ 787.555505][ T5872] bus_probe_device+0x12d/0x220 [ 787.555552][ T5872] ? device_add+0x726/0xb80 [ 787.555610][ T5872] device_add+0x7b6/0xb80 [ 787.555666][ T5872] usb_set_configuration+0x1a87/0x2110 [ 787.555755][ T5872] usb_generic_driver_probe+0x8d/0x150 [ 787.555809][ T5872] usb_probe_device+0x1c4/0x3b0 [ 787.555880][ T5872] ? __pfx_usb_probe_device+0x10/0x10 [ 787.555930][ T5872] really_probe+0x267/0xaf0 [ 787.556003][ T5872] __driver_probe_device+0x18c/0x320 [ 787.556072][ T5872] driver_probe_device+0x4f/0x240 [ 787.556143][ T5872] __device_attach_driver+0x279/0x430 [ 787.556216][ T5872] bus_for_each_drv+0x25b/0x2f0 [ 787.556253][ T5872] ? __pfx___device_attach_driver+0x10/0x10 [ 787.556337][ T5872] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.556392][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.556468][ T5872] __device_attach+0x2c8/0x450 [ 787.556537][ T5872] ? __pfx___device_attach+0x10/0x10 [ 787.556590][ T5872] ? rt_spin_unlock+0x160/0x200 [ 787.556679][ T5872] device_initial_probe+0xa1/0xd0 [ 787.556734][ T5872] bus_probe_device+0x12d/0x220 [ 787.556791][ T5872] ? device_add+0x726/0xb80 [ 787.556845][ T5872] device_add+0x7b6/0xb80 [ 787.556902][ T5872] usb_new_device+0x9f8/0x16e0 [ 787.556965][ T5872] ? __pfx_usb_new_device+0x10/0x10 [ 787.557028][ T5872] hub_event+0x2a49/0x4f60 [ 787.557149][ T5872] ? __pfx_hub_event+0x10/0x10 [ 787.557212][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 787.557279][ T5872] ? process_scheduled_works+0xa8d/0x18c0 [ 787.557353][ T5872] process_scheduled_works+0xb6e/0x18c0 [ 787.557464][ T5872] ? __pfx_process_scheduled_works+0x10/0x10 [ 787.557538][ T5872] ? assign_work+0x3d5/0x5e0 [ 787.557611][ T5872] worker_thread+0xa53/0xfc0 [ 787.557710][ T5872] kthread+0x388/0x470 [ 787.557759][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 787.557822][ T5872] ? __pfx_kthread+0x10/0x10 [ 787.557862][ T5872] ret_from_fork+0x51e/0xb90 [ 787.557932][ T5872] ? __pfx_ret_from_fork+0x10/0x10 [ 787.557997][ T5872] ? __switch_to+0xc7d/0x1450 [ 787.558069][ T5872] ? __pfx_kthread+0x10/0x10 [ 787.558118][ T5872] ret_from_fork_asm+0x1a/0x30 [ 787.558183][ T5872] [ 787.558547][ T5872] Kernel Offset: disabled