last executing test programs: 5m58.191824775s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000002c0)={{0x3, 0x2, 0x1, 0x3, 0xfffffff7}, 0xe53, 0xda}) 5m55.066082827s ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m54.328889444s ago: executing program 0 (id=1): openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 5m52.715643018s ago: executing program 1 (id=10): bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000004dc0)={0x2020}, 0x2020) 5m51.371113292s ago: executing program 1 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000500)=0x1) syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 5m47.083953762s ago: executing program 1 (id=18): pipe(&(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x105342, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5m39.074383181s ago: executing program 32 (id=1): openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 5m34.723963472s ago: executing program 1 (id=33): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2, 0x18, r7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000540)=0xd172, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000140)="41000200010001", 0x7) 5m31.856018211s ago: executing program 33 (id=33): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2, 0x18, r7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000540)=0xd172, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000140)="41000200010001", 0x7) 1m47.237198534s ago: executing program 3 (id=662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000009c0)={0x0, 0x5}, &(0x7f0000000a00)=0x8) 1m46.845267465s ago: executing program 3 (id=666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0xfffc, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 1m46.398860518s ago: executing program 3 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) 1m45.263777437s ago: executing program 3 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m45.033241095s ago: executing program 3 (id=685): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000540)={0x0, 0x1, 0x9, 0x7f, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) socket(0x400000000010, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) 1m44.252922085s ago: executing program 3 (id=695): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xe, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) 1m43.939696417s ago: executing program 34 (id=695): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xe, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) 1m3.937899959s ago: executing program 2 (id=1062): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x3, 0x0, 0x4, 0x2}}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 1m3.195115575s ago: executing program 2 (id=1071): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x109081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000140)="15", 0x1}], 0x1, 0xa, 0x5, 0x15) 1m2.868465133s ago: executing program 2 (id=1074): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003f40)=""/145, 0x91}, {0x0}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1m2.405762754s ago: executing program 2 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m2.079716201s ago: executing program 2 (id=1082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x30, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) shutdown(r0, 0x1) 1m0.74770964s ago: executing program 2 (id=1093): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1m0.346392769s ago: executing program 35 (id=1093): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.495035006s ago: executing program 4 (id=1500): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) 8.410432634s ago: executing program 8 (id=1502): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) fanotify_init(0x40, 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0) syslog(0x9, 0x0, 0x0) 8.277946467s ago: executing program 4 (id=1504): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvfrom$l2tp(r0, &(0x7f00000004c0)=""/232, 0xe8, 0x4040, 0x0, 0x0) 8.226042806s ago: executing program 4 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffdd972019d0e588a81c00810000000800455600b000630000821190"], 0xc6) 8.051785752s ago: executing program 4 (id=1506): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 8.043976051s ago: executing program 4 (id=1507): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 7.376951344s ago: executing program 8 (id=1511): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc5614beaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce84bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bcbd4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d7916daf222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7742850b956b609740c913f54225ae18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14a08e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c3792c5d2665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250b089b0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea", 0x2000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 7.119554211s ago: executing program 4 (id=1513): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 7.055925421s ago: executing program 8 (id=1514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x4000000}, 0x0) 6.483063602s ago: executing program 36 (id=1513): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 5.603117725s ago: executing program 8 (id=1522): r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5.352855397s ago: executing program 8 (id=1525): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) 3.901796328s ago: executing program 5 (id=1537): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24044092) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@hopopts={0x1, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @mcast1}]}], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.819807141s ago: executing program 6 (id=1538): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0xb2, 0x8, 0x0, 0x2, 0xa, 0x0, 0x6}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000040)=0x18) 3.58985506s ago: executing program 5 (id=1540): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5d, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7d, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20040040) dup(0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="00220700000035b193000020"], 0x0}, 0x0) 2.2820469s ago: executing program 7 (id=1542): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004054) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000040)="000000952ba30000000000000000000075", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.087695057s ago: executing program 6 (id=1543): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.604122741s ago: executing program 5 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc00}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000540)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.29333955s ago: executing program 6 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.292253968s ago: executing program 7 (id=1546): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) 1.20296942s ago: executing program 8 (id=1547): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000000)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x20, 0x17, 0x1, 'E'}, 0x0, 0x0}) 983.796207ms ago: executing program 7 (id=1548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) 952.985276ms ago: executing program 5 (id=1549): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0002000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 840.294075ms ago: executing program 6 (id=1550): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) pwrite64(r2, 0x0, 0x0, 0x4) 820.82896ms ago: executing program 7 (id=1551): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4000054}, 0x0) 783.78259ms ago: executing program 5 (id=1552): recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40010123, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @random="a3fc46462109"}, 0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) 516.739679ms ago: executing program 6 (id=1553): r0 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) 296.496947ms ago: executing program 5 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r1, r2+60000000}, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 207.681772ms ago: executing program 7 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 157.343286ms ago: executing program 6 (id=1556): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close(r1) 0s ago: executing program 7 (id=1557): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40000033, 0x0) kernel console output (not intermixed with test programs): ge read [ 224.201778][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.201877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.216307][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.216345][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.232907][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.232953][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.239696][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.241268][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.290644][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.290693][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.295572][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.295683][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.295817][ T6520] ldm_validate_partition_table(): Disk read failed. [ 224.304336][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.304382][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.352503][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.352562][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.361583][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 224.361661][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.372443][ T6520] Dev loop6: unable to read RDB block 0 [ 224.405581][ T6520] loop6: unable to read partition table [ 224.417713][ T6520] loop6: partition table beyond EOD, truncated [ 224.417904][ T6520] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 225.327833][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.493049][ T6341] team0: Port device team_slave_0 added [ 225.508538][ T6341] team0: Port device team_slave_1 added [ 225.801291][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.801305][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.801324][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.893165][ T6306] hsr_slave_0: entered promiscuous mode [ 225.894164][ T6306] hsr_slave_1: entered promiscuous mode [ 225.894852][ T6306] debugfs: 'hsr0' already exists in 'hsr' [ 225.894870][ T6306] Cannot create hsr debugfs directory [ 225.895946][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.895957][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.895986][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.425836][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 226.701364][ T6542] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 226.701393][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.701511][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 226.753402][ T6542] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 226.753431][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.753488][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 226.784096][ T6542] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 226.784124][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.784184][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 226.823978][ T6542] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 226.824007][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.824068][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 226.835623][ T6542] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 226.866046][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.881818][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 226.911789][ T6542] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 226.911817][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 226.911933][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 226.916979][ T6542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.942924][ T6542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.991746][ T5867] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 227.038860][ T6555] vhci_hcd: connection closed [ 227.040191][ T12] vhci_hcd vhci_hcd.4: stop threads [ 227.040211][ T12] vhci_hcd vhci_hcd.4: release socket [ 227.040241][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 227.072813][ T6545] vhci_hcd: connection closed [ 227.073132][ T6550] vhci_hcd: connection closed [ 227.073504][ T6543] vhci_hcd: connection reset by peer [ 227.074302][ T6552] vhci_hcd: connection closed [ 227.074577][ T6547] vhci_hcd: connection closed [ 227.087011][ T12] vhci_hcd vhci_hcd.4: stop threads [ 227.087095][ T12] vhci_hcd vhci_hcd.4: release socket [ 227.087296][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 227.092818][ T12] vhci_hcd vhci_hcd.4: stop threads [ 227.092864][ T12] vhci_hcd vhci_hcd.4: release socket [ 227.093038][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 227.096704][ T12] vhci_hcd vhci_hcd.4: stop threads [ 227.096762][ T12] vhci_hcd vhci_hcd.4: release socket [ 227.096921][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 227.098709][ T12] vhci_hcd vhci_hcd.4: stop threads [ 227.098752][ T12] vhci_hcd vhci_hcd.4: release socket [ 227.098835][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 227.145047][ T12] vhci_hcd vhci_hcd.4: stop threads [ 227.145072][ T12] vhci_hcd vhci_hcd.4: release socket [ 227.145244][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 227.376948][ T6341] hsr_slave_0: entered promiscuous mode [ 227.378329][ T6341] hsr_slave_1: entered promiscuous mode [ 227.379289][ T6341] debugfs: 'hsr0' already exists in 'hsr' [ 227.379314][ T6341] Cannot create hsr debugfs directory [ 229.065605][ T13] bridge_slave_1: left allmulticast mode [ 229.065634][ T13] bridge_slave_1: left promiscuous mode [ 229.065866][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.303467][ T13] bridge_slave_0: left allmulticast mode [ 229.303497][ T13] bridge_slave_0: left promiscuous mode [ 229.303791][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.378879][ T13] bridge_slave_1: left allmulticast mode [ 231.378911][ T13] bridge_slave_1: left promiscuous mode [ 231.379159][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.425709][ T13] bridge_slave_0: left allmulticast mode [ 233.425741][ T13] bridge_slave_0: left promiscuous mode [ 233.426016][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.521985][ T5867] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 233.596376][ T13] bridge_slave_1: left allmulticast mode [ 233.596406][ T13] bridge_slave_1: left promiscuous mode [ 233.596649][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.687011][ T6571] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 233.714037][ T13] bridge_slave_0: left allmulticast mode [ 233.714058][ T13] bridge_slave_0: left promiscuous mode [ 233.714231][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.021885][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 234.173142][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 234.177061][ T31] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 234.177087][ T31] usb 4-1: config 0 has no interface number 0 [ 234.177129][ T31] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.177151][ T31] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.177174][ T31] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 234.177197][ T31] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 234.177233][ T31] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.179652][ T31] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 234.179680][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.179713][ T31] usb 4-1: Product: syz [ 234.179727][ T31] usb 4-1: Manufacturer: syz [ 234.179742][ T31] usb 4-1: SerialNumber: syz [ 234.218386][ T31] usb 4-1: config 0 descriptor?? [ 234.585762][ T6571] sctp: [Deprecated]: syz.3.129 (pid 6571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.585762][ T6571] Use struct sctp_sack_info instead [ 234.634101][ T31] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 234.637642][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.675155][ T31] usb 4-1: USB disconnect, device number 2 [ 234.791777][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 234.811311][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.953530][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 234.957092][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.958731][ T5921] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 234.958786][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 234.958815][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.958838][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 234.958866][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 234.958892][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 234.958914][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 235.035013][ T5921] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 235.035045][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.035067][ T5921] usb 5-1: Product: syz [ 235.035083][ T5921] usb 5-1: Manufacturer: syz [ 235.035098][ T5921] usb 5-1: SerialNumber: syz [ 235.093338][ T5921] usb 5-1: config 0 descriptor?? [ 235.094966][ T6574] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 235.125261][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.193481][ T13] bond0 (unregistering): Released all slaves [ 236.623922][ T6585] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 236.957905][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.567103][ T5921] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 237.663704][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.702732][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.706720][ T13] bond0 (unregistering): Released all slaves [ 238.062514][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.103839][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.126663][ T13] bond0 (unregistering): Released all slaves [ 238.667271][ T5867] usb 5-1: USB disconnect, device number 5 [ 239.080111][ T6306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.053146][ T6306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.181751][ T6306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.838490][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz.3.135'. [ 242.915034][ T6306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.267781][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.273444][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.275002][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.297425][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.298605][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.437569][ T5790] Bluetooth: hci5: command tx timeout [ 246.172609][ T5790] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 247.061288][ T37] audit: type=1326 audit(1772130009.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6647 comm="syz.4.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x0 [ 247.745230][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 247.746194][ T6653] netlink: 'syz.4.142': attribute type 21 has an invalid length. [ 247.746220][ T6653] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.746646][ T6653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.746658][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 247.747049][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 247.747084][ T6653] IPv6: NLM_F_CREATE should be set when creating new route [ 248.421692][ T6341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.075668][ T5790] Bluetooth: hci5: command tx timeout [ 251.212247][ T5790] Bluetooth: hci5: command tx timeout [ 251.431816][ T13] hsr_slave_0: left promiscuous mode [ 251.485270][ T13] hsr_slave_1: left promiscuous mode [ 251.486311][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.564822][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.584228][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.762889][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.780327][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.781564][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.783222][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.784123][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.982421][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.032239][ T13] hsr_slave_0: left promiscuous mode [ 253.251796][ T13] hsr_slave_1: left promiscuous mode [ 253.252947][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.252974][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.272207][ T5108] Bluetooth: hci5: command tx timeout [ 253.273324][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.273348][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.140718][ T5108] Bluetooth: hci4: command tx timeout [ 254.166670][ T13] veth1_macvtap: left promiscuous mode [ 254.166739][ T13] veth0_macvtap: left promiscuous mode [ 254.167727][ T13] veth1_vlan: left promiscuous mode [ 254.167848][ T13] veth0_vlan: left promiscuous mode [ 254.923561][ T13] team0 (unregistering): Port device team_slave_1 removed [ 254.973116][ T13] team0 (unregistering): Port device team_slave_0 removed [ 255.172350][ T13] team0 (unregistering): Port device team_slave_1 removed [ 255.237636][ T13] team0 (unregistering): Port device team_slave_0 removed [ 255.742581][ T13] team0 (unregistering): Port device team_slave_1 removed [ 255.766508][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766587][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.812563][ T13] team0 (unregistering): Port device team_slave_0 removed [ 256.224133][ T5108] Bluetooth: hci4: command tx timeout [ 258.231939][ T5108] Bluetooth: hci4: command tx timeout [ 260.311877][ T5108] Bluetooth: hci4: command tx timeout [ 264.915605][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 270.931377][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 270.982340][ T6673] chnl_net:caif_netlink_parms(): no params data found [ 271.471905][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.472040][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.472300][ T6621] bridge_slave_0: entered allmulticast mode [ 271.475027][ T6621] bridge_slave_0: entered promiscuous mode [ 271.478120][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.478291][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.478493][ T6621] bridge_slave_1: entered allmulticast mode [ 271.481270][ T6621] bridge_slave_1: entered promiscuous mode [ 272.148149][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.623964][ T6788] max out of range [ 273.142078][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.495060][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.495189][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.495383][ T6673] bridge_slave_0: entered allmulticast mode [ 273.498173][ T6673] bridge_slave_0: entered promiscuous mode [ 273.723869][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.723992][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.724247][ T6673] bridge_slave_1: entered allmulticast mode [ 273.727027][ T6673] bridge_slave_1: entered promiscuous mode [ 273.737486][ T6621] team0: Port device team_slave_0 added [ 273.967954][ T6621] team0: Port device team_slave_1 added [ 274.198457][ T6673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.617944][ T6673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.363511][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 276.527156][ T37] audit: type=1326 audit(1772130039.430:3): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.2.174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff20bfac799 code=0x0 [ 276.566249][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.566266][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.566291][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.639705][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.639723][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.639752][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.712820][ T6673] team0: Port device team_slave_0 added [ 276.719325][ T6673] team0: Port device team_slave_1 added [ 276.839162][ T6621] hsr_slave_0: entered promiscuous mode [ 276.840531][ T6621] hsr_slave_1: entered promiscuous mode [ 276.841523][ T6621] debugfs: 'hsr0' already exists in 'hsr' [ 276.841548][ T6621] Cannot create hsr debugfs directory [ 276.866281][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.866296][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.866319][ T6673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.868436][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.868447][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.868469][ T6673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.214109][ T6673] hsr_slave_0: entered promiscuous mode [ 277.218250][ T6673] hsr_slave_1: entered promiscuous mode [ 277.219327][ T6673] debugfs: 'hsr0' already exists in 'hsr' [ 277.219353][ T6673] Cannot create hsr debugfs directory [ 284.467611][ T6882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 284.467638][ T6882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 284.701696][ T6882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 284.701726][ T6882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 287.571157][ T6931] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 288.740437][ T6953] loop6: detected capacity change from 0 to 7 [ 288.796059][ C0] blk_print_req_error: 10 callbacks suppressed [ 288.796080][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.796139][ C0] buffer_io_error: 10 callbacks suppressed [ 288.796203][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.828190][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.828228][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.829098][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.829144][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.833703][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.833793][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.836940][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.837004][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.851489][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.851559][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.854434][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.854526][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.854624][ T6953] ldm_validate_partition_table(): Disk read failed. [ 288.855485][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.855553][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.857631][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.857681][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.858339][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 288.858370][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 288.859054][ T6953] Dev loop6: unable to read RDB block 0 [ 288.884893][ T6953] loop6: unable to read partition table [ 288.886507][ T6953] loop6: partition table beyond EOD, truncated [ 288.886632][ T6953] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 290.014132][ T6958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 291.601860][ T6983] netlink: 'syz.3.210': attribute type 2 has an invalid length. [ 291.738925][ T6983] !: entered promiscuous mode [ 293.425788][ T37] audit: type=1326 audit(1772130312.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.425844][ T37] audit: type=1326 audit(1772130312.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.425890][ T37] audit: type=1326 audit(1772130312.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.437369][ T37] audit: type=1326 audit(1772130312.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.437430][ T37] audit: type=1326 audit(1772130312.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.437478][ T37] audit: type=1326 audit(1772130312.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.437524][ T37] audit: type=1326 audit(1772130312.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.437571][ T37] audit: type=1326 audit(1772130312.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.437616][ T37] audit: type=1326 audit(1772130312.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7011 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 293.801468][ T7021] netlink: 'syz.2.221': attribute type 15 has an invalid length. [ 293.801494][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 294.451828][ T5921] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 294.527005][ T13] bridge_slave_1: left allmulticast mode [ 294.527035][ T13] bridge_slave_1: left promiscuous mode [ 294.527311][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.601728][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 294.604017][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.604721][ T13] bridge_slave_0: left allmulticast mode [ 294.604747][ T13] bridge_slave_0: left promiscuous mode [ 294.605020][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.607094][ T5921] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 294.607121][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.607141][ T5921] usb 4-1: Product: syz [ 294.607155][ T5921] usb 4-1: Manufacturer: syz [ 294.607169][ T5921] usb 4-1: SerialNumber: syz [ 294.683137][ T5921] usb 4-1: config 0 descriptor?? [ 294.688563][ T5921] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 294.723177][ T37] audit: type=1326 audit(1772130313.620:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7047 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 294.776520][ T13] bridge_slave_1: left allmulticast mode [ 294.776550][ T13] bridge_slave_1: left promiscuous mode [ 294.776807][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.869038][ T13] bridge_slave_0: left allmulticast mode [ 294.869067][ T13] bridge_slave_0: left promiscuous mode [ 294.869317][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.892960][ T7053] CIFS: iocharset name too long [ 294.897398][ T5921] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 294.897507][ T5921] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 294.940745][ T5921] usb 4-1: USB disconnect, device number 3 [ 295.714506][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.301150][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.385675][ T13] bond0 (unregistering): Released all slaves [ 298.582438][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.672444][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.733523][ T13] bond0 (unregistering): Released all slaves [ 300.736548][ T13] hsr_slave_0: left promiscuous mode [ 301.532197][ T13] hsr_slave_1: left promiscuous mode [ 301.553254][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.721022][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.153083][ T13] hsr_slave_0: left promiscuous mode [ 303.171797][ T13] hsr_slave_1: left promiscuous mode [ 303.172650][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.212452][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.564458][ T7138] kernel profiling enabled (shift: 9) [ 304.787717][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.808649][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.809946][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.826941][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.830461][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.831873][ T13] team0 (unregistering): Port device team_slave_1 removed [ 304.905103][ T13] team0 (unregistering): Port device team_slave_0 removed [ 305.313937][ T13] team0 (unregistering): Port device team_slave_1 removed [ 305.357286][ T13] team0 (unregistering): Port device team_slave_0 removed [ 305.645204][ T7155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.258'. [ 305.645601][ T7155] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 306.692726][ T5790] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 306.693064][ T5790] Bluetooth: hci1: Malformed LE Event: 0x0d [ 307.339237][ T5790] Bluetooth: hci3: command tx timeout [ 307.593843][ T7177] netlink: 'syz.4.263': attribute type 21 has an invalid length. [ 307.593984][ T7177] netlink: 132 bytes leftover after parsing attributes in process `syz.4.263'. [ 307.705577][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 308.000427][ T5937] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 308.194087][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 308.200518][ T5937] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 308.200545][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.200566][ T5937] usb 3-1: config 0 has no interface number 0 [ 308.252276][ T5937] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 308.252305][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.252325][ T5937] usb 3-1: Product: syz [ 308.252339][ T5937] usb 3-1: Manufacturer: syz [ 308.252353][ T5937] usb 3-1: SerialNumber: syz [ 308.298162][ T5937] usb 3-1: config 0 descriptor?? [ 308.447750][ T5937] viperboard 3-1:0.61: version 0.00 found at bus 003 address 003 [ 308.550727][ T5937] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 308.550751][ T5937] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 308.957696][ T9] usb 3-1: USB disconnect, device number 3 [ 309.351383][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.351469][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.367330][ T5790] Bluetooth: hci3: command tx timeout [ 309.395263][ T7146] bridge_slave_0: entered allmulticast mode [ 309.427924][ T7146] bridge_slave_0: entered promiscuous mode [ 309.471410][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.481813][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.482070][ T7146] bridge_slave_1: entered allmulticast mode [ 309.484967][ T7146] bridge_slave_1: entered promiscuous mode [ 309.966275][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.018421][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.105450][ T5108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.184354][ T5108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.189137][ T5108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.212313][ T5108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.213510][ T5108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.565227][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 310.663782][ T7146] team0: Port device team_slave_0 added [ 310.802557][ T7146] team0: Port device team_slave_1 added [ 311.418839][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.418854][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.418874][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.433829][ T5108] Bluetooth: hci3: command tx timeout [ 311.549682][ T7224] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 311.550920][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.550936][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.550964][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.311759][ T5108] Bluetooth: hci6: command tx timeout [ 313.296204][ T7146] hsr_slave_0: entered promiscuous mode [ 313.299027][ T7146] hsr_slave_1: entered promiscuous mode [ 313.300179][ T7146] debugfs: 'hsr0' already exists in 'hsr' [ 313.300205][ T7146] Cannot create hsr debugfs directory [ 313.301297][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 313.511782][ T5108] Bluetooth: hci3: command tx timeout [ 313.577101][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'. [ 313.921771][ T5798] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 314.076218][ T5798] usb 3-1: Using ep0 maxpacket: 16 [ 314.090608][ T5798] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 314.090637][ T5798] usb 3-1: config 4 has no interface number 0 [ 314.090683][ T5798] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 314.090708][ T5798] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 314.090730][ T5798] usb 3-1: config 4 interface 9 has no altsetting 0 [ 314.098492][ T5798] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 314.098520][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.098539][ T5798] usb 3-1: Product: syz [ 314.098552][ T5798] usb 3-1: Manufacturer: syz [ 314.098566][ T5798] usb 3-1: SerialNumber: syz [ 314.194362][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.194527][ T7268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.252594][ T5798] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 314.311446][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 314.311464][ T37] audit: type=1326 audit(1772130589.216:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.347909][ T37] audit: type=1326 audit(1772130589.256:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.349842][ T37] audit: type=1326 audit(1772130589.256:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.350449][ T37] audit: type=1326 audit(1772130589.256:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.351249][ T37] audit: type=1326 audit(1772130589.256:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.351526][ T37] audit: type=1326 audit(1772130589.256:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.385723][ T37] audit: type=1326 audit(1772130589.286:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.385993][ T37] audit: type=1326 audit(1772130589.286:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e4fec799 code=0x7ffc0000 [ 314.391695][ T5108] Bluetooth: hci6: command tx timeout [ 314.543540][ T54] usb 3-1: Failed to submit usb control message: -71 [ 314.543579][ T54] usb 3-1: unable to send the bmi data to the device: -71 [ 314.543599][ T54] usb 3-1: unable to get target info from device [ 314.543625][ T54] usb 3-1: could not get target info (-71) [ 314.543962][ T54] usb 3-1: could not probe fw (-71) [ 314.545329][ T5798] usb 3-1: USB disconnect, device number 4 [ 314.811891][ T7293] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 315.249032][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 315.737820][ T13] bridge_slave_1: left allmulticast mode [ 315.737847][ T13] bridge_slave_1: left promiscuous mode [ 315.738101][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.863103][ T13] bridge_slave_0: left allmulticast mode [ 315.863133][ T13] bridge_slave_0: left promiscuous mode [ 315.863402][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.292743][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.348779][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 316.423648][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.471856][ T5108] Bluetooth: hci6: command tx timeout [ 316.503896][ T13] bond0 (unregistering): Released all slaves [ 316.683772][ T7337] tipc: Started in network mode [ 316.683791][ T7337] tipc: Node identity , cluster identity 4711 [ 316.687516][ T7341] bridge0: port 3(team0) entered blocking state [ 316.687729][ T7341] bridge0: port 3(team0) entered disabled state [ 316.688458][ T7341] team0: entered allmulticast mode [ 316.688478][ T7341] team_slave_0: entered allmulticast mode [ 316.688560][ T7341] team_slave_1: entered allmulticast mode [ 316.745547][ T7341] team0: entered promiscuous mode [ 316.745572][ T7341] team_slave_0: entered promiscuous mode [ 316.745919][ T7341] team_slave_1: entered promiscuous mode [ 316.747800][ T7341] bridge0: port 3(team0) entered blocking state [ 316.747960][ T7341] bridge0: port 3(team0) entered forwarding state [ 316.816737][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.816930][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.817096][ T7209] bridge_slave_0: entered allmulticast mode [ 316.819753][ T7209] bridge_slave_0: entered promiscuous mode [ 317.014993][ T13] hsr_slave_0: left promiscuous mode [ 317.051910][ T13] hsr_slave_1: left promiscuous mode [ 317.052903][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.102738][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.196121][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196211][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.542595][ T13] team0 (unregistering): Port device team_slave_1 removed [ 317.593091][ T13] team0 (unregistering): Port device team_slave_0 removed [ 317.816590][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.816766][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.816966][ T7209] bridge_slave_1: entered allmulticast mode [ 317.819067][ T7209] bridge_slave_1: entered promiscuous mode [ 317.960809][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 318.178023][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.194523][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.582803][ T5108] Bluetooth: hci6: command tx timeout [ 318.648052][ T7209] team0: Port device team_slave_0 added [ 318.660504][ T7209] team0: Port device team_slave_1 added [ 318.758283][ T7387] ======================================================= [ 318.758283][ T7387] WARNING: The mand mount option has been deprecated and [ 318.758283][ T7387] and is ignored by this kernel. Remove the mand [ 318.758283][ T7387] option from the mount to silence this warning. [ 318.758283][ T7387] ======================================================= [ 318.761538][ T7387] overlayfs: failed to resolve './file0': -2 [ 320.088357][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.088375][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.088405][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.120669][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.120718][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.120790][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.435190][ T7209] hsr_slave_0: entered promiscuous mode [ 320.436656][ T7209] hsr_slave_1: entered promiscuous mode [ 320.437602][ T7209] debugfs: 'hsr0' already exists in 'hsr' [ 320.437627][ T7209] Cannot create hsr debugfs directory [ 321.031109][ T7415] tipc: Started in network mode [ 321.031140][ T7415] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 321.031187][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 321.463969][ T7432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.838755][ T7146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.939534][ T7146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.144581][ T7146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.189503][ T7146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.407311][ T7471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.373'. [ 322.522347][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 322.677784][ T31] usb 4-1: config 0 has no interfaces? [ 322.687890][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.687919][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.687940][ T31] usb 4-1: SerialNumber: syz [ 322.734081][ T31] usb 4-1: config 0 descriptor?? [ 323.017280][ T5937] usb 4-1: USB disconnect, device number 4 [ 323.068264][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.289778][ T13] bridge_slave_1: left allmulticast mode [ 323.289802][ T13] bridge_slave_1: left promiscuous mode [ 323.303300][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.368557][ T13] bridge_slave_0: left allmulticast mode [ 323.368593][ T13] bridge_slave_0: left promiscuous mode [ 323.368855][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.738319][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 323.795155][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 323.804593][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.922336][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.984993][ T13] bond0 (unregistering): Released all slaves [ 324.179452][ T5798] IPVS: starting estimator thread 0... [ 324.262062][ T7501] IPVS: using max 7 ests per chain, 16800 per kthread [ 324.263507][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.327373][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.327478][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.583843][ T13] hsr_slave_0: left promiscuous mode [ 324.621782][ T13] hsr_slave_1: left promiscuous mode [ 324.622826][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.684045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.687476][ T7512] netlink: 164 bytes leftover after parsing attributes in process `syz.2.390'. [ 325.117577][ T13] team0 (unregistering): Port device team_slave_1 removed [ 325.172979][ T13] team0 (unregistering): Port device team_slave_0 removed [ 325.585159][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.592000][ T6262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.040270][ T7532] tipc: Enabling of bearer rejected, failed to enable media [ 326.785069][ T7209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.821800][ T7209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.948437][ T7209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 326.980769][ T7209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.022208][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.525502][ T7593] netlink: 'syz.2.417': attribute type 2 has an invalid length. [ 328.576666][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.681635][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.718650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.718792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.801630][ T37] audit: type=1326 audit(1772130603.706:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.801686][ T37] audit: type=1326 audit(1772130603.706:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.808770][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.809021][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.855752][ T37] audit: type=1326 audit(1772130603.766:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.855896][ T37] audit: type=1326 audit(1772130603.766:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.855955][ T37] audit: type=1326 audit(1772130603.766:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.856080][ T37] audit: type=1326 audit(1772130603.766:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.921761][ T37] audit: type=1326 audit(1772130603.786:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.922038][ T37] audit: type=1326 audit(1772130603.816:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.922160][ T37] audit: type=1326 audit(1772130603.816:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 328.924918][ T37] audit: type=1326 audit(1772130603.836:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bfac799 code=0x7ffc0000 [ 329.334392][ T7146] veth0_vlan: entered promiscuous mode [ 329.399248][ T7146] veth1_vlan: entered promiscuous mode [ 329.587821][ T7146] veth0_macvtap: entered promiscuous mode [ 329.628272][ T7146] veth1_macvtap: entered promiscuous mode [ 329.737221][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.794475][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.909749][ T515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.915100][ T515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.952803][ T515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.986253][ T515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.087501][ T7632] tmpfs: Cannot disable swap on remount [ 330.459506][ T1229] IPVS: starting estimator thread 0... [ 330.505798][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.573346][ T7646] IPVS: using max 10 ests per chain, 24000 per kthread [ 330.677541][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.677564][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.903844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.903865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.429222][ T7209] veth0_vlan: entered promiscuous mode [ 332.456266][ T7209] veth1_vlan: entered promiscuous mode [ 332.543981][ T7209] veth0_macvtap: entered promiscuous mode [ 332.614489][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.451'. [ 332.644073][ T7209] veth1_macvtap: entered promiscuous mode [ 332.765761][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.816760][ T7699] xt_l2tp: unknown flags: 7d [ 332.835206][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.864458][ T5999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.865039][ T5999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.867458][ T5999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.886773][ T5999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.989976][ T7705] tipc: Cannot configure node identity twice [ 333.135442][ T7707] netlink: 'syz.2.457': attribute type 6 has an invalid length. [ 333.161756][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 333.332664][ T7714] netlink: 'syz.3.460': attribute type 6 has an invalid length. [ 333.372146][ T31] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 333.372179][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.372199][ T31] usb 6-1: Product: syz [ 333.372214][ T31] usb 6-1: Manufacturer: syz [ 333.372229][ T31] usb 6-1: SerialNumber: syz [ 333.430822][ T31] usb 6-1: config 0 descriptor?? [ 333.465263][ T31] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 333.541807][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.541831][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.793076][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.793098][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.939056][ T7724] mmap: syz.2.466 (7724) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 333.991767][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 334.088560][ T31] gspca_sunplus: reg_r err -71 [ 334.088672][ T31] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 334.110622][ T31] usb 6-1: USB disconnect, device number 2 [ 334.158759][ T5867] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.158780][ T5867] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.158794][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.158827][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 334.158851][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 334.214828][ T5867] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.214859][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.214880][ T5867] usb 4-1: Product: syz [ 334.214895][ T5867] usb 4-1: Manufacturer: syz [ 334.284435][ T5867] cdc_wdm 4-1:1.0: skipping garbage [ 334.284450][ T5867] cdc_wdm 4-1:1.0: skipping garbage [ 334.403747][ T5867] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 334.403780][ T5867] cdc_wdm 4-1:1.0: Unknown control protocol [ 334.557582][ T1229] usb 4-1: USB disconnect, device number 5 [ 334.666518][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 334.666537][ T37] audit: type=1326 audit(1772130609.576:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.668051][ T37] audit: type=1326 audit(1772130609.576:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.700157][ T37] audit: type=1326 audit(1772130609.596:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.700990][ T37] audit: type=1326 audit(1772130609.606:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.703924][ T37] audit: type=1326 audit(1772130609.606:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.706449][ T37] audit: type=1326 audit(1772130609.616:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.921126][ T37] audit: type=1326 audit(1772130609.826:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7740 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9f2cfcfce code=0x7ffc0000 [ 334.921168][ T37] audit: type=1326 audit(1772130609.826:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 334.946594][ T37] audit: type=1326 audit(1772130609.826:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7737 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 335.142901][ T37] audit: type=1326 audit(1772130610.056:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7740 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc9f2d3c799 code=0x7ffc0000 [ 336.347139][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.483'. [ 336.347248][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.483'. [ 336.375882][ T1229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 336.541830][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 336.547346][ T1229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 336.547375][ T1229] usb 4-1: config 0 has no interface number 0 [ 336.547420][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.547453][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 336.547480][ T1229] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.547507][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.547551][ T1229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 336.547575][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.747044][ T1229] usb 4-1: config 0 descriptor?? [ 336.833716][ T1229] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 337.030511][ T7796] program syz.2.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.444766][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 337.522921][ T7804] veth0_macvtap: left promiscuous mode [ 339.043988][ T5854] usb 4-1: USB disconnect, device number 6 [ 339.061874][ T5854] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 339.851940][ T5867] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 340.001761][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 340.004080][ T5867] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 340.004108][ T5867] usb 3-1: config 0 has no interface number 0 [ 340.004155][ T5867] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 340.021181][ T5867] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 340.021292][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.021341][ T5867] usb 3-1: Product: syz [ 340.021375][ T5867] usb 3-1: Manufacturer: syz [ 340.021423][ T5867] usb 3-1: SerialNumber: syz [ 340.086419][ T5867] usb 3-1: config 0 descriptor?? [ 340.087907][ T7866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.322444][ T7866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.528540][ T5867] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 340.529131][ T5867] asix 3-1:0.191: probe with driver asix failed with error -71 [ 340.531283][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 340.572814][ T5867] usb 3-1: USB disconnect, device number 5 [ 341.068763][ T7915] tipc: Started in network mode [ 341.068797][ T7915] tipc: Node identity 0000006416173b000000000000000001, cluster identity 4711 [ 341.068847][ T7915] tipc: Enabling of bearer rejected, failed to enable media [ 341.103233][ T7916] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 341.172157][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 343.320757][ T7999] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 343.887952][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 347.693314][ T8159] vlan2: entered promiscuous mode [ 347.693338][ T8159] bond0: entered promiscuous mode [ 347.693353][ T8159] bond_slave_0: entered promiscuous mode [ 347.693600][ T8159] bond_slave_1: entered promiscuous mode [ 348.793742][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.641'. [ 348.793779][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.641'. [ 348.849826][ T8195] gretap0: entered promiscuous mode [ 348.894680][ T8195] gretap0: left promiscuous mode [ 349.712926][ T8218] delete_channel: no stack [ 350.525052][ T8234] netlink: 84 bytes leftover after parsing attributes in process `syz.5.648'. [ 350.546839][ T8234] vlan0: entered promiscuous mode [ 351.576224][ T8254] netlink: 71 bytes leftover after parsing attributes in process `syz.6.660'. [ 351.591776][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 351.741814][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 351.744321][ T5867] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.744351][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.744376][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.744401][ T5867] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.744449][ T5867] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.744472][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.081817][ T5867] usb 3-1: GET_CAPABILITIES returned 0 [ 352.081870][ T5867] usbtmc 3-1:16.0: can't read capabilities [ 352.326660][ T5854] usb 3-1: USB disconnect, device number 6 [ 352.573877][ T8293] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 353.238104][ T5798] kernel write not supported for file bpf-map (pid: 5798 comm: kworker/1:3) [ 355.019012][ T1270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.159353][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.177027][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.178582][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.180674][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.183230][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.269445][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.702'. [ 355.562002][ T8382] capability: warning: `syz.2.709' uses 32-bit capabilities (legacy support in use) [ 355.584971][ T8382] program syz.2.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.776659][ T1270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.046085][ T1229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 356.083338][ T1270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.201818][ T1229] usb 3-1: Using ep0 maxpacket: 8 [ 356.210656][ T1229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.210737][ T1229] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 356.210762][ T1229] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 356.210805][ T1229] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.264860][ T1229] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.264898][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.264919][ T1229] usb 3-1: Product: syz [ 356.264934][ T1229] usb 3-1: Manufacturer: syz [ 356.264949][ T1229] usb 3-1: SerialNumber: syz [ 356.483181][ T1270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.635248][ T1229] usb 3-1: USB disconnect, device number 7 [ 356.672897][ T8402] program syz.5.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.904739][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.719'. [ 356.926267][ T7181] udevd[7181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.274503][ T5790] Bluetooth: hci2: command tx timeout [ 357.450162][ T1270] bridge_slave_1: left allmulticast mode [ 357.450192][ T1270] bridge_slave_1: left promiscuous mode [ 357.450447][ T1270] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.543538][ T1270] bridge_slave_0: left allmulticast mode [ 357.543568][ T1270] bridge_slave_0: left promiscuous mode [ 357.544238][ T1270] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.035960][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.729'. [ 358.402440][ T1270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.452509][ T1270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.494713][ T1270] bond0 (unregistering): Released all slaves [ 358.512180][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 358.782321][ T1270] !: left promiscuous mode [ 358.941763][ T809] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 359.045626][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 359.112188][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 359.120634][ T809] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 359.120666][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.175436][ T809] usb 7-1: config 0 descriptor?? [ 359.201459][ T809] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 359.361677][ T5790] Bluetooth: hci2: command tx timeout [ 359.368955][ T1270] tipc: Left network mode [ 359.593873][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.594057][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.594215][ T8364] bridge_slave_0: entered allmulticast mode [ 359.596527][ T8364] bridge_slave_0: entered promiscuous mode [ 359.600058][ T1270] IPVS: stopping master sync thread 6401 ... [ 359.600735][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.600915][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.601061][ T8364] bridge_slave_1: entered allmulticast mode [ 359.666635][ T8364] bridge_slave_1: entered promiscuous mode [ 359.720290][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.738578][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.830914][ T809] gspca_sonixj: reg_w1 err -71 [ 359.831022][ T809] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 359.893011][ T809] usb 7-1: USB disconnect, device number 2 [ 360.437301][ T8364] team0: Port device team_slave_0 added [ 360.466015][ T8364] team0: Port device team_slave_1 added [ 360.649399][ T8483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.745'. [ 361.941717][ T5790] Bluetooth: hci2: command tx timeout [ 363.503389][ T8503] program syz.5.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.992742][ T5790] Bluetooth: hci2: command tx timeout [ 365.103948][ T8483] netlink: 104 bytes leftover after parsing attributes in process `syz.2.745'. [ 365.119878][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.119930][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.120013][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.291067][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.291080][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.291100][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.684934][ T1270] hsr_slave_0: left promiscuous mode [ 365.721752][ T1270] hsr_slave_1: left promiscuous mode [ 365.723060][ T1270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.723093][ T1270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.782890][ T1270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.782926][ T1270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.896588][ T1270] veth1_macvtap: left promiscuous mode [ 365.896698][ T1270] veth0_macvtap: left promiscuous mode [ 365.896980][ T1270] veth1_vlan: left promiscuous mode [ 365.897170][ T1270] veth0_vlan: left promiscuous mode [ 367.045903][ T1270] team0 (unregistering): Port device team_slave_1 removed [ 367.082413][ T1270] team0 (unregistering): Port device team_slave_0 removed [ 367.534956][ T8558] netlink: 5204 bytes leftover after parsing attributes in process `syz.6.776'. [ 367.729899][ T8364] hsr_slave_0: entered promiscuous mode [ 367.731396][ T8364] hsr_slave_1: entered promiscuous mode [ 367.762525][ T8364] debugfs: 'hsr0' already exists in 'hsr' [ 367.762552][ T8364] Cannot create hsr debugfs directory [ 370.665347][ T8364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 370.992685][ T8364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 371.095724][ T8364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 371.196348][ T8364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 371.615725][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.724106][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.767219][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.767373][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.861360][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.861508][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.873569][ T8689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.019439][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.344055][ T8702] netlink: 'syz.6.822': attribute type 3 has an invalid length. [ 373.641355][ T8713] batadv_slave_0: entered promiscuous mode [ 373.686474][ T8713] batman_adv: batadv0: Adding interface: macvtap1 [ 373.686494][ T8713] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.686529][ T8713] batman_adv: batadv0: Interface activated: macvtap1 [ 373.806541][ T8717] netlink: 'syz.5.828': attribute type 32 has an invalid length. [ 373.806565][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 373.943974][ T8717] bond1: option coupled_control: invalid value (46) [ 373.975405][ T8717] bond1 (unregistering): Released all slaves [ 374.445712][ T8741] netlink: 'syz.2.837': attribute type 14 has an invalid length. [ 374.739040][ T8364] veth0_vlan: entered promiscuous mode [ 374.820431][ T8364] veth1_vlan: entered promiscuous mode [ 374.967221][ T8364] veth0_macvtap: entered promiscuous mode [ 374.979786][ T8364] veth1_macvtap: entered promiscuous mode [ 375.098232][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.135046][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.156206][ T54] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.156282][ T54] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.156336][ T54] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.156374][ T54] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.157212][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 375.339374][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 375.339405][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.339427][ T31] usb 3-1: Product: syz [ 375.339441][ T31] usb 3-1: Manufacturer: syz [ 375.339455][ T31] usb 3-1: SerialNumber: syz [ 375.724365][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.724388][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.801275][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.847'. [ 375.956918][ T31] rtl8150 3-1:1.0: couldn't reset the device [ 375.957307][ T31] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 376.032258][ T31] usb 3-1: USB disconnect, device number 8 [ 376.059191][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.059211][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.522712][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.7.698'. [ 377.573624][ T8822] netlink: 176 bytes leftover after parsing attributes in process `syz.5.864'. [ 377.613673][ T5937] kernel read not supported for file /sysvipc/sem (pid: 5937 comm: kworker/1:6) [ 378.642635][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.633223][ T8882] tun0: tun_chr_ioctl cmd 2147767520 [ 381.361153][ T8946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.262271][ T8998] program syz.7.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.388909][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 385.341039][ T37] audit: type=1800 audit(1772130660.236:49): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.971" name="file0" dev="tmpfs" ino=1349 res=0 errno=0 [ 385.883135][ T9069] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 385.883135][ T9069] The task syz.5.976 (9069) triggered the difference, watch for misbehavior. [ 385.971718][ T1229] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 386.133477][ T1229] usb 8-1: Using ep0 maxpacket: 16 [ 386.139695][ T1229] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 386.139724][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.139745][ T1229] usb 8-1: Product: syz [ 386.139760][ T1229] usb 8-1: Manufacturer: syz [ 386.139774][ T1229] usb 8-1: SerialNumber: syz [ 386.229723][ T1229] r8152-cfgselector 8-1: Unknown version 0x0000 [ 386.229751][ T1229] r8152-cfgselector 8-1: config 0 descriptor?? [ 386.261736][ T5869] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 386.421714][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 386.428572][ T5869] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 386.428631][ T5869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.428729][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.428758][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.428782][ T5869] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.428887][ T5869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.428912][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.516832][ T1229] r8152-cfgselector 8-1: Needed 2 retries to read version [ 386.595941][ T31] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 386.666947][ T5854] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 386.752600][ T5869] usb 3-1: GET_CAPABILITIES returned 0 [ 386.752649][ T5869] usbtmc 3-1:16.0: can't read capabilities [ 386.782158][ T31] usb 7-1: config 0 has no interfaces? [ 386.783642][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.783668][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 386.783686][ T31] usb 7-1: SerialNumber: syz [ 386.864238][ T31] usb 7-1: config 0 descriptor?? [ 386.965318][ T5854] usb 3-1: USB disconnect, device number 9 [ 387.118006][ T5869] usb 7-1: USB disconnect, device number 3 [ 387.215900][ T9095] overlayfs: failed to clone upperpath [ 387.522657][ T9105] vlan3: entered promiscuous mode [ 387.651829][ T5869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 387.738419][ T9108] bond0: entered promiscuous mode [ 387.738443][ T9108] bond_slave_0: entered promiscuous mode [ 387.738681][ T9108] bond_slave_1: entered promiscuous mode [ 387.741278][ T9108] batadv0: entered promiscuous mode [ 387.776740][ T9108] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 387.821803][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 387.823550][ T9108] bond0: left promiscuous mode [ 387.823571][ T9108] bond_slave_0: left promiscuous mode [ 387.823983][ T9108] bond_slave_1: left promiscuous mode [ 387.824365][ T5869] usb 6-1: config 168 has an invalid interface number: 66 but max is 0 [ 387.824391][ T5869] usb 6-1: config 168 has no interface number 0 [ 387.824438][ T5869] usb 6-1: config 168 interface 66 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 387.824466][ T5869] usb 6-1: config 168 interface 66 has no altsetting 0 [ 387.831429][ T5869] usb 6-1: New USB device found, idVendor=0c45, idProduct=60ec, bcdDevice=35.f9 [ 387.831456][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.831477][ T5869] usb 6-1: Product: syz [ 387.831492][ T5869] usb 6-1: Manufacturer: syz [ 387.831507][ T5869] usb 6-1: SerialNumber: syz [ 388.162889][ T9108] batadv0: left promiscuous mode [ 388.180016][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:60ec [ 388.193062][ T5869] gspca_sonixj: reg_w1 err -71 [ 388.193174][ T5869] sonixj 6-1:168.66: probe with driver sonixj failed with error -71 [ 388.219391][ T5869] usb 6-1: USB disconnect, device number 3 [ 388.545731][ T5790] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 389.031310][ T9137] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 389.883318][ T9164] vcan0: tx drop: invalid sa for name 0x0000000000001000 [ 390.186007][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1012'. [ 390.855029][ T9203] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1022'. [ 391.747865][ T9235] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1033'. [ 391.747895][ T9235] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1033'. [ 392.471691][ T9253] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.941819][ T1229] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 393.138757][ T1229] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 393.138817][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.138845][ T1229] usb 3-1: Product: syz [ 393.138860][ T1229] usb 3-1: Manufacturer: syz [ 393.138875][ T1229] usb 3-1: SerialNumber: syz [ 393.216556][ T1229] usb 3-1: config 0 descriptor?? [ 393.633182][ T1229] usb 3-1: Firmware version (0.0) predates our first public release. [ 393.633212][ T1229] usb 3-1: Please update to version 0.2 or newer [ 393.636692][ T1229] usb 3-1: Firmware: build VbŠ¤.¬ß [ 393.884322][ T1229] usb 3-1: USB disconnect, device number 10 [ 395.655442][ T9340] loop6: detected capacity change from 0 to 7 [ 395.660637][ T9340] Dev loop6: unable to read RDB block 7 [ 395.660701][ T9340] loop6: unable to read partition table [ 395.660901][ T9340] loop6: partition table beyond EOD, truncated [ 395.660917][ T9340] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.756841][ T9359] team0 (unregistering): Port device team_slave_0 removed [ 396.924823][ T9359] team0 (unregistering): Port device team_slave_1 removed [ 397.265938][ T9372] IPv6: addrconf: prefix option has invalid lifetime [ 397.714163][ T7259] syz_tun (unregistering): left allmulticast mode [ 398.730220][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.755575][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.760074][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.769634][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.779307][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.805054][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.406876][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.958402][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.066425][ T9433] batadv_slave_0: entered promiscuous mode [ 400.067408][ T9432] batadv_slave_0: left promiscuous mode [ 400.289586][ T9449] binder: 9448:9449 ioctl c018620c 200000000000 returned -22 [ 400.444185][ T12] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.883689][ T5790] Bluetooth: hci0: command tx timeout [ 401.181727][ T5937] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 401.257146][ T9406] chnl_net:caif_netlink_parms(): no params data found [ 401.331760][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 401.333683][ T5937] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 401.333713][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.388589][ T5937] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 401.417754][ T12] team0: left allmulticast mode [ 401.417775][ T12] team_slave_0: left allmulticast mode [ 401.417792][ T12] team_slave_1: left allmulticast mode [ 401.418550][ T12] team0: left promiscuous mode [ 401.418567][ T12] team_slave_0: left promiscuous mode [ 401.418778][ T12] team_slave_1: left promiscuous mode [ 401.419236][ T12] bridge0: port 3(team0) entered disabled state [ 401.517109][ T12] bridge_slave_1: left allmulticast mode [ 401.517140][ T12] bridge_slave_1: left promiscuous mode [ 401.517439][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.614190][ T12] bridge_slave_0: left allmulticast mode [ 401.614222][ T12] bridge_slave_0: left promiscuous mode [ 401.614544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.713884][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 401.713923][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 402.402393][ T5937] gspca_nw80x: reg_w err -71 [ 402.402499][ T5937] nw80x 8-1:3.0: probe with driver nw80x failed with error -71 [ 402.427800][ T5937] usb 8-1: USB disconnect, device number 3 [ 402.571684][ T5854] kernel write not supported for file /vcs (pid: 5854 comm: kworker/1:5) [ 402.953160][ T5790] Bluetooth: hci0: command tx timeout [ 403.544304][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.655719][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.706096][ T12] bond0 (unregistering): Released all slaves [ 403.828676][ T9482] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1128'. [ 403.828704][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1128'. [ 403.828723][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1128'. [ 403.830579][ T9496] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1134'. [ 403.830606][ T9496] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1134'. [ 404.335040][ T1229] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 404.479264][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.492314][ T1229] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.492380][ T1229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.492408][ T1229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 404.492573][ T1229] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.559228][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.559480][ T9406] bridge_slave_0: entered allmulticast mode [ 404.578320][ T9406] bridge_slave_0: entered promiscuous mode [ 404.592717][ T1229] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.592747][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.592762][ T1229] usb 8-1: Product: syz [ 404.592773][ T1229] usb 8-1: Manufacturer: syz [ 404.592783][ T1229] usb 8-1: SerialNumber: syz [ 404.643312][ T9518] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 404.643950][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.644075][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.644316][ T9406] bridge_slave_1: entered allmulticast mode [ 404.756185][ T9406] bridge_slave_1: entered promiscuous mode [ 404.966560][ T1229] cdc_ncm 8-1:1.0: bind() failure [ 404.990131][ T1229] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 404.990182][ T1229] cdc_ncm 8-1:1.1: bind() failure [ 405.031726][ T5790] Bluetooth: hci0: command tx timeout [ 405.066078][ T1229] usb 8-1: USB disconnect, device number 4 [ 406.025586][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.052789][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.851060][ T9406] team0: Port device team_slave_0 added [ 406.858969][ T9601] netem: incorrect ge model size [ 406.858985][ T9601] netem: change failed [ 406.881687][ T1229] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 406.946677][ T9406] team0: Port device team_slave_1 added [ 407.056267][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.056318][ T1229] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 407.056343][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.111691][ T5790] Bluetooth: hci0: command tx timeout [ 407.143214][ T1229] usb 6-1: config 0 descriptor?? [ 407.301776][ T12] hsr_slave_0: left promiscuous mode [ 407.341743][ T12] hsr_slave_1: left promiscuous mode [ 407.342901][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.342928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.405759][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.405800][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.507197][ T12] veth1_macvtap: left promiscuous mode [ 407.507426][ T12] veth1_vlan: left promiscuous mode [ 407.507568][ T12] veth0_vlan: left promiscuous mode [ 407.650192][ T1229] waltop 0003:172F:0501.0001: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.5-1/input0 [ 408.321972][ T5867] usb 6-1: USB disconnect, device number 4 [ 408.879143][ T12] team0 (unregistering): Port device team_slave_1 removed [ 408.980944][ T12] team0 (unregistering): Port device team_slave_0 removed [ 409.541411][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.541430][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.541459][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.596196][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.596215][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.596245][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.919620][ T9406] hsr_slave_0: entered promiscuous mode [ 409.936381][ T9666] loop2: detected capacity change from 0 to 7 [ 409.937031][ T9406] hsr_slave_1: entered promiscuous mode [ 409.962485][ T9666] Dev loop2: unable to read RDB block 7 [ 409.962529][ T9666] loop2: unable to read partition table [ 409.962733][ T9666] loop2: partition table beyond EOD, truncated [ 409.962770][ T9666] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.410773][ T9672] syz.5.1205 (9672) used greatest stack depth: 17568 bytes left [ 410.698397][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1210'. [ 410.813670][ T9688] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 411.428099][ T12] IPVS: stop unused estimator thread 0... [ 411.878401][ T9406] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 411.957379][ T9406] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 412.033279][ T9406] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 412.073621][ T9406] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 412.170972][ T9715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.170994][ T9715] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 412.843974][ T9406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.916269][ T9406] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.956982][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.957249][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.000282][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.000557][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.186647][ T9406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.498240][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.632351][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.991764][ T5867] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 415.141699][ T5867] usb 8-1: Using ep0 maxpacket: 32 [ 415.144259][ T5867] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 415.144288][ T5867] usb 8-1: config 0 has no interface number 0 [ 415.212995][ T5867] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 415.213029][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.213051][ T5867] usb 8-1: Product: syz [ 415.213066][ T5867] usb 8-1: Manufacturer: syz [ 415.213081][ T5867] usb 8-1: SerialNumber: syz [ 415.221019][ T5867] usb 8-1: config 0 descriptor?? [ 415.271426][ T5867] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 415.421330][ T9406] veth0_vlan: entered promiscuous mode [ 415.495905][ T5867] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 415.546179][ T9406] veth1_vlan: entered promiscuous mode [ 415.584802][ T5867] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 415.672018][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.807956][ T9406] veth0_macvtap: entered promiscuous mode [ 415.821407][ T9406] veth1_macvtap: entered promiscuous mode [ 415.862499][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 415.919914][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.961976][ T5854] usb 8-1: USB disconnect, device number 5 [ 416.023295][ T5854] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 416.028942][ T5854] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 416.029957][ T5854] quatech2 8-1:0.51: device disconnected [ 416.069010][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.161670][ T6066] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.225358][ T54] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.226412][ T54] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.228706][ T54] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.311971][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.720077][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.889669][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.889689][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.986327][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.986349][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.753596][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.891738][ T809] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 418.051747][ T809] usb 9-1: Using ep0 maxpacket: 8 [ 418.056891][ T809] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.056921][ T809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.056946][ T809] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.056970][ T809] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.057011][ T809] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.057033][ T809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.357039][ T809] usb 9-1: GET_CAPABILITIES returned 0 [ 418.357090][ T809] usbtmc 9-1:16.0: can't read capabilities [ 418.576787][ T809] usb 9-1: USB disconnect, device number 2 [ 418.792634][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.851742][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 418.868856][ T9886] netlink: 41 bytes leftover after parsing attributes in process `syz.4.1267'. [ 418.868937][ T9886] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1267'. [ 419.004474][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.004530][ T31] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 419.004548][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.049717][ T31] usb 6-1: config 0 descriptor?? [ 419.286236][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 419.286377][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 419.346908][ T9894] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 419.359159][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.371346][ T31] usb 6-1: USB disconnect, device number 5 [ 419.831948][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.866625][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 420.021702][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 420.024161][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.024210][ T31] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 420.024235][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.045924][ T31] usb 6-1: config 0 descriptor?? [ 420.175388][ T5867] kernel read not supported for file [fscontext] (pid: 5867 comm: kworker/0:4) [ 420.232655][ T31] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 420.289460][ T31] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 420.508035][ T36] usb 6-1: USB disconnect, device number 6 [ 420.537992][ T36] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 420.871967][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.238041][ T9939] bond1: option ad_user_port_key: invalid value (48421) [ 421.238072][ T9939] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 421.284692][ T9939] bond1 (unregistering): Released all slaves [ 422.742377][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.792637][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.807984][ T9965] sch_tbf: burst 323 is lower than device veth0_to_bridge mtu (1514) ! [ 422.998139][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1300'. [ 423.351741][ T1229] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 423.534545][ T1229] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.534574][ T1229] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.537506][ T1229] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.537536][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.537557][ T1229] usb 8-1: Product: syz [ 423.537573][ T1229] usb 8-1: Manufacturer: syz [ 423.537589][ T1229] usb 8-1: SerialNumber: syz [ 423.837865][ T1229] usb 8-1: 0:2 : does not exist [ 423.891931][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.894331][ T1229] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 424.134810][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.174689][ T9989] loop2: detected capacity change from 0 to 2119 [ 424.230903][ T1229] usb 8-1: USB disconnect, device number 6 [ 424.271674][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 424.431716][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 424.494365][ T5867] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 424.494394][ T5867] usb 6-1: config 0 has no interface number 0 [ 424.494446][ T5867] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.498475][ T5867] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 424.498505][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.498527][ T5867] usb 6-1: Product: syz [ 424.498541][ T5867] usb 6-1: Manufacturer: syz [ 424.498555][ T5867] usb 6-1: SerialNumber: syz [ 424.626818][ T5867] usb 6-1: config 0 descriptor?? [ 424.649602][ T5867] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 424.649642][ T5867] em28xx 6-1:0.132: Video interface 132 found: [ 424.749987][ T7181] udevd[7181]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.021935][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.050841][ T5867] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 425.457634][ T5867] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 425.457672][ T5867] em28xx 6-1:0.132: board has no eeprom [ 425.512914][ T5867] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 425.512958][ T5867] em28xx 6-1:0.132: analog set to bulk mode. [ 425.514888][ T5869] em28xx 6-1:0.132: Registering V4L2 extension [ 425.572478][ T5867] usb 6-1: USB disconnect, device number 7 [ 425.574507][ T5867] em28xx 6-1:0.132: Disconnecting em28xx [ 425.755512][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.855128][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.855363][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.855735][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.943203][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.943401][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.943631][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.943997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.946308][ T1229] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 425.961897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.085256][ T5869] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 426.085286][ T5869] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 426.085301][ T5869] em28xx 6-1:0.132: No AC97 audio processor [ 426.168996][ T1229] usb 9-1: Using ep0 maxpacket: 32 [ 426.184138][ T1229] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 426.184191][ T1229] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 426.184239][ T1229] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 426.184267][ T1229] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 426.184295][ T1229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 426.197002][ T1229] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 426.197101][ T1229] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 426.197156][ T1229] usb 9-1: Product: syz [ 426.197197][ T1229] usb 9-1: Manufacturer: syz [ 426.197232][ T1229] usb 9-1: SerialNumber: syz [ 426.297453][ T1229] usb 9-1: config 0 descriptor?? [ 426.391495][ T1229] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 426.409575][ T5869] usb 6-1: Decoder not found [ 426.409598][ T5869] em28xx 6-1:0.132: failed to create media graph [ 426.409658][ T5869] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 426.424315][ T1229] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 426.588464][ T5921] usb 9-1: USB disconnect, device number 3 [ 426.800400][ T5869] em28xx 6-1:0.132: Remote control support is not available for this card. [ 426.801510][ T5921] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 426.827005][ T5867] em28xx 6-1:0.132: Closing input extension [ 428.066812][ T5867] em28xx 6-1:0.132: Freeing device [ 428.229997][T10026] overlayfs: failed to clone upperpath [ 428.661797][ T5867] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 428.799812][ T36] IPVS: starting estimator thread 0... [ 428.842799][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.842867][ T5867] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 428.842894][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.866119][ T5867] usb 6-1: config 0 descriptor?? [ 428.881743][T10047] IPVS: using max 8 ests per chain, 19200 per kthread [ 428.946403][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 428.992280][ T8364] ODEBUG: Out of memory. ODEBUG disabled [ 429.345481][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 429.346824][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 429.548945][ T5867] pwc: recv_control_msg error -71 req 04 val 1000 [ 429.549486][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 429.549996][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 429.554568][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 429.555640][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 429.558450][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 429.563018][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 429.565240][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 429.581341][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 429.583837][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 429.585079][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 429.589308][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 429.593027][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 429.727942][ T5867] pwc: Registered as video103. [ 429.751146][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 429.893346][ T5867] usb 6-1: USB disconnect, device number 8 [ 429.922582][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1335'. [ 430.032637][ T5854] net_ratelimit: 9 callbacks suppressed [ 430.032656][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.063084][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.611882][ T36] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 430.764098][ T36] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.764134][ T36] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.764172][ T36] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.764249][ T36] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.819902][ T36] usb 9-1: config 0 descriptor?? [ 430.856279][ T36] hub 9-1:0.0: USB hub found [ 431.222003][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.209168][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.214940][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1342'. [ 432.420811][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 432.423559][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.622804][ T36] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 432.629910][ T36] usbhid 9-1:0.0: can't add hid device: -71 [ 432.630025][ T36] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 432.672875][ T36] usb 9-1: USB disconnect, device number 4 [ 432.701958][T10097] netlink: 212916 bytes leftover after parsing attributes in process `syz.7.1344'. [ 432.951749][ T5869] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 433.071905][T10110] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1348'. [ 433.071943][T10110] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1348'. [ 433.151875][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.151912][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 433.151941][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 433.151964][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.152007][ T5869] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.152031][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.214830][ T5869] usb 6-1: config 0 descriptor?? [ 433.302073][T10116] overlayfs: failed to clone upperpath [ 433.437387][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.634864][T10123] loop8: detected capacity change from 0 to 8 [ 433.660454][T10123] Dev loop8: unable to read RDB block 8 [ 433.660502][T10123] loop8: unable to read partition table [ 433.661294][T10123] loop8: partition table beyond EOD, truncated [ 433.697079][T10123] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 433.704821][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.707598][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.707704][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.707784][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.707858][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.707925][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.707999][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.708072][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.708133][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.708208][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.708280][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 433.979323][ T5869] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 434.075645][ T5869] usb 6-1: USB disconnect, device number 9 [ 434.315894][T10135] fido_id[10135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 434.437732][T10142] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 434.437764][T10142] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.437955][T10142] overlayfs: failed to get uuid (190/file1, err=-13); falling back to uuid=null. [ 434.482213][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.696999][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1362'. [ 435.272255][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.512372][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.633009][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1374'. [ 436.553784][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.575974][T10215] netlink: 'syz.7.1385': attribute type 22 has an invalid length. [ 436.885268][T10221] Invalid argument reading file caps for ./file0 [ 437.302115][T10232] input: syz1 as /devices/virtual/input/input7 [ 437.592311][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.653782][T10245] Invalid argument reading file caps for ./file0 [ 438.274006][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1402'. [ 438.312072][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.622944][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1406'. [ 438.632602][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.805926][ T37] audit: type=1326 audit(1772130713.716:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.7.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc780f4c799 code=0x7ffc0000 [ 438.839392][ T37] audit: type=1326 audit(1772130713.746:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.7.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc780f4c799 code=0x7ffc0000 [ 438.839446][ T37] audit: type=1326 audit(1772130713.746:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.7.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc780f4c799 code=0x7ffc0000 [ 438.839492][ T37] audit: type=1326 audit(1772130713.746:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.7.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc780f4c799 code=0x7ffc0000 [ 439.152079][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.155545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.698010][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.080097][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.713815][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.861652][ T5870] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 441.014042][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.014093][ T5870] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 441.014119][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.071930][ T9896] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 441.072035][ T5870] usb 6-1: config 0 descriptor?? [ 441.231638][ T9896] usb 7-1: Using ep0 maxpacket: 32 [ 441.235396][ T9896] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.235429][ T9896] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.235454][ T9896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.235489][ T9896] usb 7-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 441.235523][ T9896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.310878][ T9896] usb 7-1: config 0 descriptor?? [ 441.333292][ T5870] usbhid 6-1:0.0: can't add hid device: -71 [ 441.333409][ T5870] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 441.351856][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.412319][ T5870] usb 6-1: USB disconnect, device number 10 [ 441.565913][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 441.570048][ T9896] usb 7-1: string descriptor 0 read error: -71 [ 441.598699][ T9896] usbhid 7-1:0.0: can't add hid device: -71 [ 441.598815][ T9896] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 441.645884][ T9896] usb 7-1: USB disconnect, device number 4 [ 441.752452][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.762712][ T5854] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 441.901647][ T5870] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 441.926827][ T5854] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 441.926858][ T5854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.926880][ T5854] usb 8-1: Product: syz [ 441.926894][ T5854] usb 8-1: Manufacturer: syz [ 441.926910][ T5854] usb 8-1: SerialNumber: syz [ 441.975552][ T5854] usb 8-1: config 0 descriptor?? [ 442.014270][ T5854] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 442.060765][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.071124][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 442.077506][ T5854] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 442.081436][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.081483][ T5870] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 442.081507][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.095032][ T5854] usb 8-1: media controller created [ 442.140381][ T5870] usb 6-1: config 0 descriptor?? [ 442.146070][ T5870] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 442.161072][ T5870] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 442.248139][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.619389][ T5870] usb 6-1: USB disconnect, device number 11 [ 442.697695][ T5870] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 442.739253][ T5854] DVB: Unable to find symbol mt352_attach() [ 442.793338][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.005432][ T5854] DVB: Unable to find symbol nxt6000_attach() [ 443.005449][ T5854] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 443.094887][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 443.176131][ T5854] dvb-usb: schedule remote query interval to 1000 msecs. [ 443.176157][ T5854] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 443.176555][ T5854] dvb-usb: bulk message failed: -22 (7/0) [ 443.176576][ T5854] dvb-usb: bulk message failed: -22 (7/0) [ 443.272761][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.449866][T10365] syz_tun: entered allmulticast mode [ 443.496669][T10364] syz_tun: left allmulticast mode [ 443.832348][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.937444][T10333] dvb-usb: bulk message failed: -22 (7/0) [ 443.941988][ T5854] usb 8-1: USB disconnect, device number 7 [ 444.052351][ T9896] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 444.226866][ T5854] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 444.246105][ T9896] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.246140][ T9896] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 444.246169][ T9896] usb 9-1: config 0 interface 0 has no altsetting 0 [ 444.246203][ T9896] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 444.246226][ T9896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.338749][ T9896] usb 9-1: config 0 descriptor?? [ 444.339553][T10377] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 444.391892][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.553136][T10377] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1443'. [ 444.572786][ T9896] usbhid 9-1:0.0: can't add hid device: -71 [ 444.572909][ T9896] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 444.628269][ T9896] usb 9-1: USB disconnect, device number 5 [ 444.874678][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.912186][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.960400][T10461] overlayfs: workdir and upperdir must reside under the same mount [ 447.041310][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.275432][ T5790] Bluetooth: hci6: command 0x0406 tx timeout [ 447.373938][T10470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.378200][T10474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.387448][T10474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.388167][T10474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.390369][T10474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.390755][T10474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.398517][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.431844][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.557326][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1484'. [ 448.101819][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.150164][ T37] audit: type=1800 audit(1772130725.056:54): pid=10503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1498" name="bus" dev="tmpfs" ino=238 res=0 errno=0 [ 450.350633][ T37] audit: type=1326 audit(1772130725.256:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10511 comm="syz.8.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb35311c799 code=0x0 [ 450.581743][ T1229] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 450.741681][ T1229] usb 6-1: Using ep0 maxpacket: 16 [ 450.743851][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.743900][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.743928][ T1229] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 450.743950][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.750068][ T1229] usb 6-1: config 0 descriptor?? [ 450.984759][T10524] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 450.985667][T10524] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.188489][ T1229] kye 0003:0458:5016.0003: control desc unexpectedly large [ 451.191965][ T9896] net_ratelimit: 3 callbacks suppressed [ 451.191979][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.300679][ T1229] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0003/input/input9 [ 451.591900][ T1229] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0003/input/input10 [ 451.752472][ T1229] kye 0003:0458:5016.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 452.021471][ T5854] usb 6-1: USB disconnect, device number 12 [ 452.061141][T10540] fido_id[10540]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0003/report_descriptor': No such device [ 452.542323][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.548679][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.551507][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.599769][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.612110][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.718535][ T515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.136318][T10559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 453.322886][ T515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.356949][ T515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.711695][ T5790] Bluetooth: hci1: command tx timeout [ 454.985232][ T515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.131664][ T809] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 455.283663][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.283698][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.283726][ T809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.283756][ T809] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 455.283773][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.288081][ T809] usb 7-1: config 0 descriptor?? [ 455.412741][ T5921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 455.565211][ T5921] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 455.565265][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 455.565294][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 455.565334][ T5921] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 455.565358][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.638717][ T5921] usb 6-1: config 0 descriptor?? [ 455.896775][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.899512][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.969033][ T809] usbhid 7-1:0.0: can't add hid device: -71 [ 455.969150][ T809] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 456.064932][ T809] usb 7-1: USB disconnect, device number 5 [ 456.342027][ T5921] uclogic 0003:5543:0003.0004: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.5-1/input0 [ 456.389734][ T5921] usb 6-1: USB disconnect, device number 13 [ 456.413655][T10548] chnl_net:caif_netlink_parms(): no params data found [ 456.791820][ T5790] Bluetooth: hci1: command tx timeout [ 456.838660][T10611] fido_id[10611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 457.497605][ T515] bridge_slave_1: left allmulticast mode [ 457.497633][ T515] bridge_slave_1: left promiscuous mode [ 457.497864][ T515] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.624681][ T515] bridge_slave_0: left allmulticast mode [ 457.624710][ T515] bridge_slave_0: left promiscuous mode [ 457.624965][ T515] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.839452][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1549'. [ 457.851699][ T9896] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 458.003457][ T9896] usb 9-1: Using ep0 maxpacket: 8 [ 458.011277][ T9896] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 458.011311][ T9896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.011331][ T9896] usb 9-1: Product: syz [ 458.011346][ T9896] usb 9-1: Manufacturer: syz [ 458.011362][ T9896] usb 9-1: SerialNumber: syz [ 458.067137][ T9896] usb 9-1: config 0 descriptor?? [ 458.137970][ T9896] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 458.871856][ T5790] Bluetooth: hci1: command tx timeout [ 459.271727][ C0] ------------[ cut here ]------------ [ 459.271742][ C0] !fn [ 459.271757][ C0] WARNING: kernel/time/timer.c:1786 at __run_timer_base+0x7d2/0x9f0, CPU#0: ktimers/0/16 [ 459.271810][ C0] Modules linked in: [ 459.271849][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.271882][ C0] Tainted: [L]=SOFTLOCKUP [ 459.271890][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.271921][ C0] RIP: 0010:__run_timer_base+0x7d2/0x9f0 [ 459.271956][ C0] Code: 27 4d 85 e4 74 7d e8 4d ee 13 00 e9 48 fe ff ff e8 43 ee 13 00 48 8b 5c 24 30 43 80 7c 35 00 00 75 d4 eb da e8 2f ee 13 00 90 <0f> 0b 90 48 8b 44 24 48 42 80 3c 30 00 48 8b 5c 24 30 74 a9 48 89 [ 459.271976][ C0] RSP: 0018:ffffc90000157b40 EFLAGS: 00010046 [ 459.271996][ C0] RAX: ffffffff81b064e1 RBX: 0000000000000000 RCX: ffff88801caa8000 [ 459.272011][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 459.272022][ C0] RBP: ffffc90000157cb8 R08: 0000000000000000 R09: 0000000000000100 [ 459.272033][ C0] R10: dffffc0000000000 R11: fffffbfff1ed4517 R12: ffff88803c019f38 [ 459.272046][ C0] R13: 1ffff9200002af81 R14: dffffc0000000000 R15: ffffc90000157c08 [ 459.272059][ C0] FS: 0000000000000000(0000) GS:ffff888126343000(0000) knlGS:0000000000000000 [ 459.272074][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.272086][ C0] CR2: 00007f718355de06 CR3: 0000000059208000 CR4: 00000000003526f0 [ 459.272102][ C0] Call Trace: [ 459.272113][ C0] [ 459.272136][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 459.272163][ C0] ? rt_spin_lock+0x1e0/0x400 [ 459.272196][ C0] run_timer_softirq+0xb7/0x170 [ 459.272223][ C0] handle_softirqs+0x1de/0x6f0 [ 459.272257][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 459.272284][ C0] run_ktimerd+0x69/0x100 [ 459.272313][ C0] smpboot_thread_fn+0x541/0xa50 [ 459.272343][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 459.272380][ C0] kthread+0x388/0x470 [ 459.272399][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 459.272424][ C0] ? __pfx_kthread+0x10/0x10 [ 459.272445][ C0] ret_from_fork+0x51e/0xb90 [ 459.272477][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 459.272501][ C0] ? __switch_to+0xc7d/0x1450 [ 459.272530][ C0] ? __pfx_kthread+0x10/0x10 [ 459.272551][ C0] ret_from_fork_asm+0x1a/0x30 [ 459.272585][ C0] [ 459.272604][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 459.272619][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.272643][ C0] Tainted: [L]=SOFTLOCKUP [ 459.272650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.272660][ C0] Call Trace: [ 459.272667][ C0] [ 459.272673][ C0] vpanic+0x56c/0xa60 [ 459.272701][ C0] ? __pfx__printk+0x10/0x10 [ 459.272720][ C0] ? __pfx_vpanic+0x10/0x10 [ 459.272744][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 459.272768][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 459.272799][ C0] panic+0xc5/0xd0 [ 459.272824][ C0] ? __pfx_panic+0x10/0x10 [ 459.272858][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 459.272879][ C0] __warn+0x315/0x4f0 [ 459.272913][ C0] ? __run_timer_base+0x7d2/0x9f0 [ 459.272939][ C0] ? __run_timer_base+0x7d2/0x9f0 [ 459.272964][ C0] __report_bug+0x29a/0x540 [ 459.272992][ C0] ? __run_timer_base+0x7d2/0x9f0 [ 459.273018][ C0] ? __pfx___report_bug+0x10/0x10 [ 459.273041][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 459.273069][ C0] ? __run_timer_base+0x7d2/0x9f0 [ 459.273093][ C0] report_bug+0x16a/0x220 [ 459.273116][ C0] ? __run_timer_base+0x7d2/0x9f0 [ 459.273139][ C0] ? __run_timer_base+0x7d4/0x9f0 [ 459.273164][ C0] handle_bug+0x98/0x200 [ 459.273192][ C0] exc_invalid_op+0x1a/0x50 [ 459.273217][ C0] asm_exc_invalid_op+0x1a/0x20 [ 459.273235][ C0] RIP: 0010:__run_timer_base+0x7d2/0x9f0 [ 459.273260][ C0] Code: 27 4d 85 e4 74 7d e8 4d ee 13 00 e9 48 fe ff ff e8 43 ee 13 00 48 8b 5c 24 30 43 80 7c 35 00 00 75 d4 eb da e8 2f ee 13 00 90 <0f> 0b 90 48 8b 44 24 48 42 80 3c 30 00 48 8b 5c 24 30 74 a9 48 89 [ 459.273276][ C0] RSP: 0018:ffffc90000157b40 EFLAGS: 00010046 [ 459.273291][ C0] RAX: ffffffff81b064e1 RBX: 0000000000000000 RCX: ffff88801caa8000 [ 459.273304][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 459.273315][ C0] RBP: ffffc90000157cb8 R08: 0000000000000000 R09: 0000000000000100 [ 459.273327][ C0] R10: dffffc0000000000 R11: fffffbfff1ed4517 R12: ffff88803c019f38 [ 459.273340][ C0] R13: 1ffff9200002af81 R14: dffffc0000000000 R15: ffffc90000157c08 [ 459.273361][ C0] ? __run_timer_base+0x7d1/0x9f0 [ 459.273406][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 459.273431][ C0] ? rt_spin_lock+0x1e0/0x400 [ 459.273464][ C0] run_timer_softirq+0xb7/0x170 [ 459.273492][ C0] handle_softirqs+0x1de/0x6f0 [ 459.273526][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 459.273553][ C0] run_ktimerd+0x69/0x100 [ 459.273580][ C0] smpboot_thread_fn+0x541/0xa50 [ 459.273608][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 459.273641][ C0] kthread+0x388/0x470 [ 459.273660][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 459.273686][ C0] ? __pfx_kthread+0x10/0x10 [ 459.273705][ C0] ret_from_fork+0x51e/0xb90 [ 459.273733][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 459.273756][ C0] ? __switch_to+0xc7d/0x1450 [ 459.273781][ C0] ? __pfx_kthread+0x10/0x10 [ 459.273801][ C0] ret_from_fork_asm+0x1a/0x30 [ 459.273832][ C0] [ 459.275090][ C0] Kernel Offset: disabled