last executing test programs: 1m37.365095823s ago: executing program 2 (id=80): syz_usb_connect(0x5, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x86, 0xa, 0x2, 0x40, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xfc, 0x48, 0x0, 0x3d, 0xbf, 0x8f}}]}}]}}, 0x0) 1m34.610374322s ago: executing program 2 (id=90): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x1, 0x2}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) 1m34.092156336s ago: executing program 2 (id=91): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 1m30.767549672s ago: executing program 2 (id=102): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xa5ea, 0x4a0800) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/131) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000003c0)=0xc) ptrace$getregs(0xc, r2, 0x7ff, &(0x7f0000000780)=""/207) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) gettid() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="320200007d00000005f100000000000005"], 0x232) r6 = syz_io_uring_setup(0x52f8, &(0x7f0000000300)={0x0, 0x86f7, 0x10100, 0x1, 0x399}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120110220bfc6f082a110100b4bd0102030109021b0001feaa000409044f810159be0d040905fc0000020907f791f5f6f223f17628c9fb214760183c43423aa401c3dacc7de013b0ba0767c2bd1cef6820b8acc9d595bd7c9284e8229bb76ec55db6ca6e69b0"], &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xc0100, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r10, 0xc0106401, &(0x7f00000001c0)={0x68, &(0x7f0000000140)=""/104}) 1m28.373389472s ago: executing program 2 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m28.122216847s ago: executing program 3 (id=115): socket(0x23, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, 0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1m27.722473093s ago: executing program 3 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xe4}}, 0x0) mlockall(0x1) 1m27.704037976s ago: executing program 2 (id=117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m26.134584183s ago: executing program 3 (id=118): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 1m25.501891027s ago: executing program 3 (id=119): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="030000000400000004afe33d0090e52f77ab69cb9c31bfbebd75899069a73e8cc08b6be4cca3c7a012807e8f3e11c5300f7df8c3052fa2859985a92c2feb917b91acabb6137d096f53bb7d94d46bb212efc04252"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.162612254s ago: executing program 3 (id=120): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) 1m24.909355053s ago: executing program 3 (id=121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x1, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 1m12.298070115s ago: executing program 32 (id=117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.794563081s ago: executing program 33 (id=121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x1, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 14.946365224s ago: executing program 4 (id=276): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2, 0x5}, 0x1c) 14.019096925s ago: executing program 4 (id=278): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12.946599556s ago: executing program 4 (id=281): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 11.634470271s ago: executing program 4 (id=284): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/266, 0x10a}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000004b00)=""/4114, 0x1012}, {&(0x7f0000000900)=""/171, 0xab}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f0000000640)=""/283, 0x11b}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000000840)=""/150, 0x96}], 0x9}, 0x12000) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 5.802411034s ago: executing program 0 (id=295): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0xfffd, @empty}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df", 0x29}], 0x2, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 4.639732175s ago: executing program 0 (id=298): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001580)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0xc000}, 0x4b1c1a0c5af29ba2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 4.633340065s ago: executing program 1 (id=299): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de", 0x23}], 0x2}, 0x0) 4.546816577s ago: executing program 1 (id=300): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8919, &(0x7f0000001b80)={r0}) 4.24809164s ago: executing program 0 (id=301): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e8743ccd629b74eacd5994939f10c0333142623daea9a202c7df29ea40afb30f0f5d078cfb5a1e9211424762689c86b94760a523e2b081eb0200a6b89460fcc8ebd8d77e4df19e193a874f5851615f14996783ee4e5181ce70b901095076549552dbbde5efa3a52bdbed79ac97866c239ef6f78305d8f48428ee8eeac496b73cddb833429a90ac472fedbeb92380cc9f618298e4c3114330b1641d7657fddd1e8cda2767d586a2f7ba15b8d91185db8d2ff141ef12ef24e463ec4b66960c35010ff44ee833145232769baf34fb057f107d7d0d1ef20706882f3d0e994e9bc2ceb306c16f0692ff1ed5907d9141ba096f39c923bdd830c6d1f2bac87d432e69123ecc15cb904f21"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 3.246613783s ago: executing program 0 (id=302): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 3.14272719s ago: executing program 0 (id=303): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0xfffffffffffffffd, 0xfafa, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) 2.406338997s ago: executing program 1 (id=304): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.378461506s ago: executing program 4 (id=305): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) 2.090013843s ago: executing program 1 (id=306): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0xfffd, @empty}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df", 0x29}], 0x2, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 794.9317ms ago: executing program 1 (id=307): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 674.392811ms ago: executing program 4 (id=308): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xa5ea, 0x4a0800) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/131) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000003c0)=0xc) ptrace$getregs(0xc, r2, 0x7ff, &(0x7f0000000780)=""/207) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) gettid() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="320200007d00000005f100000000000005"], 0x232) r6 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120110220bfc6f082a110100b4bd0102030109021b0001feaa000409044f810159be0d040905fc0000020907f791f5f6f223f17628c9fb214760183c43423aa401c3dacc7de013b0ba0767c2bd1cef6820b8acc9d595bd7c9284e8229bb76ec55db6ca6e69b0"], &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) 542.930085ms ago: executing program 1 (id=309): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 0s ago: executing program 0 (id=310): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 70.634118][ T5783] cgroup: Unknown subsys name 'net' [ 70.875835][ T5783] cgroup: Unknown subsys name 'cpuset' [ 70.931219][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.389563][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389648][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.531759][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.751610][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.757335][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.757353][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.759511][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.762339][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.764134][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.764816][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.766158][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.767057][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.768272][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.771794][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.773434][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.774965][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.777620][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.778566][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.779218][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.779884][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.781079][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.782446][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.785006][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.785733][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.787780][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.797221][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.827172][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.846993][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.610173][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 75.705794][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 75.721243][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 75.761629][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 75.766691][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 75.978750][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.979728][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.980059][ T5799] bridge_slave_0: entered allmulticast mode [ 76.001737][ T5799] bridge_slave_0: entered promiscuous mode [ 76.042371][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.042490][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.042646][ T5799] bridge_slave_1: entered allmulticast mode [ 76.044054][ T5799] bridge_slave_1: entered promiscuous mode [ 76.109469][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.109565][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.109678][ T5796] bridge_slave_0: entered allmulticast mode [ 76.112465][ T5796] bridge_slave_0: entered promiscuous mode [ 76.117597][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.117705][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.117855][ T5797] bridge_slave_0: entered allmulticast mode [ 76.120265][ T5797] bridge_slave_0: entered promiscuous mode [ 76.193300][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.193432][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.193943][ T5796] bridge_slave_1: entered allmulticast mode [ 76.195375][ T5796] bridge_slave_1: entered promiscuous mode [ 76.196489][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.196574][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.196667][ T5797] bridge_slave_1: entered allmulticast mode [ 76.198503][ T5797] bridge_slave_1: entered promiscuous mode [ 76.200097][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.200185][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.200279][ T5801] bridge_slave_0: entered allmulticast mode [ 76.206607][ T5801] bridge_slave_0: entered promiscuous mode [ 76.209613][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.209744][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.210195][ T5798] bridge_slave_0: entered allmulticast mode [ 76.213485][ T5798] bridge_slave_0: entered promiscuous mode [ 76.222263][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.313221][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.313327][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.313465][ T5801] bridge_slave_1: entered allmulticast mode [ 76.315386][ T5801] bridge_slave_1: entered promiscuous mode [ 76.316676][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.316776][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.317840][ T5798] bridge_slave_1: entered allmulticast mode [ 76.319225][ T5798] bridge_slave_1: entered promiscuous mode [ 76.324559][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.408979][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.412980][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.455985][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.457903][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.460386][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.490274][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.493248][ T5799] team0: Port device team_slave_0 added [ 76.524849][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.526593][ T5799] team0: Port device team_slave_1 added [ 76.804216][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.822465][ T5116] Bluetooth: hci1: command tx timeout [ 76.822470][ T5809] Bluetooth: hci0: command tx timeout [ 76.887637][ T5796] team0: Port device team_slave_0 added [ 76.889302][ T5797] team0: Port device team_slave_0 added [ 76.900570][ T5809] Bluetooth: hci4: command tx timeout [ 76.900751][ T5809] Bluetooth: hci3: command tx timeout [ 76.900826][ T5116] Bluetooth: hci2: command tx timeout [ 76.936378][ T5796] team0: Port device team_slave_1 added [ 76.938526][ T5797] team0: Port device team_slave_1 added [ 76.940071][ T5801] team0: Port device team_slave_0 added [ 76.957821][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.957832][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.957845][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.962156][ T5798] team0: Port device team_slave_0 added [ 77.003301][ T5801] team0: Port device team_slave_1 added [ 77.004390][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.004402][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.004425][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.007781][ T5798] team0: Port device team_slave_1 added [ 77.083827][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.083841][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.083854][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.085049][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.085062][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.085085][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.133905][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.133921][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.133944][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.135315][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.135326][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.135349][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.136752][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.136763][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.136786][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.139995][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.140008][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.140030][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.172350][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.172367][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.172390][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.193680][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.193696][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.193719][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.278338][ T5799] hsr_slave_0: entered promiscuous mode [ 77.279767][ T5799] hsr_slave_1: entered promiscuous mode [ 77.373960][ T5796] hsr_slave_0: entered promiscuous mode [ 77.375146][ T5796] hsr_slave_1: entered promiscuous mode [ 77.376101][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 77.376209][ T5796] Cannot create hsr debugfs directory [ 77.425204][ T5797] hsr_slave_0: entered promiscuous mode [ 77.426490][ T5797] hsr_slave_1: entered promiscuous mode [ 77.427400][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 77.427422][ T5797] Cannot create hsr debugfs directory [ 77.478448][ T5801] hsr_slave_0: entered promiscuous mode [ 77.479629][ T5801] hsr_slave_1: entered promiscuous mode [ 77.481027][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 77.481051][ T5801] Cannot create hsr debugfs directory [ 77.506561][ T5798] hsr_slave_0: entered promiscuous mode [ 77.507734][ T5798] hsr_slave_1: entered promiscuous mode [ 77.508566][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 77.508588][ T5798] Cannot create hsr debugfs directory [ 78.522367][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.558826][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.576601][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.626274][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.716885][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.763152][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.796201][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.825374][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.903162][ T5116] Bluetooth: hci1: command tx timeout [ 78.903169][ T5809] Bluetooth: hci0: command tx timeout [ 78.932862][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.972525][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.980685][ T5809] Bluetooth: hci3: command tx timeout [ 78.981421][ T5809] Bluetooth: hci2: command tx timeout [ 78.981431][ T5116] Bluetooth: hci4: command tx timeout [ 79.037878][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.074348][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.193312][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.241380][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.304531][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.338811][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.435448][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.477440][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.519949][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.529062][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.568901][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.658497][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.693951][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.696165][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.697031][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.743704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.743835][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.797804][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.827064][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.834019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.834252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.876232][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.876628][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.926172][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.958124][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.977469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.977588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.018252][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.018450][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.078891][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.095555][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.133562][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.133725][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.169412][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.178087][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.253743][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.299809][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.300049][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.338782][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.338914][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.427272][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.628965][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.698808][ T5799] veth0_vlan: entered promiscuous mode [ 80.777636][ T5799] veth1_vlan: entered promiscuous mode [ 80.833926][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.946987][ T5796] veth0_vlan: entered promiscuous mode [ 80.959104][ T5799] veth0_macvtap: entered promiscuous mode [ 80.980756][ T5116] Bluetooth: hci0: command tx timeout [ 80.980786][ T5116] Bluetooth: hci1: command tx timeout [ 80.994220][ T5799] veth1_macvtap: entered promiscuous mode [ 81.008531][ T5796] veth1_vlan: entered promiscuous mode [ 81.035098][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.062649][ T5809] Bluetooth: hci2: command tx timeout [ 81.062680][ T5809] Bluetooth: hci3: command tx timeout [ 81.062700][ T5809] Bluetooth: hci4: command tx timeout [ 81.080171][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.110325][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.113684][ T5797] veth0_vlan: entered promiscuous mode [ 81.154106][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.193319][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.197085][ T5797] veth1_vlan: entered promiscuous mode [ 81.210899][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.218810][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.229126][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.237012][ T5796] veth0_macvtap: entered promiscuous mode [ 81.322655][ T5796] veth1_macvtap: entered promiscuous mode [ 81.483903][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.485550][ T5798] veth0_vlan: entered promiscuous mode [ 81.520380][ T5797] veth0_macvtap: entered promiscuous mode [ 81.534933][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.564624][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.565666][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.569548][ T5797] veth1_macvtap: entered promiscuous mode [ 81.597527][ T5798] veth1_vlan: entered promiscuous mode [ 81.604265][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.617218][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.633117][ T36] cfg80211: failed to load regulatory.db [ 81.635712][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.684223][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.780028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.780048][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.819407][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.935802][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.938132][ T5801] veth0_vlan: entered promiscuous mode [ 82.012450][ T1017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.030370][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047212][ T1017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068065][ T1017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068751][ T5801] veth1_vlan: entered promiscuous mode [ 82.074700][ T5798] veth0_macvtap: entered promiscuous mode [ 82.182874][ T5798] veth1_macvtap: entered promiscuous mode [ 82.200798][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.200817][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.351841][ T5917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.550475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.670490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 83.061374][ T5116] Bluetooth: hci1: command tx timeout [ 83.061406][ T5116] Bluetooth: hci0: command tx timeout [ 83.150732][ T5809] Bluetooth: hci4: command tx timeout [ 83.150762][ T5809] Bluetooth: hci3: command tx timeout [ 83.150779][ T5809] Bluetooth: hci2: command tx timeout [ 83.258980][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.281574][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.281593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.368595][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.375660][ T5801] veth0_macvtap: entered promiscuous mode [ 83.394902][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.394922][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.396271][ T4233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.398696][ T4233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.400383][ T4233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.434132][ T4233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.441726][ T5801] veth1_macvtap: entered promiscuous mode [ 83.583586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.583606][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.674985][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.730221][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.490579][ T4233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.495987][ T4233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.549940][ T4233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.560509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 84.604820][ T4233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.663686][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.663705][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.956132][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12'. [ 85.014692][ T5946] syz_tun: entered allmulticast mode [ 85.115431][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.115450][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.294335][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.294356][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.308541][ T992] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 85.515181][ T5939] syz_tun: left allmulticast mode [ 86.282925][ T992] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 86.282952][ T992] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 86.282971][ T992] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.282988][ T992] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 86.283008][ T992] usb 2-1: config 1 has no interface number 0 [ 86.283054][ T992] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 86.283076][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.572848][ T992] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 86.764681][ T992] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 86.765552][ T992] snd_usb_pod 2-1:1.1: invalid control EP [ 86.765909][ T992] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 86.767380][ T992] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 86.767878][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.769319][ T992] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 86.798303][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.798322][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.545080][ T992] usb 2-1: USB disconnect, device number 2 [ 87.630474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.631485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.632520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.633586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.634650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.635684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.636751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.810767][ T5969] Zero length message leads to an empty skb [ 91.198788][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'. [ 95.033640][ T807] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.195673][ T807] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 95.195700][ T807] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 95.195721][ T807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.195739][ T807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 95.195759][ T807] usb 3-1: config 1 has no interface number 0 [ 95.195803][ T807] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 95.195825][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.332745][ T807] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 95.606129][ T807] snd_usb_pod 3-1:1.1: set_interface failed [ 95.606570][ T807] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 95.606860][ T807] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 95.664300][ T807] usb 3-1: USB disconnect, device number 2 [ 99.419307][ T6022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.35'. [ 101.520171][ T6038] ======================================================= [ 101.520171][ T6038] WARNING: The mand mount option has been deprecated and [ 101.520171][ T6038] and is ignored by this kernel. Remove the mand [ 101.520171][ T6038] option from the mount to silence this warning. [ 101.520171][ T6038] ======================================================= [ 101.520228][ T6038] cgroup: Unknown subsys name 'context' [ 103.109189][ T5805] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.354656][ T5805] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 103.354686][ T5805] usb 2-1: config 0 has no interface number 0 [ 103.354732][ T5805] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 103.354759][ T5805] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.358560][ T5805] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 103.358589][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.358609][ T5805] usb 2-1: Product: syz [ 103.358622][ T5805] usb 2-1: Manufacturer: syz [ 103.358635][ T5805] usb 2-1: SerialNumber: syz [ 103.455807][ T5805] usb 2-1: config 0 descriptor?? [ 103.467831][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.493943][ T5805] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 103.597026][ T5805] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 103.709857][ T5805] usb 2-1: USB disconnect, device number 3 [ 103.893893][ T5883] Process accounting resumed [ 104.303743][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 104.440565][ T6068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'. [ 106.207800][ T5947] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.030896][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 107.543770][ T5947] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.543799][ T5947] usb 1-1: config 0 has no interface number 0 [ 107.582818][ T5947] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.582848][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.582866][ T5947] usb 1-1: Product: syz [ 107.582879][ T5947] usb 1-1: Manufacturer: syz [ 107.582892][ T5947] usb 1-1: SerialNumber: syz [ 107.652609][ T5947] usb 1-1: config 0 descriptor?? [ 107.675269][ T5947] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.609392][ T6105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.60'. [ 108.675851][ T5947] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.773827][ T5947] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.888745][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.927237][ T10] usb 1-1: USB disconnect, device number 2 [ 109.013202][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 109.047050][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 109.048339][ T10] quatech2 1-1:0.51: device disconnected [ 109.832054][ T5883] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 109.967269][ T6126] trusted_key: encrypted_key: insufficient parameters specified [ 111.408316][ T5883] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 111.408348][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 111.408368][ T5883] usb 4-1: Product: syz [ 111.408382][ T5883] usb 4-1: Manufacturer: syz [ 111.408395][ T5883] usb 4-1: SerialNumber: syz [ 111.494859][ T5883] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 111.541899][ T6124] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 111.541915][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.69'. [ 111.542939][ T6124] batman_adv: batadv0: Adding interface: vlan1 [ 111.542948][ T6124] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.542965][ T6124] batman_adv: batadv0: Interface activated: vlan1 [ 111.862543][ T6136] syz_tun: entered allmulticast mode [ 111.911598][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.61'. [ 112.082328][ T5883] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 112.082371][ T5883] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 112.296529][ T5882] usb 4-1: USB disconnect, device number 2 [ 112.429581][ T6134] syz_tun: left allmulticast mode [ 112.680595][ T5947] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.836411][ T5947] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 112.836438][ T5947] usb 3-1: config 0 has no interface number 0 [ 112.836469][ T5947] usb 3-1: config 0 interface 252 has no altsetting 0 [ 112.862247][ T5947] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 112.862277][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.862297][ T5947] usb 3-1: Product: syz [ 112.862311][ T5947] usb 3-1: Manufacturer: syz [ 112.862325][ T5947] usb 3-1: SerialNumber: syz [ 112.867635][ T5947] usb 3-1: config 0 descriptor?? [ 112.913574][ T5947] go7007 3-1:0.252: The Lifeview TV Walker Ultra is not supported. Sorry! [ 113.063088][ T6171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.86'. [ 113.070798][ T5882] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 113.101359][ T5881] usb 3-1: USB disconnect, device number 3 [ 113.297186][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.297203][ T5882] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.297223][ T5882] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 113.297235][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.267446][ T5882] usb 2-1: config 0 descriptor?? [ 115.754478][ T10] usb 2-1: USB disconnect, device number 4 [ 116.023213][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.098862][ T6196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.170586][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 116.175331][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 116.175363][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.175387][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.175416][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.175455][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.175476][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.145562][ T5904] usb 3-1: usb_control_msg returned -32 [ 117.145613][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 117.416759][ T6211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.97'. [ 117.472882][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.620648][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 117.622820][ T5904] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.622846][ T5904] usb 5-1: config 0 has no interface number 0 [ 117.622885][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.622897][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.622910][ T5904] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.622923][ T5904] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.622948][ T5904] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.622966][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.713284][ T5904] usb 5-1: config 0 descriptor?? [ 117.733561][ T5904] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 117.760510][ T5882] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 117.914302][ T5882] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.914346][ T5882] usb 1-1: config 0 has no interface number 0 [ 117.914402][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.914424][ T5882] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 117.914440][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.914453][ T5882] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 117.914465][ T5882] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 117.914478][ T5882] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.914501][ T5882] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.914512][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.926443][ T5882] usb 1-1: config 0 descriptor?? [ 117.970255][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 117.971904][ T6214] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 117.972064][ T6214] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 117.972272][ T6205] usbtmc 3-1:16.0: Unable to send data, error -71 [ 117.990843][ T5882] ldusb 1-1:0.55: LD USB Device #2 now attached to major 180 minor 2 [ 118.078981][ T5882] usb 5-1: USB disconnect, device number 2 [ 118.109224][ T5882] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 118.217728][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 118.223497][ T6214] usbtmc 3-1:16.0: Unable to send data, error -71 [ 118.224969][ T10] usb 1-1: USB disconnect, device number 3 [ 118.257066][ T10] ldusb 1-1:0.55: LD USB Device #2 now disconnected [ 118.905204][ T5904] usb 3-1: USB disconnect, device number 4 [ 118.922944][ T6222] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.390287][ T5809] Bluetooth: hci2: command 0x0405 tx timeout [ 119.900923][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.050575][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 120.071948][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.073460][ T5904] usb 3-1: config 254 has an invalid interface number: 79 but max is 0 [ 120.073485][ T5904] usb 3-1: config 254 has no interface number 0 [ 120.073526][ T5904] usb 3-1: config 254 interface 79 altsetting 129 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 120.073552][ T5904] usb 3-1: config 254 interface 79 altsetting 129 endpoint 0x8C has invalid maxpacket 512, setting to 64 [ 120.073578][ T5904] usb 3-1: config 254 interface 79 has no altsetting 0 [ 120.075902][ T5904] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=bd.b4 [ 120.075918][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.075928][ T5904] usb 3-1: Product: syz [ 120.075935][ T5904] usb 3-1: Manufacturer: syz [ 120.075942][ T5904] usb 3-1: SerialNumber: syz [ 120.652514][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.108'. [ 120.779864][ T6242] veth1_macvtap: left promiscuous mode [ 120.779884][ T6242] macsec0: entered promiscuous mode [ 120.886257][ T6246] veth1_macvtap: entered promiscuous mode [ 120.889699][ T6246] macsec0: left promiscuous mode [ 121.000219][ T5904] redrat3 3-1:254.79: Couldn't find all endpoints [ 121.103782][ T5904] usb 3-1: USB disconnect, device number 5 [ 121.599135][ T5805] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.750530][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 121.754472][ T5805] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.754501][ T5805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.754515][ T5805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.754526][ T5805] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.754549][ T5805] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.754561][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.487568][ T5805] usb 5-1: usb_control_msg returned -32 [ 123.487615][ T5805] usbtmc 5-1:16.0: can't read capabilities [ 124.891270][ T5805] usb 5-1: USB disconnect, device number 3 [ 125.063801][ T6277] input: syz1 as /devices/virtual/input/input6 [ 127.931505][ T6287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.124'. [ 130.350530][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.953763][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.954949][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.034324][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 134.543613][ T10] usb 1-1: device descriptor read/all, error -71 [ 137.549611][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.562489][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.564679][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.565686][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.566617][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.620853][ T5116] Bluetooth: hci5: command tx timeout [ 140.000049][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.012956][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.013922][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.014899][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.015532][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.360893][ T6312] tipc: Started in network mode [ 140.360910][ T6312] tipc: Node identity , cluster identity 4711 [ 140.360924][ T6312] tipc: Failed to obtain node identity [ 140.360947][ T6312] tipc: Enabling of bearer rejected, failed to enable media [ 141.700651][ T5809] Bluetooth: hci5: command tx timeout [ 141.901174][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.050651][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 142.052430][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 142.052462][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.052486][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.052499][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.052521][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.052533][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.100782][ T5809] Bluetooth: hci3: command tx timeout [ 142.161321][ T5947] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.412636][ T5947] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 142.412663][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.412730][ T5947] usb 2-1: Product: syz [ 142.412744][ T5947] usb 2-1: Manufacturer: syz [ 142.412757][ T5947] usb 2-1: SerialNumber: syz [ 142.461716][ T5904] usb 1-1: usb_control_msg returned -32 [ 142.461764][ T5904] usbtmc 1-1:16.0: can't read capabilities [ 142.566692][ T1426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.610616][ T807] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 142.798622][ T807] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=82.ac [ 142.798642][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.798688][ T807] usb 5-1: Product: syz [ 142.798695][ T807] usb 5-1: Manufacturer: syz [ 142.798702][ T807] usb 5-1: SerialNumber: syz [ 142.826090][ T807] usb 5-1: config 0 descriptor?? [ 142.873710][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 142.873816][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 142.914347][ T1426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.058929][ T807] peak_usb 5-1:0.0: PEAK-System PCAN-USB X6 v46 fw v5.70.0 (2 channels) [ 143.243423][ T1426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.261781][ T807] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 143.262017][ T807] peak_usb 5-1:0.0: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 143.486066][ T807] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 143.514949][ T807] usb 5-1: USB disconnect, device number 4 [ 143.657232][ T1426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.780520][ T5809] Bluetooth: hci5: command tx timeout [ 144.052539][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 144.180540][ T5809] Bluetooth: hci3: command tx timeout [ 144.373046][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 145.490572][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 145.500103][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 145.500667][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 145.500723][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.505336][ T5947] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.616526][ T6327] chnl_net:caif_netlink_parms(): no params data found [ 145.626715][ T807] usb 1-1: USB disconnect, device number 6 [ 145.636555][ T5947] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 145.693365][ T5947] usb 2-1: USB disconnect, device number 5 [ 145.733301][ T1426] bridge_slave_1: left allmulticast mode [ 145.733420][ T1426] bridge_slave_1: left promiscuous mode [ 145.756825][ T1426] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.851516][ T1426] bridge_slave_0: left allmulticast mode [ 145.851535][ T1426] bridge_slave_0: left promiscuous mode [ 145.851683][ T1426] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.860881][ T5809] Bluetooth: hci5: command tx timeout [ 146.262809][ T5809] Bluetooth: hci3: command tx timeout [ 147.180719][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 148.343146][ T5809] Bluetooth: hci3: command tx timeout [ 149.151228][ T1426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.190614][ T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.211648][ T1426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.232630][ T1426] bond0 (unregistering): Released all slaves [ 149.340580][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 149.343187][ T807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.343217][ T807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.343239][ T807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.343260][ T807] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.343299][ T807] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.343322][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.629104][ T807] usb 2-1: usb_control_msg returned -32 [ 149.629159][ T807] usbtmc 2-1:16.0: can't read capabilities [ 149.684500][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.684621][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.684848][ T6330] bridge_slave_0: entered allmulticast mode [ 149.687395][ T6330] bridge_slave_0: entered promiscuous mode [ 150.611947][ T6420] netlink: 'syz.0.165': attribute type 40 has an invalid length. [ 151.162694][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.162919][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.163144][ T6330] bridge_slave_1: entered allmulticast mode [ 151.165805][ T6330] bridge_slave_1: entered promiscuous mode [ 151.493216][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.493438][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.493624][ T6327] bridge_slave_0: entered allmulticast mode [ 151.505057][ T6327] bridge_slave_0: entered promiscuous mode [ 151.525674][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.534116][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.534240][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.534465][ T6327] bridge_slave_1: entered allmulticast mode [ 151.547149][ T6327] bridge_slave_1: entered promiscuous mode [ 151.564324][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.986740][ T5881] usb 2-1: USB disconnect, device number 6 [ 152.167917][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 152.325657][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 152.332470][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.760513][ T5881] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 152.796147][ T6330] team0: Port device team_slave_0 added [ 152.836147][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.952219][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.952246][ T5881] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.952279][ T5881] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 152.952301][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.004319][ T5881] usb 5-1: config 0 descriptor?? [ 153.273609][ T1426] hsr_slave_0: left promiscuous mode [ 153.351625][ T1426] hsr_slave_1: left promiscuous mode [ 153.354981][ T1426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.355086][ T1426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.397228][ T1426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.397251][ T1426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.576232][ T1426] veth1_macvtap: left promiscuous mode [ 153.576482][ T1426] veth0_macvtap: left promiscuous mode [ 153.576747][ T1426] veth1_vlan: left promiscuous mode [ 153.577055][ T1426] veth0_vlan: left promiscuous mode [ 153.745391][ T6453] input: syz1 as /devices/virtual/input/input7 [ 154.489241][ T6463] netlink: 'syz.1.179': attribute type 40 has an invalid length. [ 154.680550][ T5805] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 154.833661][ T5805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.833696][ T5805] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.835942][ T5805] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 154.835968][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.835986][ T5805] usb 1-1: Product: syz [ 154.835999][ T5805] usb 1-1: Manufacturer: syz [ 154.836012][ T5805] usb 1-1: SerialNumber: syz [ 154.843283][ T5805] usb 1-1: config 0 descriptor?? [ 155.127272][ T37] audit: type=1326 audit(1771121153.363:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6461 comm="syz.0.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c469bbf79 code=0x0 [ 155.234261][ T5805] usb 1-1: USB disconnect, device number 7 [ 155.480123][ T5805] usb 5-1: USB disconnect, device number 5 [ 157.242663][ T1426] team0 (unregistering): Port device team_slave_1 removed [ 158.241716][ T1426] team0 (unregistering): Port device team_slave_0 removed [ 164.471382][ T6500] tipc: Started in network mode [ 164.471417][ T6500] tipc: Node identity fffffffa, cluster identity 4711 [ 164.471426][ T6500] tipc: Node number set to 4294967290 [ 164.559302][ T6330] team0: Port device team_slave_1 added [ 164.706436][ T6327] team0: Port device team_slave_0 added [ 164.708522][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.708536][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.708559][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.078188][ T6327] team0: Port device team_slave_1 added [ 165.079204][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.079212][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.079226][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.202709][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.202727][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.202752][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.286417][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.286433][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.286457][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.375320][ T6330] hsr_slave_0: entered promiscuous mode [ 165.376274][ T6330] hsr_slave_1: entered promiscuous mode [ 165.830321][ T6327] hsr_slave_0: entered promiscuous mode [ 165.840707][ T6327] hsr_slave_1: entered promiscuous mode [ 165.841777][ T6327] debugfs: 'hsr0' already exists in 'hsr' [ 165.841801][ T6327] Cannot create hsr debugfs directory [ 165.912356][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.070649][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 166.072973][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.073001][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.073021][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.073038][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.073071][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.073088][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.298101][ T10] usb 2-1: usb_control_msg returned -32 [ 166.298135][ T10] usbtmc 2-1:16.0: can't read capabilities [ 166.392144][ T10] usb 2-1: USB disconnect, device number 7 [ 166.735645][ T6330] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.838476][ T6330] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.867374][ T6330] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.954492][ T6330] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.277485][ T6327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.336213][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 167.523115][ T6559] gretap0: refused to change device tx_queue_len [ 167.523659][ T6559] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.529493][ T6327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.711517][ T6327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.810596][ T6327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.560897][ T5805] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.712820][ T5805] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.712858][ T5805] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.712896][ T5805] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.712918][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.723590][ T6584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.758529][ T5805] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.933315][ T1426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.562329][ T6595] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 171.457713][ T10] usb 5-1: USB disconnect, device number 6 [ 171.473500][ T1426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.232311][ T1426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.533646][ T1426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.643727][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.757783][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.934741][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.952025][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.952156][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.995198][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.995397][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.485980][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.844723][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.844799][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.886717][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.901522][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.934622][ T1426] bridge_slave_1: left allmulticast mode [ 175.934648][ T1426] bridge_slave_1: left promiscuous mode [ 175.934881][ T1426] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.965391][ T6659] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.011549][ T1426] bridge_slave_0: left allmulticast mode [ 176.011569][ T1426] bridge_slave_0: left promiscuous mode [ 176.011715][ T1426] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.416916][ T6680] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.231'. [ 179.230554][ T5881] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.394831][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 179.398455][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.399763][ T5881] usb 2-1: config 4 interface 0 has no altsetting 0 [ 179.403039][ T5881] usb 2-1: string descriptor 0 read error: -22 [ 179.403126][ T5881] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 179.403148][ T5881] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 179.432355][ T5881] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 179.477740][ T5881] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.478337][ T5881] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 179.478429][ T5881] usb 2-1: media controller created [ 179.543062][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.604281][ T1426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.694636][ T1426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.755533][ T1426] bond0 (unregistering): Released all slaves [ 180.060180][ T6696] befs: (nbd4): unable to read superblock [ 180.798213][ T5881] zl10353_read_register: readreg error (reg=127, ret==0) [ 181.221125][ T6705] evm: overlay not supported [ 181.281056][ T5881] usb 2-1: USB disconnect, device number 8 [ 181.815289][ T6723] overlayfs: failed to resolve './file0': -2 [ 182.355880][ T6736] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 183.079015][ T6745] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 183.430790][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.548058][ T6771] overlayfs: failed to resolve './file0': -2 [ 184.621236][ T1426] hsr_slave_0: left promiscuous mode [ 184.829556][ T992] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 184.870789][ T1426] hsr_slave_1: left promiscuous mode [ 184.873733][ T1426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.873751][ T1426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.935886][ T6778] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 185.551036][ T992] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 185.551066][ T992] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 185.551087][ T992] usb 5-1: Product: syz [ 185.551101][ T992] usb 5-1: Manufacturer: syz [ 185.551115][ T992] usb 5-1: SerialNumber: syz [ 185.604458][ T992] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 185.733435][ T1426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.733495][ T1426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.978177][ T6784] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 186.130577][ T992] vp7045: USB control message 'in' went wrong. [ 186.130594][ T992] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 186.130631][ T992] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 186.142623][ T992] usb 5-1: USB disconnect, device number 7 [ 187.145042][ T1426] veth1_macvtap: left promiscuous mode [ 187.145147][ T1426] veth0_macvtap: left promiscuous mode [ 187.146498][ T1426] veth1_vlan: left promiscuous mode [ 187.146582][ T1426] veth0_vlan: left promiscuous mode [ 189.130597][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.001750][ T6801] overlayfs: failed to resolve './file0': -2 [ 190.115873][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 190.115903][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.115923][ T10] usb 2-1: Product: syz [ 190.115936][ T10] usb 2-1: Manufacturer: syz [ 190.115949][ T10] usb 2-1: SerialNumber: syz [ 190.398606][ T6805] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 191.240461][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 191.240518][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 191.491466][ T6811] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 193.721078][ T6830] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 194.214129][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 194.214623][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 194.215080][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 194.215130][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 194.217408][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 194.270151][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270222][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.394599][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 194.417656][ T10] usb 2-1: USB disconnect, device number 9 [ 194.542020][ T6839] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 197.202990][ T6866] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 198.301024][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.303624][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.306523][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.345566][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.358219][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.505159][ T6887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.286'. [ 200.354078][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.357414][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.359772][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.380794][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.398130][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.421139][ T60] Bluetooth: hci2: command tx timeout [ 201.475679][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 201.475716][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 201.475738][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 201.692508][ T1426] team0 (unregistering): Port device team_slave_1 removed [ 201.774085][ T6908] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 202.500527][ T5802] Bluetooth: hci2: command tx timeout [ 202.500817][ T5802] Bluetooth: hci6: command tx timeout [ 202.903397][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.420293][ T6909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.501072][ T1426] team0 (unregistering): Port device team_slave_0 removed [ 204.757066][ T5809] Bluetooth: hci6: command tx timeout [ 204.757098][ T5809] Bluetooth: hci2: command tx timeout [ 205.728049][ T6936] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 206.602591][ T6941] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 206.820511][ T5802] Bluetooth: hci2: command tx timeout [ 206.820545][ T5802] Bluetooth: hci6: command tx timeout [ 207.193402][ T6876] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.284'. [ 208.912125][ T5809] Bluetooth: hci6: command tx timeout [ 209.815504][ T6330] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI [ 209.815526][ T6330] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 209.815556][ T6330] CPU: 1 UID: 0 PID: 6330 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.815576][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.815586][ T6330] RIP: 0010:klist_remove+0x159/0x340 [ 209.815621][ T6330] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ad 8f 1f f7 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8b 8f 1f f7 49 8b 84 24 98 00 00 00 48 89 [ 209.815635][ T6330] RSP: 0018:ffffc90004b5f620 EFLAGS: 00010202 [ 209.815654][ T6330] RAX: 0000000000000013 RBX: ffff888039253c00 RCX: 0000000000000000 [ 209.815665][ T6330] RDX: 0000000000000006 RSI: ffffffff8d34722c RDI: 0000000000000098 [ 209.815676][ T6330] RBP: ffffc90004b5f718 R08: ffffffff8f492877 R09: 1ffffffff1e9250e [ 209.815687][ T6330] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: 0000000000000000 [ 209.815698][ T6330] R13: 1ffff1100c2fbb14 R14: ffff8880617dd8a0 R15: dffffc0000000000 [ 209.815711][ T6330] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 209.815725][ T6330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.815736][ T6330] CR2: 00007f4dc69e4d58 CR3: 000000003a628000 CR4: 00000000003526f0 [ 209.815751][ T6330] Call Trace: [ 209.815761][ T6330] [ 209.815770][ T6330] ? __pfx_klist_remove+0x10/0x10 [ 209.815790][ T6330] ? kobject_move+0x5e0/0x720 [ 209.815811][ T6330] ? __pfx_kobject_move+0x10/0x10 [ 209.815833][ T6330] ? get_device_parent+0x370/0x3a0 [ 209.815859][ T6330] device_move+0x193/0x740 [ 209.815877][ T6330] hci_conn_del_sysfs+0xb8/0x1a0 [ 209.815899][ T6330] hci_conn_del+0xc36/0x1230 [ 209.815921][ T6330] hci_conn_hash_flush+0x191/0x260 [ 209.815949][ T6330] hci_dev_close_sync+0x821/0x10e0 [ 209.815976][ T6330] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 209.815991][ T6330] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.816011][ T6330] ? hci_unregister_dev+0x212/0x5a0 [ 209.816035][ T6330] hci_unregister_dev+0x21a/0x5a0 [ 209.816057][ T6330] vhci_release+0x155/0x1b0 [ 209.816075][ T6330] ? __pfx_vhci_release+0x10/0x10 [ 209.816092][ T6330] __fput+0x45e/0xa80 [ 209.816116][ T6330] task_work_run+0x1d9/0x270 [ 209.816133][ T6330] ? __pfx_task_work_run+0x10/0x10 [ 209.816148][ T6330] ? do_exit+0x696/0x2320 [ 209.816169][ T6330] ? kmem_cache_free+0x185/0x690 [ 209.816187][ T6330] ? put_net+0x191/0x260 [ 209.816203][ T6330] ? do_exit+0x696/0x2320 [ 209.816224][ T6330] do_exit+0x69b/0x2320 [ 209.816247][ T6330] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.816266][ T6330] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.816286][ T6330] ? __pfx_do_exit+0x10/0x10 [ 209.816305][ T6330] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 209.816320][ T6330] ? reacquire_held_locks+0x104/0x190 [ 209.816341][ T6330] ? rt_spin_lock+0x1e0/0x400 [ 209.816360][ T6330] do_group_exit+0x21b/0x2d0 [ 209.816375][ T6330] ? rt_spin_unlock+0x160/0x200 [ 209.816391][ T6330] get_signal+0x125c/0x1310 [ 209.816417][ T6330] arch_do_signal_or_restart+0xbc/0x830 [ 209.816434][ T6330] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 209.816453][ T6330] ? fput_close_sync+0x11f/0x240 [ 209.816471][ T6330] ? __pfx_fput_close_sync+0x10/0x10 [ 209.816493][ T6330] exit_to_user_mode_loop+0x86/0x480 [ 209.816511][ T6330] ? rcu_is_watching+0x15/0xb0 [ 209.816532][ T6330] do_syscall_64+0x32d/0xf80 [ 209.816550][ T6330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.816565][ T6330] ? trace_irq_disable+0x37/0x100 [ 209.816578][ T6330] ? clear_bhb_loop+0x40/0x90 [ 209.816596][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.816610][ T6330] RIP: 0033:0x7f985e7dc84e [ 209.816633][ T6330] Code: Unable to access opcode bytes at 0x7f985e7dc824. [ 209.816641][ T6330] RSP: 002b:00007fff77bc2e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 209.816658][ T6330] RAX: 0000000000000028 RBX: 0000555584a14500 RCX: 00007f985e7dc84e [ 209.816670][ T6330] RDX: 0000000000000028 RSI: 00007f985f5c4670 RDI: 0000000000000003 [ 209.816681][ T6330] RBP: 0000000000000001 R08: 00007fff77bc2ed4 R09: 000000000000000c [ 209.816690][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 209.816699][ T6330] R13: 0000000000000000 R14: 00007f985f5c4670 R15: 0000000000000000 [ 209.816714][ T6330] [ 209.816720][ T6330] Modules linked in: [ 209.816753][ T6330] ---[ end trace 0000000000000000 ]--- [ 209.818150][ T6330] RIP: 0010:klist_remove+0x159/0x340 [ 209.818179][ T6330] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ad 8f 1f f7 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8b 8f 1f f7 49 8b 84 24 98 00 00 00 48 89 [ 209.818194][ T6330] RSP: 0018:ffffc90004b5f620 EFLAGS: 00010202 [ 209.818210][ T6330] RAX: 0000000000000013 RBX: ffff888039253c00 RCX: 0000000000000000 [ 209.818220][ T6330] RDX: 0000000000000006 RSI: ffffffff8d34722c RDI: 0000000000000098 [ 209.818231][ T6330] RBP: ffffc90004b5f718 R08: ffffffff8f492877 R09: 1ffffffff1e9250e [ 209.818243][ T6330] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: 0000000000000000 [ 209.818255][ T6330] R13: 1ffff1100c2fbb14 R14: ffff8880617dd8a0 R15: dffffc0000000000 [ 209.818267][ T6330] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 209.818281][ T6330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.818293][ T6330] CR2: 00007f4dc69e4d58 CR3: 000000003a628000 CR4: 00000000003526f0 [ 209.818310][ T6330] Kernel panic - not syncing: Fatal exception [ 209.818627][ T6330] Kernel Offset: disabled