last executing test programs: 13.452219422s ago: executing program 3 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(0x0, 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x50, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINK={0x8, 0x5, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 10.299483045s ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd70000000000002000000080003", @ANYRES32=r1, @ANYBLOB="0c0099000b0000001f0000000800a0007609000008009f0005000000080026006c09"], 0x40}}, 0x0) 10.011400865s ago: executing program 2 (id=380): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) dup(0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 7.954383547s ago: executing program 3 (id=386): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030908000009058d67c8002a000009050502000000000009058b6e"], 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 7.331763084s ago: executing program 4 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x549ec3, 0x15d) mlock(&(0x7f0000597000/0x4000)=nil, 0x4000) quotactl_fd$Q_QUOTAON(r1, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705a, 0x3}, {0x200, 0x7}]}}) munlockall() open(0x0, 0x0, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0x2, &(0x7f0000000140)={0x9, 0x6e, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x2, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000100)=0x5) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x800) ioctl$VIDIOC_QUERYMENU(r6, 0xc040564a, &(0x7f0000000240)={0x7, 0x0, @name="75989398af0891b21ca16436df5d3b4ad96756498e0afc7807a5118025bac221"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$VIDIOC_S_STD(r7, 0x40085618, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x4, 0x2}) 6.495273233s ago: executing program 0 (id=392): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0xa, [0x4, 0x2]}, {0x80000000, 0x0, 0x2, [0x9, 0xf7]}, 0x4, [0x3, 0xfffffffd]}) 6.449174577s ago: executing program 2 (id=393): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000001"], 0x40) 6.22278463s ago: executing program 0 (id=394): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x80800) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 6.214651614s ago: executing program 1 (id=395): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) fchdir(0xffffffffffffffff) 6.192466844s ago: executing program 2 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(0x0, 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x50, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINK={0x8, 0x5, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.201864377s ago: executing program 1 (id=397): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000800)={0xf7b, 0x1f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8161, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0xd, 0x1000, 0x8}) 5.150503651s ago: executing program 3 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.035822189s ago: executing program 0 (id=399): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1000000, &(0x7f0000001700)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c3) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000100)=0xb8) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x400) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xf87, 0x61862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r0, 0x8c, {0x0, 0x0, 0x0, 0x2, 0x7be, 0x0, 0x12, 0xb, 0x5, "997b5d35eeec549f08f4dd38be409600df1ca528bc7813bee0c0b32477c6109fafa3e84a26b7bdb64e495077cccec2dbb1ddeb3f51c7f85a2a03a14de445e6d5", "2a7db08c49a8dcd6cfb7c436acd2ef19d85e22da52b7f5f54fd4aae31356d82b5a84c773565124ef5df521859895846808e1056971a11f6c4f09c18fcb426171", "836720951ebe53113e1cb6ec0d3ac94f4158e39534a6266fe6f47760f0b9e6cf", [0xff, 0x2]}}) r1 = socket(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r4}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r3, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000003c0)={@remote, r3}, 0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00002aa000/0x1000)=nil, 0x1000, 0x15) 4.922832786s ago: executing program 1 (id=400): sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x4004000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 4.841129445s ago: executing program 3 (id=401): socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x17, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24c28c8377c1f0ae1469ee52594d0901986ec0a8db4304da11dfb7bd43359182a392c5b8139307ff97b41b8901266ce38b6fe269f771fe3b3413d783ee9f1d655aaa1bf1", 0x44}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) 4.560652426s ago: executing program 3 (id=402): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r1, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, 0x0, 0x3, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) 3.888458407s ago: executing program 1 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd70000000000002000000080003", @ANYRES32=r1, @ANYBLOB="0c0099000b0000001f0000000800a0007609000008009f0005000000080026006c09"], 0x40}}, 0x0) 3.847039998s ago: executing program 4 (id=404): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x80000) 3.771883496s ago: executing program 0 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x200, @val={0x8c, 0x10, {0x96a, "5d4f7f7d62a8", @short="30e722b9d80daf65"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x2c048010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 3.577455453s ago: executing program 1 (id=406): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000"], 0x40) 3.488546443s ago: executing program 4 (id=407): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) fchdir(0xffffffffffffffff) 3.425244748s ago: executing program 1 (id=408): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1084189e, 0x82680) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x80, 0xffffffffffffffff, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000080)) write$khugepaged_scan(r4, &(0x7f0000000040), 0x8) r6 = socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x34004811) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0127000904"], 0x0) 3.117339762s ago: executing program 0 (id=409): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030908000009058d67c8002a000009050502000000000009058b6e"], 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x80, 0x4) 2.312546159s ago: executing program 4 (id=410): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000800)={0xf7b, 0x1f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8161, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0xd, 0x1000, 0x8}) 1.883236434s ago: executing program 4 (id=411): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x80800) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 670.833836ms ago: executing program 2 (id=412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 572.397113ms ago: executing program 4 (id=413): socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 338.692631ms ago: executing program 0 (id=414): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x6, 0x4}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 255.947338ms ago: executing program 3 (id=415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf130cd5}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) 0s ago: executing program 2 (id=416): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000500)='\x00.\x00\x00\x00\x00', 0x6}], 0x1, 0x9, 0x8000400, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 82.060489][ T5831] cgroup: Unknown subsys name 'net' [ 82.189536][ T5831] cgroup: Unknown subsys name 'cpuset' [ 82.199741][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.843927][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.021660][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.032542][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.043002][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.054959][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.066271][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.194492][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.203671][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.212620][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.220949][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.229757][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.238451][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.248478][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.256670][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.265858][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.275702][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.340069][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.353335][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.362206][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.372903][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.381670][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.404114][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.418066][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.426063][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.437216][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.446056][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.158230][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.248998][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 87.374069][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 87.472079][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 87.576391][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 87.700581][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.708275][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.716314][ T5843] bridge_slave_0: entered allmulticast mode [ 87.724290][ T5843] bridge_slave_0: entered promiscuous mode [ 87.769110][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.776544][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.783863][ T5848] bridge_slave_0: entered allmulticast mode [ 87.792083][ T5848] bridge_slave_0: entered promiscuous mode [ 87.801499][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.809249][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.816773][ T5848] bridge_slave_1: entered allmulticast mode [ 87.824600][ T5848] bridge_slave_1: entered promiscuous mode [ 87.833725][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.841212][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.848607][ T5843] bridge_slave_1: entered allmulticast mode [ 87.856764][ T5843] bridge_slave_1: entered promiscuous mode [ 87.878945][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.886361][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.893687][ T5849] bridge_slave_0: entered allmulticast mode [ 87.901834][ T5849] bridge_slave_0: entered promiscuous mode [ 87.959229][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.966682][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.973949][ T5849] bridge_slave_1: entered allmulticast mode [ 87.982351][ T5849] bridge_slave_1: entered promiscuous mode [ 88.026177][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.091447][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.101285][ T5853] Bluetooth: hci0: command tx timeout [ 88.128325][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.152920][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.160441][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.167864][ T5859] bridge_slave_0: entered allmulticast mode [ 88.177105][ T5859] bridge_slave_0: entered promiscuous mode [ 88.190300][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.218989][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.241967][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.249561][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.257254][ T5859] bridge_slave_1: entered allmulticast mode [ 88.265105][ T5859] bridge_slave_1: entered promiscuous mode [ 88.276160][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.289043][ T5848] team0: Port device team_slave_0 added [ 88.308171][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.316119][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.323606][ T5856] bridge_slave_0: entered allmulticast mode [ 88.331711][ T5856] bridge_slave_0: entered promiscuous mode [ 88.338178][ T5853] Bluetooth: hci2: command tx timeout [ 88.338193][ T5854] Bluetooth: hci1: command tx timeout [ 88.380825][ T5848] team0: Port device team_slave_1 added [ 88.401688][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.409465][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.416072][ T5853] Bluetooth: hci3: command tx timeout [ 88.419841][ T5856] bridge_slave_1: entered allmulticast mode [ 88.431109][ T5856] bridge_slave_1: entered promiscuous mode [ 88.483694][ T5843] team0: Port device team_slave_0 added [ 88.502567][ T5853] Bluetooth: hci4: command tx timeout [ 88.538233][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.551992][ T5849] team0: Port device team_slave_0 added [ 88.575591][ T5843] team0: Port device team_slave_1 added [ 88.587828][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.601398][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.614384][ T5849] team0: Port device team_slave_1 added [ 88.638237][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.646323][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.673560][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.703939][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.742994][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.750250][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.776365][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.829758][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.837172][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.863690][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.886644][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.893623][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.919991][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.956317][ T5856] team0: Port device team_slave_0 added [ 88.965806][ T5859] team0: Port device team_slave_0 added [ 88.973327][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.980976][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.007931][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.023448][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.030701][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.056812][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.071256][ T5856] team0: Port device team_slave_1 added [ 89.080203][ T5859] team0: Port device team_slave_1 added [ 89.170889][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.178023][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.204228][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.247602][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.254654][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.281610][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.314612][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.321957][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.348247][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.369253][ T5848] hsr_slave_0: entered promiscuous mode [ 89.377098][ T5848] hsr_slave_1: entered promiscuous mode [ 89.386298][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.393265][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.419587][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.498441][ T5849] hsr_slave_0: entered promiscuous mode [ 89.505978][ T5849] hsr_slave_1: entered promiscuous mode [ 89.512884][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 89.518796][ T5849] Cannot create hsr debugfs directory [ 89.534700][ T5843] hsr_slave_0: entered promiscuous mode [ 89.542573][ T5843] hsr_slave_1: entered promiscuous mode [ 89.559112][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 89.565211][ T5843] Cannot create hsr debugfs directory [ 89.729869][ T5856] hsr_slave_0: entered promiscuous mode [ 89.738168][ T5856] hsr_slave_1: entered promiscuous mode [ 89.745628][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 89.751415][ T5856] Cannot create hsr debugfs directory [ 89.768084][ T5859] hsr_slave_0: entered promiscuous mode [ 89.775900][ T5859] hsr_slave_1: entered promiscuous mode [ 89.783329][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 89.789163][ T5859] Cannot create hsr debugfs directory [ 90.175691][ T5853] Bluetooth: hci0: command tx timeout [ 90.416453][ T5853] Bluetooth: hci2: command tx timeout [ 90.421964][ T5854] Bluetooth: hci1: command tx timeout [ 90.495771][ T5854] Bluetooth: hci3: command tx timeout [ 90.513901][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.534569][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.547928][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.573387][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.581089][ T5854] Bluetooth: hci4: command tx timeout [ 90.669544][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.684450][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.703341][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.719525][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.846630][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.873257][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.885242][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.900066][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.029723][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.056614][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.069949][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.083615][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.104974][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.248577][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.259309][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.287018][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.302337][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.321429][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.338602][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.346478][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.392030][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.403844][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.411182][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.514796][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.571996][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.579221][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.612321][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.619603][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.648667][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.790474][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.806512][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.857533][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.865045][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.916620][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.923932][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.001078][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.049902][ T9] cfg80211: failed to load regulatory.db [ 92.081167][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.088488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.142664][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.150034][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.189001][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.256267][ T5854] Bluetooth: hci0: command tx timeout [ 92.303714][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.323802][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.362126][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.369401][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.441888][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.452888][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.460182][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.497090][ T5854] Bluetooth: hci1: command tx timeout [ 92.503232][ T5853] Bluetooth: hci2: command tx timeout [ 92.577705][ T5853] Bluetooth: hci3: command tx timeout [ 92.655690][ T5853] Bluetooth: hci4: command tx timeout [ 92.804943][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.812492][ T5849] veth0_vlan: entered promiscuous mode [ 92.874255][ T5849] veth1_vlan: entered promiscuous mode [ 92.889341][ T5848] veth0_vlan: entered promiscuous mode [ 93.000778][ T5848] veth1_vlan: entered promiscuous mode [ 93.059367][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.121629][ T5849] veth0_macvtap: entered promiscuous mode [ 93.152467][ T5843] veth0_vlan: entered promiscuous mode [ 93.168055][ T5849] veth1_macvtap: entered promiscuous mode [ 93.230581][ T5843] veth1_vlan: entered promiscuous mode [ 93.270335][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.303939][ T5848] veth0_macvtap: entered promiscuous mode [ 93.317834][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.330288][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.349044][ T5848] veth1_macvtap: entered promiscuous mode [ 93.381085][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.412035][ T83] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.444902][ T83] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.472846][ T83] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.493272][ T5859] veth0_vlan: entered promiscuous mode [ 93.549710][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.582802][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.628236][ T5843] veth0_macvtap: entered promiscuous mode [ 93.661377][ T5859] veth1_vlan: entered promiscuous mode [ 93.670983][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.708830][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.721163][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.734770][ T5843] veth1_macvtap: entered promiscuous mode [ 93.768356][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.878905][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.891291][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.900639][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.952925][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.991265][ T5859] veth0_macvtap: entered promiscuous mode [ 94.008746][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.020490][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.051531][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.061227][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.082763][ T5859] veth1_macvtap: entered promiscuous mode [ 94.093025][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.119330][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.130741][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.132921][ T1054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.214320][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.229989][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.268911][ T5856] veth0_vlan: entered promiscuous mode [ 94.308891][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.328111][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.346153][ T5853] Bluetooth: hci0: command tx timeout [ 94.360143][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.429951][ T5856] veth1_vlan: entered promiscuous mode [ 94.449305][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.460882][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.480678][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.513225][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541953][ T30] audit: type=1326 audit(1773764364.044:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.579164][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.584443][ T5853] Bluetooth: hci1: command tx timeout [ 94.588872][ T5854] Bluetooth: hci2: command tx timeout [ 94.622833][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.626437][ T30] audit: type=1326 audit(1773764364.064:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.657604][ T5854] Bluetooth: hci3: command tx timeout [ 94.670487][ T30] audit: type=1326 audit(1773764364.074:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.693140][ T30] audit: type=1326 audit(1773764364.114:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.724075][ T30] audit: type=1326 audit(1773764364.114:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.747995][ T30] audit: type=1326 audit(1773764364.114:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.770107][ T5854] Bluetooth: hci4: command tx timeout [ 94.777951][ T30] audit: type=1326 audit(1773764364.114:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.800318][ T30] audit: type=1326 audit(1773764364.114:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.823166][ T30] audit: type=1326 audit(1773764364.114:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 94.846207][ T30] audit: type=1326 audit(1773764364.114:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 95.020605][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.057255][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.163283][ T5856] veth0_macvtap: entered promiscuous mode [ 95.219031][ T5856] veth1_macvtap: entered promiscuous mode [ 95.340451][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.386961][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.390111][ T5974] syz_tun: entered allmulticast mode [ 95.403565][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.546653][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.637228][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650307][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.663093][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.709287][ T3551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725089][ T3551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762244][ T3551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789798][ T3551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.083717][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.135320][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.324932][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.357436][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.639261][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.659075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.710330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.921494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.976499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.126583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.134558][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.330227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.381024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.413033][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.442422][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.477330][ T5918] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 97.506010][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.535719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.578042][ T5918] usb 4-1: config 0 descriptor?? [ 97.642120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.653661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.918610][ T6008] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.982166][ T6008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.923293][ T5918] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 98.940549][ T6008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.023104][ T5918] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 99.159275][ T5918] cp2112 0003:10C4:EA90.0001: error requesting version [ 99.193302][ T6016] syzkaller0: entered promiscuous mode [ 99.221347][ T6016] syzkaller0: entered allmulticast mode [ 99.236854][ T5918] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 99.297784][ T5918] usb 4-1: USB disconnect, device number 2 [ 99.453385][ T6015] fido_id[6015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 100.116935][ T6028] input: syz0 as /devices/virtual/input/input5 [ 100.266760][ T1221] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.465918][ T1221] usb 3-1: Using ep0 maxpacket: 8 [ 100.490886][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 100.543630][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.581608][ T1221] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.595526][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 100.610164][ T1221] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 100.646444][ T1221] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 100.692538][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.727466][ T1221] usb 3-1: config 0 descriptor?? [ 100.756466][ T1221] hub 3-1:0.0: bad descriptor, ignoring hub [ 100.774813][ T1221] hub 3-1:0.0: probe with driver hub failed with error -5 [ 100.849888][ T6038] Zero length message leads to an empty skb [ 100.857117][ T5854] Bluetooth: hci5: urb ffff88803374d400 submission failed (90) [ 101.155288][ T6046] loop2: detected capacity change from 0 to 7 [ 101.170132][ T5984] usb 3-1: USB disconnect, device number 2 [ 101.184017][ T6046] Dev loop2: unable to read RDB block 7 [ 101.192904][ T6046] loop2: unable to read partition table [ 101.199038][ T6046] loop2: partition table beyond EOD, truncated [ 101.215351][ T6046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.396051][ T5918] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.725600][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 102.304724][ T5918] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 102.337432][ T5918] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 102.438688][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.479425][ T5918] usb 1-1: Product: syz [ 102.483977][ T5918] usb 1-1: Manufacturer: syz [ 102.494305][ T5918] usb 1-1: SerialNumber: syz [ 102.514181][ T5918] usb 1-1: config 0 descriptor?? [ 102.530201][ T5918] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 102.579650][ T5918] usb 1-1: setting power ON [ 102.593969][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 102.665313][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.697012][ T5918] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 102.731770][ T5918] usb 1-1: media controller created [ 102.827104][ T6058] syzkaller0: entered promiscuous mode [ 102.846374][ T6058] syzkaller0: entered allmulticast mode [ 102.854379][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.944423][ T5918] usb 1-1: selecting invalid altsetting 6 [ 102.955851][ T5918] usb 1-1: digital interface selection failed (-22) [ 102.967738][ T5918] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 103.004748][ T5918] usb 1-1: setting power OFF [ 103.033635][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 103.058973][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 103.107335][ T5918] (NULL device *): no alternate interface [ 103.155357][ T6069] netlink: 'syz.3.30': attribute type 4 has an invalid length. [ 103.203817][ T5918] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 103.293301][ T5918] usb 1-1: USB disconnect, device number 2 [ 104.050919][ T6072] fuse: Bad value for 'fd' [ 104.994461][ T6087] loop2: detected capacity change from 0 to 7 [ 105.065944][ T6087] Dev loop2: unable to read RDB block 7 [ 105.085587][ T6087] loop2: unable to read partition table [ 105.161810][ T6087] loop2: partition table beyond EOD, truncated [ 105.208824][ T6087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.857970][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.057068][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 106.084620][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 106.163544][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.198097][ T5850] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.228388][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 106.245353][ T5850] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 106.258388][ T5850] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 106.270142][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.300363][ T5850] usb 5-1: config 0 descriptor?? [ 106.320266][ T5850] hub 5-1:0.0: bad descriptor, ignoring hub [ 106.342926][ T5850] hub 5-1:0.0: probe with driver hub failed with error -5 [ 106.437914][ T5854] Bluetooth: hci5: urb ffff8880321c4100 submission failed (90) [ 106.618504][ T5918] usb 5-1: USB disconnect, device number 2 [ 106.625550][ T5850] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.825542][ T5850] usb 1-1: Using ep0 maxpacket: 8 [ 106.836823][ T5850] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 106.859946][ T5850] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 106.878908][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.894091][ T5850] usb 1-1: Product: syz [ 106.904220][ T5850] usb 1-1: Manufacturer: syz [ 106.914892][ T5850] usb 1-1: SerialNumber: syz [ 106.932145][ T5850] usb 1-1: config 0 descriptor?? [ 106.964219][ T5850] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 106.979993][ T5850] usb 1-1: setting power ON [ 106.987988][ T5850] dvb-usb: bulk message failed: -22 (2/0) [ 107.042063][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.061928][ T5850] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 107.076304][ T5850] usb 1-1: media controller created [ 107.116125][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.145612][ T1221] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.211476][ T5850] usb 1-1: selecting invalid altsetting 6 [ 107.232146][ T5850] usb 1-1: digital interface selection failed (-22) [ 107.279759][ T5850] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 107.311457][ T5850] usb 1-1: setting power OFF [ 107.319464][ T5850] dvb-usb: bulk message failed: -22 (2/0) [ 107.330910][ T5850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 107.345558][ T5850] (NULL device *): no alternate interface [ 107.428118][ T1221] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 107.522328][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 107.548320][ T1221] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 107.607500][ T1221] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.633142][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.650119][ T1221] usb 2-1: Product: syz [ 107.670242][ T1221] usb 2-1: Manufacturer: syz [ 107.698801][ T1221] usb 2-1: SerialNumber: syz [ 107.713383][ T5850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 107.794602][ T5850] usb 1-1: USB disconnect, device number 3 [ 107.818661][ T1221] usb 2-1: config 0 descriptor?? [ 107.855939][ T6115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.146097][ T6113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.373836][ T6137] loop3: detected capacity change from 0 to 128 [ 108.441836][ T6137] ======================================================= [ 108.441836][ T6137] WARNING: The mand mount option has been deprecated and [ 108.441836][ T6137] and is ignored by this kernel. Remove the mand [ 108.441836][ T6137] option from the mount to silence this warning. [ 108.441836][ T6137] ======================================================= [ 108.613364][ T6137] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 108.650877][ T6137] hpfs: filesystem error: improperly stopped [ 108.737102][ T6137] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 108.764955][ T6137] hpfs: You really don't want any checks? You are crazy... [ 108.772535][ T5850] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.830817][ T6137] hpfs: hpfs_map_sector(): read error [ 108.886142][ T6137] hpfs: code page support is disabled [ 108.911536][ T6140] capability: warning: `syz.0.49' uses deprecated v2 capabilities in a way that may be insecure [ 108.925489][ T6137] hpfs: hpfs_map_4sectors(): unaligned read [ 108.935030][ T6137] hpfs: hpfs_map_4sectors(): unaligned read [ 108.978878][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 108.988351][ T6137] hpfs: filesystem error: unable to find root dir [ 109.046716][ T5850] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 109.099006][ T5850] usb 5-1: config 0 has no interface number 1 [ 109.175362][ T5850] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 109.220417][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.268470][ T5850] usb 5-1: Product: syz [ 109.284245][ T5850] usb 5-1: Manufacturer: syz [ 109.364078][ T5850] usb 5-1: SerialNumber: syz [ 109.424487][ T5850] usb 5-1: config 0 descriptor?? [ 109.547296][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 109.791015][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.798268][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.254146][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.361242][ T10] usb 2-1: USB disconnect, device number 2 [ 111.474244][ T5918] usb 4-1: config 0 has no interfaces? [ 111.534721][ T5918] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 111.577964][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.611665][ T5918] usb 4-1: Product: syz [ 111.630847][ T5918] usb 4-1: Manufacturer: syz [ 111.647681][ T5918] usb 4-1: SerialNumber: syz [ 111.752893][ T5918] usb 4-1: config 0 descriptor?? [ 112.001350][ T6154] loop2: detected capacity change from 0 to 32768 [ 112.145643][ T29] usb 4-1: USB disconnect, device number 3 [ 112.155869][ T6154] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.444876][ T6154] XFS (loop2): Ending clean mount [ 112.570255][ T6162] fuse: Bad value for 'fd' [ 112.861778][ T5849] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 113.023047][ T5850] usb 5-1: Could not set interface, error -71 [ 113.104934][ T5850] usb 5-1: USB disconnect, device number 3 [ 113.805983][ T6194] loop2: detected capacity change from 0 to 128 [ 113.929713][ T6194] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.970471][ T6194] hpfs: filesystem error: improperly stopped [ 113.995472][ T6194] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 114.014255][ T6194] hpfs: You really don't want any checks? You are crazy... [ 114.056502][ T6194] hpfs: hpfs_map_sector(): read error [ 114.081751][ T6194] hpfs: code page support is disabled [ 114.104618][ T6194] hpfs: hpfs_map_4sectors(): unaligned read [ 114.130137][ T6194] hpfs: hpfs_map_4sectors(): unaligned read [ 114.156795][ T6194] hpfs: filesystem error: unable to find root dir [ 117.219434][ T6221] loop3: detected capacity change from 0 to 32768 [ 117.274551][ T6221] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.326609][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.387981][ T6221] XFS (loop3): Ending clean mount [ 117.450540][ T5848] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.495810][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 117.512303][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 117.542939][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.569115][ T5918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.611038][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 117.669746][ T5918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 117.717380][ T5918] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 117.741064][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.794805][ T5918] usb 1-1: config 0 descriptor?? [ 117.810231][ T5918] hub 1-1:0.0: bad descriptor, ignoring hub [ 117.832890][ T5918] hub 1-1:0.0: probe with driver hub failed with error -5 [ 118.007305][ T5854] Bluetooth: hci5: urb ffff888036307300 submission failed (90) [ 118.122764][ T5984] usb 1-1: USB disconnect, device number 4 [ 118.507107][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 119.017918][ T5984] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 119.025629][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 119.196282][ T5984] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.216327][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 119.239081][ T5984] usb 1-1: not running at top speed; connect to a high speed hub [ 119.251947][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.268132][ T5984] usb 1-1: config 1 has an invalid interface number: 49 but max is 0 [ 119.288280][ T10] usb 5-1: Product: syz [ 119.297451][ T5984] usb 1-1: config 1 has no interface number 0 [ 119.306891][ T10] usb 5-1: Manufacturer: syz [ 119.323010][ T5984] usb 1-1: config 1 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.334489][ T10] usb 5-1: SerialNumber: syz [ 119.361912][ T10] usb 5-1: config 0 descriptor?? [ 119.381385][ T5984] usb 1-1: New USB device found, idVendor=055f, idProduct=c650, bcdDevice=81.c9 [ 119.412163][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.448285][ T5984] usb 1-1: Product: syz [ 119.466407][ T5984] usb 1-1: Manufacturer: syz [ 119.481315][ T5984] usb 1-1: SerialNumber: syz [ 119.745033][ T5984] gspca_main: sunplus-2.14.0 probing 055f:c650 [ 119.772439][ T5984] gspca_sunplus: reg_r err -71 [ 119.796262][ T5984] sunplus 1-1:1.49: probe with driver sunplus failed with error -71 [ 119.829837][ T5984] usb 1-1: USB disconnect, device number 5 [ 122.205922][ T5984] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.388181][ T5984] usb 2-1: Using ep0 maxpacket: 8 [ 122.403528][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 122.438016][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.466195][ T5984] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.503128][ T5857] usb 5-1: USB disconnect, device number 4 [ 122.524666][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 122.592260][ T5984] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 122.606162][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 122.649938][ T5984] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 122.692975][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.797731][ T5984] usb 2-1: config 0 descriptor?? [ 122.822904][ T5984] hub 2-1:0.0: bad descriptor, ignoring hub [ 122.855136][ T5984] hub 2-1:0.0: probe with driver hub failed with error -5 [ 122.914561][ T5854] Bluetooth: hci5: urb ffff8880265b1400 submission failed (90) [ 123.138244][ T29] usb 2-1: USB disconnect, device number 3 [ 123.863880][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 123.863895][ T30] audit: type=1326 audit(1773764393.364:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 123.946088][ T6315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.956671][ T30] audit: type=1326 audit(1773764393.404:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.040858][ T30] audit: type=1326 audit(1773764393.404:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.141447][ T30] audit: type=1326 audit(1773764393.504:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.252557][ T30] audit: type=1326 audit(1773764393.504:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.255734][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.369390][ T30] audit: type=1326 audit(1773764393.584:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.473774][ T30] audit: type=1326 audit(1773764393.594:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.605520][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 124.613837][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 124.633905][ T30] audit: type=1326 audit(1773764393.594:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.685503][ T5984] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.695194][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.725307][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.755588][ T30] audit: type=1326 audit(1773764393.614:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 124.757618][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 124.881952][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 124.905692][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 124.929142][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.961505][ T29] usb 2-1: config 0 descriptor?? [ 124.994718][ T29] hub 2-1:0.0: bad descriptor, ignoring hub [ 125.034747][ T29] hub 2-1:0.0: probe with driver hub failed with error -5 [ 125.045355][ T30] audit: type=1326 audit(1773764393.614:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff124b9c799 code=0x7ffc0000 [ 125.177008][ T5854] Bluetooth: hci5: urb ffff8880342b7c00 submission failed (90) [ 125.367788][ T5857] usb 2-1: USB disconnect, device number 4 [ 125.522441][ T6323] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.96'. [ 126.552465][ T6332] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 126.693168][ T5984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.723042][ T5984] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 126.742300][ T5984] usb 3-1: can't read configurations, error -71 [ 127.431758][ T6342] loop4: detected capacity change from 0 to 164 [ 127.686671][ T6348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.106'. [ 127.835502][ T5953] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.035549][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 128.061157][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 128.092350][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.126721][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.160898][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 128.191258][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 128.220746][ T5953] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 128.247437][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.291771][ T5953] usb 4-1: config 0 descriptor?? [ 128.330989][ T5953] hub 4-1:0.0: bad descriptor, ignoring hub [ 128.355714][ T5953] hub 4-1:0.0: probe with driver hub failed with error -5 [ 128.425046][ T5854] Bluetooth: hci5: urb ffff88807c9c6900 submission failed (90) [ 128.525777][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.585122][ T6355] batadv_slave_0: entered promiscuous mode [ 128.605491][ T5953] usb 4-1: USB disconnect, device number 4 [ 129.355895][ T6372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.117'. [ 129.809944][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 129.835168][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 130.740959][ T6402] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.125'. [ 130.945489][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.105584][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 131.115772][ T5953] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.130094][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 131.167348][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.199559][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.232911][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.266134][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 131.302463][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 131.335982][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.351291][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 131.367053][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 131.391083][ T6410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.130'. [ 131.401033][ T5918] usb 4-1: config 0 descriptor?? [ 131.412705][ T5918] hub 4-1:0.0: bad descriptor, ignoring hub [ 131.425780][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.454322][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.463606][ T5918] hub 4-1:0.0: probe with driver hub failed with error -5 [ 131.496458][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.531234][ T5854] Bluetooth: hci5: urb ffff888022ab2600 submission failed (90) [ 131.556108][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 131.566447][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 131.575756][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.592447][ T5953] usb 2-1: config 0 descriptor?? [ 131.604790][ T5953] hub 2-1:0.0: bad descriptor, ignoring hub [ 131.611243][ T5953] hub 2-1:0.0: probe with driver hub failed with error -5 [ 131.672990][ T5854] Bluetooth: hci6: urb ffff888035ad0700 submission failed (90) [ 131.711672][ T29] usb 4-1: USB disconnect, device number 5 [ 131.867416][ T5953] usb 2-1: USB disconnect, device number 5 [ 132.052750][ T6400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.423932][ T6414] bridge0: port 3(syz_tun) entered blocking state [ 132.454971][ T6414] bridge0: port 3(syz_tun) entered disabled state [ 132.474691][ T6414] syz_tun: entered allmulticast mode [ 132.511776][ T6414] syz_tun: entered promiscuous mode [ 132.550943][ T6414] bridge0: port 3(syz_tun) entered blocking state [ 132.559273][ T6414] bridge0: port 3(syz_tun) entered forwarding state [ 132.981940][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993443][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.085543][ T5984] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.276157][ T5984] usb 2-1: Using ep0 maxpacket: 8 [ 135.292292][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 135.317689][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.338475][ T5984] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.349944][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 135.362999][ T5984] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 135.375203][ T5984] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 135.393292][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.432411][ T5984] usb 2-1: config 0 descriptor?? [ 135.456766][ T5984] hub 2-1:0.0: bad descriptor, ignoring hub [ 135.464828][ T5984] hub 2-1:0.0: probe with driver hub failed with error -5 [ 135.498260][ T6485] syzkaller0: entered promiscuous mode [ 135.503912][ T6485] syzkaller0: entered allmulticast mode [ 135.513998][ T5854] Bluetooth: hci5: urb ffff888075901100 submission failed (90) [ 135.529623][ T6485] tipc: Started in network mode [ 135.546271][ T6485] tipc: Node identity 0ad4c6051536, cluster identity 4711 [ 135.558138][ T6485] tipc: Enabled bearer , priority 0 [ 135.580039][ T6484] tipc: Resetting bearer [ 135.648749][ T6484] tipc: Disabling bearer [ 135.687222][ T5984] usb 2-1: USB disconnect, device number 6 [ 136.321204][ T6502] team0: Device vlan2 is already an upper device of the team interface [ 139.462216][ T6564] loop4: detected capacity change from 0 to 4096 [ 140.836281][ T5984] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.976036][ T5984] usb 5-1: device descriptor read/64, error -71 [ 141.155167][ T6582] fuse: Bad value for 'fd' [ 141.225635][ T5984] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.375647][ T5984] usb 5-1: device descriptor read/64, error -71 [ 141.507609][ T5984] usb usb5-port1: attempt power cycle [ 141.682406][ T6594] loop1: detected capacity change from 0 to 4096 [ 141.705661][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.956332][ T5984] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.975519][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 141.995464][ T5984] usb 5-1: device descriptor read/8, error -71 [ 142.013506][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 142.028578][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.041679][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.054868][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 142.067673][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 142.081059][ T5953] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 142.092774][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.306049][ T5984] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.431647][ T5953] usb 4-1: config 0 descriptor?? [ 142.458400][ T5984] usb 5-1: device descriptor read/8, error -71 [ 142.705529][ T5953] hub 4-1:0.0: bad descriptor, ignoring hub [ 142.718393][ T5953] hub 4-1:0.0: probe with driver hub failed with error -5 [ 142.777736][ T5854] Bluetooth: hci5: urb ffff888026e5d500 submission failed (90) [ 142.806016][ T5984] usb usb5-port1: unable to enumerate USB device [ 142.960259][ T5953] usb 4-1: USB disconnect, device number 6 [ 144.019544][ T6625] loop2: detected capacity change from 0 to 7 [ 144.047280][ T6263] Dev loop2: unable to read RDB block 7 [ 144.068934][ T6263] loop2: unable to read partition table [ 144.108221][ T6263] loop2: partition table beyond EOD, truncated [ 144.148059][ T6625] Dev loop2: unable to read RDB block 7 [ 144.164043][ T6625] loop2: unable to read partition table [ 144.201110][ T6625] loop2: partition table beyond EOD, truncated [ 144.224325][ T6625] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.278277][ T5214] Dev loop2: unable to read RDB block 7 [ 144.291621][ T5214] loop2: unable to read partition table [ 144.312642][ T5214] loop2: partition table beyond EOD, truncated [ 147.374083][ T6680] netlink: 7 bytes leftover after parsing attributes in process `syz.4.209'. [ 147.476734][ T5953] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 147.498338][ T6680] netlink: 7 bytes leftover after parsing attributes in process `syz.4.209'. [ 147.709004][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.726540][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.752995][ T5953] usb 1-1: not running at top speed; connect to a high speed hub [ 147.797383][ T5953] usb 1-1: config 1 has an invalid interface number: 49 but max is 0 [ 147.824560][ T5953] usb 1-1: config 1 has no interface number 0 [ 147.845900][ T5953] usb 1-1: New USB device found, idVendor=055f, idProduct=c650, bcdDevice=81.c9 [ 147.877413][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.923361][ T5953] usb 1-1: Product: syz [ 147.949455][ T5953] usb 1-1: Manufacturer: syz [ 147.988863][ T5857] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 148.004752][ T5953] usb 1-1: SerialNumber: syz [ 148.094989][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 148.193154][ T5857] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 148.304101][ T5857] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 148.334448][ T5953] gspca_main: sunplus-2.14.0 probing 055f:c650 [ 148.347820][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.356832][ T5953] gspca_sunplus: reg_r err -71 [ 148.378844][ T5953] sunplus 1-1:1.49: probe with driver sunplus failed with error -71 [ 148.390165][ T5857] usb 4-1: Product: syz [ 148.399471][ T5857] usb 4-1: Manufacturer: syz [ 148.413257][ T5857] usb 4-1: SerialNumber: syz [ 148.425251][ T5953] usb 1-1: USB disconnect, device number 6 [ 148.454540][ T5857] usb 4-1: config 0 descriptor?? [ 148.590196][ T6679] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 148.922565][ T6679] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.190165][ T10] usb 4-1: USB disconnect, device number 7 [ 155.968895][ T6793] syz.4.249 uses obsolete (PF_INET,SOCK_PACKET) [ 155.991925][ T6793] syzkaller1: entered promiscuous mode [ 156.004604][ T6793] syzkaller1: entered allmulticast mode [ 156.822010][ T5854] Bluetooth: hci4: link tx timeout [ 156.830471][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.325487][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.642618][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 157.691876][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 157.736920][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 157.823826][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.845669][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.858585][ T10] usb 3-1: Product: syz [ 157.862980][ T10] usb 3-1: Manufacturer: syz [ 157.875354][ T10] usb 3-1: SerialNumber: syz [ 157.894022][ T10] usb 3-1: config 0 descriptor?? [ 157.919439][ T6803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.216574][ T6803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.895637][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 160.838127][ T10] usb 3-1: USB disconnect, device number 5 [ 161.341041][ T6861] loop2: detected capacity change from 0 to 7 [ 161.370999][ T6861] Dev loop2: unable to read RDB block 7 [ 161.395565][ T6861] loop2: unable to read partition table [ 161.429699][ T6861] loop2: partition table beyond EOD, truncated [ 161.457535][ T6861] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.576651][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.767033][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 163.786989][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 163.819984][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.840559][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.853294][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 163.865325][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 163.877871][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 163.889113][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.913532][ T10] usb 1-1: config 0 descriptor?? [ 163.925026][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 163.932940][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 163.970271][ T5853] Bluetooth: hci5: urb ffff888023379600 submission failed (90) [ 164.161491][ T10] usb 1-1: USB disconnect, device number 7 [ 165.140641][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'. [ 167.385736][ T5953] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.537521][ T6958] loop2: detected capacity change from 0 to 7 [ 167.560367][ T6958] Dev loop2: unable to read RDB block 7 [ 167.566672][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 167.575877][ T6958] loop2: unable to read partition table [ 167.592575][ T6958] loop2: partition table beyond EOD, truncated [ 167.599758][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 167.608147][ T6958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.647229][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.672959][ T5953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.721651][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 167.785148][ T5953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 167.842788][ T5953] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 167.906398][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.937873][ T5953] usb 1-1: config 0 descriptor?? [ 167.956362][ T5953] hub 1-1:0.0: bad descriptor, ignoring hub [ 167.968112][ T5953] hub 1-1:0.0: probe with driver hub failed with error -5 [ 168.023519][ T5853] Bluetooth: hci5: urb ffff888035923600 submission failed (90) [ 168.236422][ T5953] usb 1-1: USB disconnect, device number 8 [ 170.015777][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 171.431513][ T7020] syzkaller0: entered promiscuous mode [ 171.449783][ T7020] syzkaller0: entered allmulticast mode [ 173.215772][ T5919] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.396631][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 173.412528][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 173.437915][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.448537][ T5953] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.469701][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.495290][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 173.538375][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 173.580931][ T5919] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 173.615953][ T5953] usb 1-1: device descriptor read/64, error -71 [ 173.622446][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.684662][ T5919] usb 2-1: config 0 descriptor?? [ 173.765878][ T5919] hub 2-1:0.0: bad descriptor, ignoring hub [ 173.795770][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.808793][ T5919] hub 2-1:0.0: probe with driver hub failed with error -5 [ 173.913538][ T5853] Bluetooth: hci5: urb ffff88802586fe00 submission failed (90) [ 173.946013][ T5953] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.076629][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 174.093702][ T5919] usb 2-1: USB disconnect, device number 7 [ 174.137178][ T5953] usb 1-1: device descriptor read/64, error -71 [ 174.149109][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 174.223237][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 174.263528][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.283725][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.296760][ T5918] usb 3-1: Product: syz [ 174.301029][ T5918] usb 3-1: Manufacturer: syz [ 174.306327][ T5918] usb 3-1: SerialNumber: syz [ 174.330683][ T5953] usb usb1-port1: attempt power cycle [ 174.358722][ T5918] usb 3-1: config 0 descriptor?? [ 174.407448][ T7043] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 174.706040][ T5953] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.767883][ T5953] usb 1-1: device descriptor read/8, error -71 [ 175.017375][ T5953] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.066911][ T5953] usb 1-1: device descriptor read/8, error -71 [ 175.208259][ T5953] usb usb1-port1: unable to enumerate USB device [ 175.550819][ T7057] syzkaller0: entered promiscuous mode [ 175.570581][ T7057] syzkaller0: entered allmulticast mode [ 176.521272][ T7069] loop3: detected capacity change from 0 to 8 [ 177.449754][ T7071] dlm: plock device version mismatch: kernel (1.2.0), user (1.65536.4194304) [ 177.643568][ T7075] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 178.298447][ T7088] syzkaller0: entered promiscuous mode [ 178.315240][ T7088] syzkaller0: entered allmulticast mode [ 178.704890][ T5918] usb 3-1: USB disconnect, device number 6 [ 178.798721][ T7102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.354'. [ 179.044556][ T7106] dlm: plock device version mismatch: kernel (1.2.0), user (1.65536.4194304) [ 179.874245][ T7126] loop2: detected capacity change from 0 to 7 [ 179.895586][ T6125] Dev loop2: unable to read RDB block 7 [ 179.907981][ T6125] loop2: unable to read partition table [ 179.919409][ T6125] loop2: partition table beyond EOD, truncated [ 179.935587][ T7126] Dev loop2: unable to read RDB block 7 [ 179.951293][ T7126] loop2: unable to read partition table [ 179.969644][ T7126] loop2: partition table beyond EOD, truncated [ 180.006797][ T7126] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.129723][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.366'. [ 180.225662][ T5919] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.417531][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 180.456022][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 180.482224][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 180.519499][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 180.563095][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.601983][ T5919] usb 4-1: Product: syz [ 180.614192][ T5919] usb 4-1: Manufacturer: syz [ 180.619504][ T7137] dlm: plock device version mismatch: kernel (1.2.0), user (1.65536.4194304) [ 180.635309][ T5919] usb 4-1: SerialNumber: syz [ 180.647296][ T5857] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.693180][ T5919] usb 4-1: config 0 descriptor?? [ 180.710028][ T7129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.839094][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 180.880715][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 180.918953][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.958464][ T5857] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.026537][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 181.124722][ T5857] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 181.335985][ T5857] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 181.345900][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.358126][ T5857] usb 3-1: config 0 descriptor?? [ 181.382242][ T5857] hub 3-1:0.0: bad descriptor, ignoring hub [ 181.389665][ T5857] hub 3-1:0.0: probe with driver hub failed with error -5 [ 181.428656][ T5853] Bluetooth: hci5: urb ffff888036596d00 submission failed (90) [ 181.641719][ T10] usb 3-1: USB disconnect, device number 7 [ 182.853091][ T7163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'. [ 183.247889][ T7172] dlm: plock device version mismatch: kernel (1.2.0), user (1.65536.4194304) [ 185.131381][ T5919] usb 4-1: USB disconnect, device number 8 [ 185.332054][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.755530][ T5919] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.965514][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 185.991848][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 186.047293][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.076351][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.107281][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 186.146787][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 186.205629][ T5919] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 186.245155][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.294145][ T7203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.390'. [ 186.331056][ T5919] usb 4-1: config 0 descriptor?? [ 186.354832][ T5919] hub 4-1:0.0: bad descriptor, ignoring hub [ 186.372674][ T5919] hub 4-1:0.0: probe with driver hub failed with error -5 [ 186.429351][ T5853] Bluetooth: hci5: urb ffff888036972000 submission failed (90) [ 186.622729][ T5919] usb 4-1: USB disconnect, device number 9 [ 186.688768][ T7209] dlm: plock device version mismatch: kernel (1.2.0), user (1.65536.0) [ 188.255668][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.453111][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 188.502731][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 188.555284][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 188.607749][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.630917][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.665437][ T5918] usb 3-1: Product: syz [ 188.688358][ T5918] usb 3-1: Manufacturer: syz [ 188.711710][ T5918] usb 3-1: SerialNumber: syz [ 188.750317][ T5918] usb 3-1: config 0 descriptor?? [ 188.770989][ T7226] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.190787][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.403'. [ 191.098523][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 191.310132][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 191.346917][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 191.388261][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.431165][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.486178][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 191.567213][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 191.632785][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 191.645929][ T5857] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.671952][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.725938][ T10] usb 1-1: config 0 descriptor?? [ 191.762917][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 191.792780][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 191.828512][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 191.879053][ T5853] Bluetooth: hci5: urb ffff888026dcc600 submission failed (90) [ 191.935815][ T5857] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 191.991057][ T5857] usb 2-1: config 0 has no interface number 1 [ 192.033055][ T808] usb 1-1: USB disconnect, device number 13 [ 192.118932][ T5857] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 192.171477][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.236167][ T5857] usb 2-1: Product: syz [ 192.259787][ T5857] usb 2-1: Manufacturer: syz [ 192.281027][ T5857] usb 2-1: SerialNumber: syz [ 192.371536][ T5857] usb 2-1: config 0 descriptor?? [ 192.499659][ T5918] usb 3-1: USB disconnect, device number 8 [ 192.602962][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.038182][ T7276] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 193.050323][ T7276] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 193.058887][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) [ 193.068231][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.078328][ T7276] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 193.083487][ T7276] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 45 ef e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 29 ef e4 fe 49 81 3c 24 40 28 09 8c [ 193.103213][ T7276] RSP: 0018:ffffc9000546fa68 EFLAGS: 00010206 [ 193.109407][ T7276] RAX: 0000000000000009 RBX: ffff88802ba3f200 RCX: 0000000000080000 [ 193.117667][ T7276] RDX: ffffc90003dd9000 RSI: 000000000000071c RDI: 000000000000071d [ 193.125683][ T7276] RBP: dffffc0000000000 R08: ffffffff824b05ea R09: ffffffff8e75d6a0 [ 193.134037][ T7276] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 193.142041][ T7276] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802728be80 [ 193.150164][ T7276] FS: 00007fc4887b26c0(0000) GS:ffff888125437000(0000) knlGS:0000000000000000 [ 193.159125][ T7276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.166009][ T7276] CR2: 0000200000003000 CR3: 0000000078972000 CR4: 00000000003526f0 [ 193.174012][ T7276] Call Trace: [ 193.177336][ T7276] [ 193.180303][ T7276] fuse_parse_param+0x69b/0xa80 [ 193.185230][ T7276] ? __pfx_fuse_parse_param+0x10/0x10 [ 193.190645][ T7276] ? static_key_count+0x41/0x70 [ 193.195543][ T7276] vfs_parse_fs_param+0x1a9/0x420 [ 193.200649][ T7276] vfs_parse_monolithic_sep+0x283/0x360 [ 193.206227][ T7276] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 193.211987][ T7276] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 193.218186][ T7276] ? alloc_fs_context+0x9e9/0xd50 [ 193.223281][ T7276] do_new_mount+0x304/0xd30 [ 193.228056][ T7276] ? apparmor_capable+0x126/0x170 [ 193.233134][ T7276] ? security_capable+0x7e/0x2c0 [ 193.238189][ T7276] ? __pfx_do_new_mount+0x10/0x10 [ 193.243250][ T7276] ? ns_capable+0x89/0xe0 [ 193.247723][ T7276] ? path_mount+0x690/0x10e0 [ 193.252526][ T7276] ? user_path_at+0xd4/0x160 [ 193.257172][ T7276] __se_sys_mount+0x31d/0x420 [ 193.261881][ T7276] ? __pfx___se_sys_mount+0x10/0x10 [ 193.267151][ T7276] ? __x64_sys_mount+0x20/0xc0 [ 193.271943][ T7276] do_syscall_64+0x14d/0xf80 [ 193.276553][ T7276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.282661][ T7276] ? clear_bhb_loop+0x40/0x90 [ 193.287458][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.293381][ T7276] RIP: 0033:0x7fc48799c799 [ 193.297832][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.317654][ T7276] RSP: 002b:00007fc4887b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.327321][ T7276] RAX: ffffffffffffffda RBX: 00007fc487c15fa0 RCX: 00007fc48799c799 [ 193.335791][ T7276] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 193.343898][ T7276] RBP: 00007fc487a32c99 R08: 0000200000002140 R09: 0000000000000000 [ 193.351921][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.359921][ T7276] R13: 00007fc487c16038 R14: 00007fc487c15fa0 R15: 00007ffe415438a8 [ 193.367929][ T7276] [ 193.370968][ T7276] Modules linked in: [ 193.376187][ T7276] ---[ end trace 0000000000000000 ]--- [ 193.439662][ T7276] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 193.447576][ T7276] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 45 ef e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 29 ef e4 fe 49 81 3c 24 40 28 09 8c [ 193.468040][ T7276] RSP: 0018:ffffc9000546fa68 EFLAGS: 00010206 [ 193.474411][ T7276] RAX: 0000000000000009 RBX: ffff88802ba3f200 RCX: 0000000000080000 [ 193.483457][ T7276] RDX: ffffc90003dd9000 RSI: 000000000000071c RDI: 000000000000071d [ 193.494174][ T7276] RBP: dffffc0000000000 R08: ffffffff824b05ea R09: ffffffff8e75d6a0 [ 193.528606][ T7276] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 193.538005][ T7276] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802728be80 [ 193.612548][ T7276] FS: 00007fc4887b26c0(0000) GS:ffff888125437000(0000) knlGS:0000000000000000 [ 193.625262][ T7276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.633447][ T7276] CR2: 00007f330ffe92f8 CR3: 0000000078972000 CR4: 00000000003526f0 [ 193.642799][ T7276] Kernel panic - not syncing: Fatal exception [ 193.649541][ T7276] Kernel Offset: disabled [ 193.653891][ T7276] Rebooting in 86400 seconds..