last executing test programs: 21m4.511174837s ago: executing program 1 (id=2): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1, 0x8, [0x9, 0x7ff, 0x3, 0x3, 0x13, 0x9, 0x8, 0x8]}, 0x18) 21m3.423340477s ago: executing program 1 (id=6): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x3, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 20m57.324809664s ago: executing program 1 (id=11): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="63a5288eeb325463e98da756382a02af2a167a7a3379cb2a15ced671a55f0937e13788669b74de5f54931ccf95dd8cd4f331aec8055d8776847fa3118a6df1d9952dec66200279746a80ab1f27640f5b5fdc870ab71bd8a921d4e535abe016228be823a68c0304a55660f96adfb7c5a304b35e12ccd7ebac6082d244a7a8acf63d9ddcf50294e371236a8241df1508004ffc6b9eec0c082bf5a4", 0x9a}, {&(0x7f00000003c0)="1a638e9c1b931562dad02382add1b654bd03527a4841e7d587f57fb0878255fae01a651b7503000db7997b3b51ebf5663e3a7829973e96ae2c97d789313400f9a1a93a4b7615fd4cf9440ca6eef8a32d89e58f80438e4eb315aaa114a96ac1c1e05b00ca2fdde6235f8be73fb5b426f8cd837ab0ec7642eb26555ee7f0389f477c0f1774d15e25a7cb87a4a983", 0x8d}, {&(0x7f0000001980)="59bc2eabc8755230f8a74c7a6390868dc23b6c75a784025bf3bec62450315c43386d71c04edcc310466ad9248132049665d9c14c1d27e38731ba19ecea43091fc314a98d83714297ffd388bc2b589a3e887893fee351e603fba78817d8d37728070bfd1a53d49d2f50591893f14bc3565fa3bd18ab17ecc5f75213b49558b6864472a0694a08e0d2485498a8234970ab3e203604166a3895883631d15b97f1f7f66cacf6e5d997a907fe8bb97d24059b86769cb635006f19d629008bd4f8404642663132c7baaa184527a602f1ecd9989621d7420c97aa8ad3c54a7bb9bc081252d1ce67", 0xe4}, {0x0}], 0x4}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5999ca2af345f8b3d228584972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x1}]) 20m51.870335047s ago: executing program 1 (id=17): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2", 0xa1}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb196a2c508e3", 0x166}, {&(0x7f0000000d00)="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", 0x174}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1b", 0xc0}, {&(0x7f0000000400)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f07", 0x27}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 20m51.377912214s ago: executing program 1 (id=21): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 20m37.277060404s ago: executing program 2 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) 20m35.47982769s ago: executing program 32 (id=21): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 20m35.435297835s ago: executing program 2 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x2000c0c4) 20m34.366413338s ago: executing program 2 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x100, 0x1, 0xfc}, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x80, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x789}], 0x1, 0x2000, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) 20m32.875439354s ago: executing program 2 (id=43): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 20m32.220784582s ago: executing program 2 (id=45): socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x100000000000017, &(0x7f0000000000)={0x8000000000000001, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r3, 0x703, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = dup(r4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) 20m30.041580036s ago: executing program 2 (id=46): socket(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) 20m14.727781022s ago: executing program 33 (id=46): socket(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) 20m6.513723412s ago: executing program 3 (id=76): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0xfd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20m5.227942633s ago: executing program 3 (id=79): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, 0x0, &(0x7f0000000180)) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 20m2.082849318s ago: executing program 3 (id=82): creat(&(0x7f0000000080)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 19m53.49602433s ago: executing program 3 (id=84): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) 19m43.73726208s ago: executing program 3 (id=90): r0 = socket(0x2, 0x80805, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x0, {0x0, r1}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0x4}}]}, {0x4}, {0x33, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x200008d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000800)=""/132, 0x84}], 0x1, 0x2, 0xca) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d63, 0x3}}, 0x44) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r6, 0x0, 0x0, 0x0) 19m40.462588742s ago: executing program 3 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x100, 0x1, 0xfc}, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x80, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x789}], 0x1, 0x2000, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) 19m25.346181378s ago: executing program 34 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x100, 0x1, 0xfc}, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x80, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x789}], 0x1, 0x2000, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) 17m5.956570458s ago: executing program 0 (id=191): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) socket$caif_stream(0x25, 0x1, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x80, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x1, 0x1ff, 0x7fffffff}, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 17m5.682682662s ago: executing program 0 (id=193): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 17m3.180041927s ago: executing program 0 (id=194): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) 16m57.668087386s ago: executing program 0 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000180)={0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) lseek(r4, 0x1, 0x1) writev(r4, &(0x7f0000000240)=[{0x0}, {&(0x7f00000003c0)="543dbf774f46eb7c9d4c45610d4ed164ed0bb635311f952cef66d7a4d254107cdc2fbd669f340837d7efcc70d90b1bf34924b72399a046649e", 0x39}, {&(0x7f0000000500)}, {&(0x7f0000000580)="1d3015520d3a8a9ea1e4b23a11685917e8db4d2906d195beb905e03b284ad66c5ac3aaf24b6ec8ed4f1d06bd7976e93de58007302f2220454d3907db6523aed966c87c8777a634ba34ace14a68f80c93365e78ee781581ae892531de7ebefa62253a5c6c487f0b15cdc03024fec659cca89a777bf18e39546f88bd934fcb0b439fab98a93534e4e6d6424b10028850f93fb9460ccb5b54f027212de6aa8fcd1a2f299dcf867f56a9", 0xa8}], 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) ftruncate(r5, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 16m47.390902129s ago: executing program 0 (id=202): r0 = socket(0x2, 0x80805, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x0, {0x0, r1}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0x4}}]}, {0x4}, {0x33, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x200008d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000800)=""/132, 0x84}], 0x1, 0x2, 0xca) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d63, 0x3}}, 0x44) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r6, 0x0, 0x0, 0x0) 16m45.787941465s ago: executing program 0 (id=204): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 16m29.733900166s ago: executing program 35 (id=204): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 9.893846962s ago: executing program 5 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 9.282469984s ago: executing program 5 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 9.281855468s ago: executing program 4 (id=1373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) syz_emit_ethernet(0x96, &(0x7f0000000500)={@multicast, @random="aa08a9d9da08", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x97, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0xc2, 0x0, 0x0, 0xfffe, {[@window={0x3, 0x0, 0x15}, @window={0x3, 0x3}, @mss={0x1e, 0x4, 0x64}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x9, 0xf989, "b43eb61a1a"}]}}}}}}}}, 0x0) 9.104133061s ago: executing program 5 (id=1374): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.90131229s ago: executing program 4 (id=1375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 8.751564943s ago: executing program 5 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 8.697408486s ago: executing program 4 (id=1377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddd}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.511220623s ago: executing program 8 (id=1378): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x1, 0x100, 0x0, {0x4, 0x300, 0x0, 0x800002fc}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x1, @win={{0xd, 0x4, 0x8, 0x5}, 0x2, 0x1000000, 0x0, 0xc3, 0x0, 0x1}}) 7.923543592s ago: executing program 5 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000088, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) 7.85440349s ago: executing program 8 (id=1381): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x92, &(0x7f0000000300)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2}, {[@ssrr={0x89, 0x7, 0x7c, [@empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1e, 0x1, [{0x0, 0x6, "f357c772"}, {0x5, 0x2}, {0x5, 0xc, "e38fac6be956aee7742a"}, {0x1, 0x4, "b13f"}]}, @generic={0x88, 0x3, "e6"}, @lsrr={0x83, 0x7, 0x86, [@multicast2]}, @ssrr={0x89, 0x7, 0x7c, [@empty]}, @ssrr={0x89, 0x27, 0xaf, [@private=0xa010101, @broadcast, @remote, @private=0xa010102, @multicast2, @multicast1, @empty, @empty, @empty]}, @generic={0x94, 0x4, "1f64"}]}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 6.695742608s ago: executing program 5 (id=1382): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0, 0x0, 0x8, 0x0, 0x1}]) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 6.464214224s ago: executing program 8 (id=1385): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair(0x1d, 0x80000, 0x1ff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 5.592641909s ago: executing program 6 (id=1388): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000003c06000000000000af08000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe88d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.454067825s ago: executing program 7 (id=1389): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff013200"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.846169183s ago: executing program 6 (id=1390): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {&(0x7f0000000640)={0x1114, 0x10, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x42, 0x45, 0x0, 0x1, [@nested={0x4, 0xb3}, @generic="601a2058a5194c6b50280229dfeb", @typed={0x21, 0x14e, 0x0, 0x0, @binary="b9eb08a0e7b3ebc4b2c9fac09b405bd45940a6d4d713efca1da0c8ea91"}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x10ae, 0x149, 0x0, 0x1, [@typed={0x5, 0x70, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x4e}, @generic="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", @generic="a8e48ef1fbe2d0edebcc658df468467ebbe1cd4299da4dff44a5cfba808b3462860cc159c10cab3712ca179eeff2a6875c1c8ba5ddac76b0948b716c50c4878f36e04e7b088b89a74538ab220a845dd2901a5892fac1b44f77866e9ce191ef92cf793eaf1fa9652c98f43745e8ffa9b691327da1f5be8e9f5dc324726fd04024f4285e11ff0c555d66323043da33350cdeb211e3b7cd7488a2e236174fda"]}, @typed={0x8, 0x146, 0x0, 0x0, @u32=0x10}]}, 0x1114}, {&(0x7f0000000200)={0x1a0, 0x2e, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xa6, 0x0, 0x0, @pid}, @nested={0x26, 0x134, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="550318d176d38f13a45767dfee36960788adbdaa18e98eebcc3043635e31"]}, @generic="e7285a1651b732a438db60ec1166ef95616d7543912150de4b06799720f35b33696351983bfab13f02e2b3ff5c878fb966bbaf41431a5c61019dd1d0a1d531ee78af12dc0e9d7c", @typed={0x4, 0xab}, @nested={0x43, 0xc8, 0x0, 0x1, [@generic="8d7252126dc04907a7c74de4ffeb4303594974dc65517fbfec8b2f521d7cbe15a9329e6e3764df99cb3ad1848b060182609f2642ad214ab4492253c49b905c"]}, @generic="4ace67555de9e2722d06c901dd173f1c9807c97ed52830e836ebf9e376faea3423ff1a052d8b27584865a9784b5875167ba0ec8d865ee0077491f5b9eb6edf2ff7550a6505e3021a7e4e47f3c3622d0c179491a733750955bdc02979a73473f2", @generic="ae5781de58fce9db3319ae5477da49ce0ae3073fa03a27ad9b989a32d6f7e8b63d06de83da110e8e37fd2d337af4ce8d018ead88885c031dbf1c4aaaaf7680c9f8a925dcd44570885e094ac23b26abe88c371b7af2094a5effb485413d861a2abfd569", @typed={0xc, 0xc0, 0x0, 0x0, @u64=0x9}]}, 0x1a0}], 0x3}, 0x10) 4.527867662s ago: executing program 6 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 4.439013541s ago: executing program 6 (id=1392): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009", @ANYRESDEC], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.151492377s ago: executing program 4 (id=1393): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) 4.020768327s ago: executing program 7 (id=1394): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 3.219881749s ago: executing program 7 (id=1395): openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 3.013432018s ago: executing program 8 (id=1396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffe3e) 2.95698383s ago: executing program 4 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x90, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x30, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x24000080) 1.845389756s ago: executing program 7 (id=1398): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 1.843047099s ago: executing program 6 (id=1399): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0xa, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf64, 0x1f480, 0x0, 0xb2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1.747848249s ago: executing program 4 (id=1400): syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x19c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_EMATCHES={0x168, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6be}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xb, 0x4, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2}, {0xf7c6, 0x6, 0x9, 0x2, 0xc, 0x0, 0x2}}}, @TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9, 0x1}, {0x2, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x408}, {0x4, 0x9, 0x1, "be8b950e0afcc71cf8"}}}, @TCF_EM_IPT={0x88, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x72, 0x5, "840d459b5f0d1b2299b348d2f204363c3c17e37f860dfcb47d5d7db47ae0273c4a0d562554dc56d04dbe41caf7139c198e38c40ff4662726df6c5419bb5e8b4e20e8d164aada533e8c4c1e4a8f1489400e5977d13e4e646d5805fef86b687c76d0da75f3f50628de763846dfaedb"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1.613969108s ago: executing program 7 (id=1401): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {&(0x7f0000000640)={0x1114, 0x10, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x42, 0x45, 0x0, 0x1, [@nested={0x4, 0xb3}, @generic="601a2058a5194c6b50280229dfeb", @typed={0x21, 0x14e, 0x0, 0x0, @binary="b9eb08a0e7b3ebc4b2c9fac09b405bd45940a6d4d713efca1da0c8ea91"}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x10ae, 0x149, 0x0, 0x1, [@typed={0x5, 0x70, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x4e}, @generic="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", @generic="a8e48ef1fbe2d0edebcc658df468467ebbe1cd4299da4dff44a5cfba808b3462860cc159c10cab3712ca179eeff2a6875c1c8ba5ddac76b0948b716c50c4878f36e04e7b088b89a74538ab220a845dd2901a5892fac1b44f77866e9ce191ef92cf793eaf1fa9652c98f43745e8ffa9b691327da1f5be8e9f5dc324726fd04024f4285e11ff0c555d66323043da33350cdeb211e3b7cd7488a2e236174fda"]}, @typed={0x8, 0x146, 0x0, 0x0, @u32=0x10}]}, 0x1114}, {&(0x7f0000000200)={0x1a0, 0x2e, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xa6, 0x0, 0x0, @pid}, @nested={0x26, 0x134, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="550318d176d38f13a45767dfee36960788adbdaa18e98eebcc3043635e31"]}, @generic="e7285a1651b732a438db60ec1166ef95616d7543912150de4b06799720f35b33696351983bfab13f02e2b3ff5c878fb966bbaf41431a5c61019dd1d0a1d531ee78af12dc0e9d7c", @typed={0x4, 0xab}, @nested={0x43, 0xc8, 0x0, 0x1, [@generic="8d7252126dc04907a7c74de4ffeb4303594974dc65517fbfec8b2f521d7cbe15a9329e6e3764df99cb3ad1848b060182609f2642ad214ab4492253c49b905c"]}, @generic="4ace67555de9e2722d06c901dd173f1c9807c97ed52830e836ebf9e376faea3423ff1a052d8b27584865a9784b5875167ba0ec8d865ee0077491f5b9eb6edf2ff7550a6505e3021a7e4e47f3c3622d0c179491a733750955bdc02979a73473f2", @generic="ae5781de58fce9db3319ae5477da49ce0ae3073fa03a27ad9b989a32d6f7e8b63d06de83da110e8e37fd2d337af4ce8d018ead88885c031dbf1c4aaaaf7680c9f8a925dcd44570885e094ac23b26abe88c371b7af2094a5effb485413d861a2abfd569", @typed={0xc, 0xc0, 0x0, 0x0, @u64=0x9}]}, 0x1a0}], 0x3}, 0x10) 1.60013495s ago: executing program 8 (id=1402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 626.342202ms ago: executing program 6 (id=1403): syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x19c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x16c, 0x2, [@TCA_FLOW_EMATCHES={0x168, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6be}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xb, 0x4, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2}, {0xf7c6, 0x6, 0x9, 0x2, 0xc, 0x0, 0x2}}}, @TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9, 0x1}, {0x2, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x408}, {0x4, 0x9, 0x1, "be8b950e0afcc71cf8"}}}, @TCF_EM_IPT={0x88, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x72, 0x5, "840d459b5f0d1b2299b348d2f204363c3c17e37f860dfcb47d5d7db47ae0273c4a0d562554dc56d04dbe41caf7139c198e38c40ff4662726df6c5419bb5e8b4e20e8d164aada533e8c4c1e4a8f1489400e5977d13e4e646d5805fef86b687c76d0da75f3f50628de763846dfaedb"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 116.933778ms ago: executing program 7 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 8 (id=1405): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) kernel console output (not intermixed with test programs): 83] geneve2: entered promiscuous mode [ 1078.187157][T11083] geneve2: entered allmulticast mode [ 1078.300488][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.300722][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.300966][T11042] bridge_slave_0: entered allmulticast mode [ 1078.304044][T11042] bridge_slave_0: entered promiscuous mode [ 1078.507287][T10951] Bluetooth: hci1: command tx timeout [ 1080.108953][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.109104][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.109342][T11042] bridge_slave_1: entered allmulticast mode [ 1080.116905][T11042] bridge_slave_1: entered promiscuous mode [ 1080.577075][T10951] Bluetooth: hci1: command tx timeout [ 1080.788614][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.878376][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.484676][T11042] team0: Port device team_slave_0 added [ 1081.640060][T11042] team0: Port device team_slave_1 added [ 1081.783022][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.783043][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.783063][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.786052][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.786067][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.786086][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.436928][ T9030] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1082.627162][ T9030] usb 8-1: Using ep0 maxpacket: 8 [ 1082.630922][ T9030] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1082.630950][ T9030] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1082.630971][ T9030] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.630991][ T9030] usb 8-1: config 0 has no interface number 0 [ 1082.631047][ T9030] usb 8-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1082.634007][ T9030] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1082.634035][ T9030] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1082.634056][ T9030] usb 8-1: Product: syz [ 1082.659460][ T9030] usb 8-1: config 0 descriptor?? [ 1082.764644][T11042] hsr_slave_0: entered promiscuous mode [ 1082.788876][T11042] hsr_slave_1: entered promiscuous mode [ 1082.794668][T11042] debugfs: 'hsr0' already exists in 'hsr' [ 1082.794700][T11042] Cannot create hsr debugfs directory [ 1083.019258][ T9030] usb 8-1: USB disconnect, device number 28 [ 1083.139119][ T58] bridge_slave_1: left allmulticast mode [ 1083.139153][ T58] bridge_slave_1: left promiscuous mode [ 1083.139445][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.230099][ T58] bridge_slave_0: left allmulticast mode [ 1083.230130][ T58] bridge_slave_0: left promiscuous mode [ 1083.230424][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.805405][ T58] bridge_slave_1: left allmulticast mode [ 1083.805429][ T58] bridge_slave_1: left promiscuous mode [ 1083.805596][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.303521][ T58] bridge_slave_0: left allmulticast mode [ 1084.303545][ T58] bridge_slave_0: left promiscuous mode [ 1084.303722][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.013316][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.067417][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.141162][ T58] bond0 (unregistering): Released all slaves [ 1087.637412][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.717587][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.780056][ T58] bond0 (unregistering): Released all slaves [ 1088.047000][T11141] geneve2: entered promiscuous mode [ 1088.047022][T11141] geneve2: entered allmulticast mode [ 1088.556695][ T6208] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1088.572503][ T58] hsr_slave_0: left promiscuous mode [ 1088.608403][ T58] hsr_slave_1: left promiscuous mode [ 1088.609975][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.630075][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.723256][ T6208] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1088.723279][ T6208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.723291][ T6208] usb 5-1: Product: syz [ 1088.723299][ T6208] usb 5-1: Manufacturer: syz [ 1088.723308][ T6208] usb 5-1: SerialNumber: syz [ 1088.820867][ T58] hsr_slave_0: left promiscuous mode [ 1088.856916][ T58] hsr_slave_1: left promiscuous mode [ 1088.859197][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.889045][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.219345][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1089.219415][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1089.646755][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1089.646820][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1089.689413][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1089.729442][ T6208] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1089.763689][ T6208] usb 5-1: USB disconnect, device number 39 [ 1090.872111][T11171] ufs: You didn't specify the type of your ufs filesystem [ 1090.872111][T11171] [ 1090.872111][T11171] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1090.872111][T11171] [ 1090.872111][T11171] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1090.872495][T11171] ufs: ufstype=old is supported read-only [ 1090.893127][T11171] ufs: ufs_fill_super(): bad magic number [ 1092.147543][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1092.413332][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1097.107315][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1097.772269][T11208] netlink: 220 bytes leftover after parsing attributes in process `syz.4.878'. [ 1097.783520][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1101.221346][T11226] netlink: 220 bytes leftover after parsing attributes in process `syz.4.883'. [ 1107.495087][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.518604][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.521919][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.523514][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.524996][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.527570][ T6208] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1107.707685][ T6208] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1107.707720][ T6208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.707741][ T6208] usb 5-1: Product: syz [ 1107.707756][ T6208] usb 5-1: Manufacturer: syz [ 1107.707771][ T6208] usb 5-1: SerialNumber: syz [ 1108.351410][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1108.351484][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1108.990823][ T58] bridge_slave_1: left allmulticast mode [ 1108.990854][ T58] bridge_slave_1: left promiscuous mode [ 1108.991224][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.080877][ T58] bridge_slave_0: left allmulticast mode [ 1109.081151][ T58] bridge_slave_0: left promiscuous mode [ 1109.081718][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.101811][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1109.101854][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1109.102409][ T6208] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1109.169716][ T6208] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1109.190319][ T6208] usb 5-1: USB disconnect, device number 40 [ 1109.616804][T10951] Bluetooth: hci0: command tx timeout [ 1110.452023][ T6208] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1110.677035][ T6208] usb 5-1: Using ep0 maxpacket: 32 [ 1110.767096][ T6208] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1110.767164][ T6208] usb 5-1: config 0 has no interface number 0 [ 1110.767357][ T6208] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1110.917820][ T6208] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1110.917853][ T6208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.917875][ T6208] usb 5-1: Product: syz [ 1110.917890][ T6208] usb 5-1: Manufacturer: syz [ 1110.917905][ T6208] usb 5-1: SerialNumber: syz [ 1110.955691][ T6208] usb 5-1: config 0 descriptor?? [ 1111.004126][T11282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1111.330990][T11282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1111.536356][ T6208] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1111.547509][ T6208] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1111.657338][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.696831][T10951] Bluetooth: hci0: command tx timeout [ 1111.743413][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.808649][ T58] bond0 (unregistering): Released all slaves [ 1112.326791][ T58] hsr_slave_0: left promiscuous mode [ 1112.366871][ T58] hsr_slave_1: left promiscuous mode [ 1112.367575][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.390212][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.114537][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1114.316686][T10951] Bluetooth: hci0: command tx timeout [ 1114.359935][ T807] usb 5-1: USB disconnect, device number 41 [ 1114.508432][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.511476][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.512816][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.514696][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.515472][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.580337][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1114.770190][T11298] netlink: 220 bytes leftover after parsing attributes in process `syz.7.891'. [ 1116.126078][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.126156][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.336972][ T5811] Bluetooth: hci0: command tx timeout [ 1116.602464][ T5811] Bluetooth: hci5: command tx timeout [ 1116.676689][ T5783] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1116.864666][ T5783] usb 8-1: Using ep0 maxpacket: 8 [ 1116.874821][ T5783] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1116.874841][ T5783] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1116.874862][ T5783] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.874872][ T5783] usb 8-1: config 0 has no interface number 0 [ 1116.874900][ T5783] usb 8-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1116.876114][ T5783] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1116.876131][ T5783] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1116.876143][ T5783] usb 8-1: Product: syz [ 1116.885182][T11042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1116.971698][ T5783] usb 8-1: config 0 descriptor?? [ 1117.112691][T11042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1117.212059][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1117.257136][ T5783] usb 8-1: USB disconnect, device number 29 [ 1117.740451][T11042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1118.530196][T11042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1118.666790][ T5811] Bluetooth: hci5: command tx timeout [ 1118.797164][ T6208] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1118.959061][ T6208] usb 8-1: device descriptor read/64, error -71 [ 1119.320011][ T6208] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1119.466900][ T6208] usb 8-1: device descriptor read/64, error -71 [ 1119.578330][ T6208] usb usb8-port1: attempt power cycle [ 1120.129286][ T6208] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1120.193060][ T6208] usb 8-1: device descriptor read/8, error -71 [ 1120.456751][ T6208] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1120.477641][ T6208] usb 8-1: device descriptor read/8, error -71 [ 1120.524669][T11270] chnl_net:caif_netlink_parms(): no params data found [ 1120.583099][T11294] chnl_net:caif_netlink_parms(): no params data found [ 1120.594132][ T6208] usb usb8-port1: unable to enumerate USB device [ 1120.737846][ T5811] Bluetooth: hci5: command tx timeout [ 1120.884632][T11332] netlink: 220 bytes leftover after parsing attributes in process `syz.4.896'. [ 1121.250813][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.250951][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.251097][T11270] bridge_slave_0: entered allmulticast mode [ 1121.253499][T11270] bridge_slave_0: entered promiscuous mode [ 1121.382085][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.382206][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.382375][T11270] bridge_slave_1: entered allmulticast mode [ 1121.384793][T11270] bridge_slave_1: entered promiscuous mode [ 1121.414680][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.414766][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.414918][T11294] bridge_slave_0: entered allmulticast mode [ 1121.439526][T11294] bridge_slave_0: entered promiscuous mode [ 1121.501244][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.501321][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.501462][T11294] bridge_slave_1: entered allmulticast mode [ 1121.502967][T11294] bridge_slave_1: entered promiscuous mode [ 1122.831096][ T5811] Bluetooth: hci5: command tx timeout [ 1122.873737][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.964077][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.971162][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.626229][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.800165][T11270] team0: Port device team_slave_0 added [ 1123.865449][T11270] team0: Port device team_slave_1 added [ 1123.886797][T11294] team0: Port device team_slave_0 added [ 1123.890935][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.969553][T11294] team0: Port device team_slave_1 added [ 1124.078341][T11351] netlink: 220 bytes leftover after parsing attributes in process `syz.4.900'. [ 1124.299134][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.299148][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.299164][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.303707][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.303726][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.304252][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.310355][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.310372][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.310397][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.639100][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.639115][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.639132][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.017983][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.452112][T11294] hsr_slave_0: entered promiscuous mode [ 1125.453716][T11294] hsr_slave_1: entered promiscuous mode [ 1125.454777][T11294] debugfs: 'hsr0' already exists in 'hsr' [ 1125.454803][T11294] Cannot create hsr debugfs directory [ 1125.689014][T11270] hsr_slave_0: entered promiscuous mode [ 1125.709408][T11270] hsr_slave_1: entered promiscuous mode [ 1125.726466][T11270] debugfs: 'hsr0' already exists in 'hsr' [ 1125.727920][T11270] Cannot create hsr debugfs directory [ 1127.692253][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.692451][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.563787][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 1130.882704][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.882851][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.720210][T10951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1132.736365][T10951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1132.753042][T10951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1132.754344][T10951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1132.755513][T10951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1134.816785][T10951] Bluetooth: hci1: command tx timeout [ 1136.896751][T10951] Bluetooth: hci1: command tx timeout [ 1136.971218][ T58] bridge_slave_1: left allmulticast mode [ 1136.971249][ T58] bridge_slave_1: left promiscuous mode [ 1136.971520][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.020550][T11390] 9pnet_fd: Insufficient options for proto=fd [ 1137.053938][ T58] bridge_slave_0: left allmulticast mode [ 1137.053973][ T58] bridge_slave_0: left promiscuous mode [ 1137.054268][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.103859][ T58] bridge_slave_1: left allmulticast mode [ 1137.103896][ T58] bridge_slave_1: left promiscuous mode [ 1137.104171][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.178467][ T58] bridge_slave_0: left allmulticast mode [ 1137.178499][ T58] bridge_slave_0: left promiscuous mode [ 1137.178781][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.426624][T11395] netlink: 220 bytes leftover after parsing attributes in process `syz.7.909'. [ 1137.657408][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.757584][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.820825][ T58] bond0 (unregistering): Released all slaves [ 1138.297731][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.457435][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.541160][ T58] bond0 (unregistering): Released all slaves [ 1138.976759][T10951] Bluetooth: hci1: command tx timeout [ 1139.535622][T11414] netlink: 220 bytes leftover after parsing attributes in process `syz.4.913'. [ 1140.745017][ T58] hsr_slave_0: left promiscuous mode [ 1140.852292][ T58] hsr_slave_1: left promiscuous mode [ 1140.956318][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.000156][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.057071][T10951] Bluetooth: hci1: command tx timeout [ 1141.762440][ T58] hsr_slave_0: left promiscuous mode [ 1141.817331][ T58] hsr_slave_1: left promiscuous mode [ 1141.820442][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.954840][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.465581][T11433] 9p: Bad value for 'rfdno' [ 1146.694585][T11459] netlink: 220 bytes leftover after parsing attributes in process `syz.4.921'. [ 1146.707631][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1146.997341][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1150.437262][T11478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'. [ 1153.786746][ T7702] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1153.916813][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1153.936666][ T7702] usb 8-1: Using ep0 maxpacket: 32 [ 1153.941998][ T7702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.942034][ T7702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.942076][ T7702] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1153.942101][ T7702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.956756][ T7702] usb 8-1: config 0 descriptor?? [ 1154.168014][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1154.404993][ T7702] usbhid 8-1:0.0: can't add hid device: -32 [ 1154.405130][ T7702] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1154.860144][T11495] netlink: 220 bytes leftover after parsing attributes in process `syz.4.930'. [ 1155.556167][T11382] chnl_net:caif_netlink_parms(): no params data found [ 1156.133390][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.153645][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.153959][T11382] bridge_slave_0: entered allmulticast mode [ 1156.183492][T11382] bridge_slave_0: entered promiscuous mode [ 1156.231489][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.231718][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.231975][T11382] bridge_slave_1: entered allmulticast mode [ 1156.272161][T11382] bridge_slave_1: entered promiscuous mode [ 1156.603875][ T7702] usb 8-1: USB disconnect, device number 34 [ 1156.616388][T11502] 9pnet_fd: Insufficient options for proto=fd [ 1156.674597][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.681372][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.401745][T11382] team0: Port device team_slave_0 added [ 1157.409919][T11382] team0: Port device team_slave_1 added [ 1159.170877][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.170894][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.170919][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.266488][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.266508][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.271974][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.276171][T11294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1159.585564][T11294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1159.743932][T11294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1160.663447][T11294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1162.386315][T11382] hsr_slave_0: entered promiscuous mode [ 1162.424940][T11382] hsr_slave_1: entered promiscuous mode [ 1162.438174][T11382] debugfs: 'hsr0' already exists in 'hsr' [ 1162.438206][T11382] Cannot create hsr debugfs directory [ 1162.625605][T11270] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1162.821613][T11270] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1162.895642][T11270] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1163.185687][T11270] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1164.655215][T11561] 9pnet_fd: Insufficient options for proto=fd [ 1168.376164][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.522475][T11294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.596853][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.597013][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.667630][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.667767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.864058][ T58] bridge_slave_1: left allmulticast mode [ 1168.864094][ T58] bridge_slave_1: left promiscuous mode [ 1168.864522][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.939445][ T58] bridge_slave_0: left allmulticast mode [ 1168.939468][ T58] bridge_slave_0: left promiscuous mode [ 1168.939642][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.713834][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1169.737530][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1169.739106][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1169.740867][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1169.741769][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1169.968594][ T6208] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1170.157140][ T6208] usb 8-1: Using ep0 maxpacket: 32 [ 1170.164453][ T6208] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.164491][ T6208] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.164534][ T6208] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1170.164559][ T6208] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.171284][ T6208] usb 8-1: config 0 descriptor?? [ 1170.707885][ T6208] usbhid 8-1:0.0: can't add hid device: -32 [ 1170.708026][ T6208] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1171.324025][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.441055][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.678692][ T58] bond0 (unregistering): Released all slaves [ 1171.798333][T11595] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.798375][T11595] binder: 11592:11595 ioctl 4018620d 200000004a80 returned -16 [ 1172.673856][ T5811] Bluetooth: hci0: command tx timeout [ 1172.750260][ T5881] usb 8-1: USB disconnect, device number 35 [ 1173.307067][ T5881] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1173.497265][ T5881] usb 8-1: Using ep0 maxpacket: 8 [ 1173.715723][ T5881] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 1173.715811][ T5881] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 1173.716000][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.716051][ T5881] usb 8-1: config 0 has no interface number 0 [ 1173.764194][ T5881] usb 8-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1174.277596][ T5881] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1174.277630][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1174.277650][ T5881] usb 8-1: Product: syz [ 1174.311019][ T5881] usb 8-1: config 0 descriptor?? [ 1174.538216][ T58] hsr_slave_0: left promiscuous mode [ 1174.576855][ T58] hsr_slave_1: left promiscuous mode [ 1174.577560][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.607799][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.736860][ T5811] Bluetooth: hci0: command tx timeout [ 1175.407744][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1175.568757][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1175.976746][ T6208] usb 8-1: USB disconnect, device number 36 [ 1176.438826][T10951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1176.457906][T10951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1176.460722][T10951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1176.480528][T10951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1176.482074][T10951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1176.832694][ T5811] Bluetooth: hci0: command tx timeout [ 1177.660275][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.660870][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.031942][T11625] binder: 11624:11625 ioctl c0306201 0 returned -14 [ 1178.033009][T11625] binder: 11624:11625 ioctl c0306201 200000000300 returned -11 [ 1179.386674][T10951] Bluetooth: hci0: command tx timeout [ 1179.386780][ T5811] Bluetooth: hci2: command tx timeout [ 1180.476884][T11634] 9p: Bad value for 'rfdno' [ 1181.575010][ T5811] Bluetooth: hci2: command tx timeout [ 1182.772645][T11640] netlink: 220 bytes leftover after parsing attributes in process `syz.7.959'. [ 1183.697010][ T5811] Bluetooth: hci2: command tx timeout [ 1184.059167][T11655] netlink: 220 bytes leftover after parsing attributes in process `syz.7.962'. [ 1185.776669][ T5811] Bluetooth: hci2: command tx timeout [ 1187.341408][T11669] binder: BINDER_SET_CONTEXT_MGR already set [ 1187.341427][T11669] binder: 11665:11669 ioctl 4018620d 200000004a80 returned -16 [ 1188.413970][T11382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1193.490435][T11382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1193.635331][T11579] chnl_net:caif_netlink_parms(): no params data found [ 1193.960424][T11616] chnl_net:caif_netlink_parms(): no params data found [ 1194.793019][T11579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.793462][T11579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.793671][T11579] bridge_slave_0: entered allmulticast mode [ 1194.795563][T11579] bridge_slave_0: entered promiscuous mode [ 1194.840555][T11579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.840689][T11579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.840828][T11579] bridge_slave_1: entered allmulticast mode [ 1194.842407][T11579] bridge_slave_1: entered promiscuous mode [ 1195.046320][T11616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.046447][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.063114][T11616] bridge_slave_0: entered allmulticast mode [ 1195.074262][T11616] bridge_slave_0: entered promiscuous mode [ 1195.088413][T11579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.089974][T11616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.090074][T11616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.090196][T11616] bridge_slave_1: entered allmulticast mode [ 1195.091743][T11616] bridge_slave_1: entered promiscuous mode [ 1195.987015][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1196.383975][T10951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1196.402021][T10951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1196.405849][T10951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1196.408313][T10951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.409065][T10951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.449345][ T10] usb 5-1: no configurations [ 1196.449366][ T10] usb 5-1: can't read configurations, error -22 [ 1196.482619][T11579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.515097][T11695] netlink: 220 bytes leftover after parsing attributes in process `syz.7.968'. [ 1196.596651][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1196.758772][ T10] usb 5-1: no configurations [ 1196.758795][ T10] usb 5-1: can't read configurations, error -22 [ 1196.759178][ T10] usb usb5-port1: attempt power cycle [ 1196.838034][T11616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.856449][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.860333][T11579] team0: Port device team_slave_0 added [ 1196.891338][T11579] team0: Port device team_slave_1 added [ 1197.097237][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1197.118083][ T10] usb 5-1: no configurations [ 1197.118097][ T10] usb 5-1: can't read configurations, error -22 [ 1197.190558][T11616] team0: Port device team_slave_0 added [ 1197.191589][T11579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.191601][T11579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.191617][T11579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.256700][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1197.278286][ T10] usb 5-1: no configurations [ 1197.278309][ T10] usb 5-1: can't read configurations, error -22 [ 1197.278686][T11579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.278701][T11579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.278708][ T10] usb usb5-port1: unable to enumerate USB device [ 1197.278730][T11579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.375967][T11616] team0: Port device team_slave_1 added [ 1198.321373][T11616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.321393][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.321422][T11616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.416925][ T5811] Bluetooth: hci1: command tx timeout [ 1198.417839][T11616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.417855][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.417880][T11616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.609910][T11579] hsr_slave_0: entered promiscuous mode [ 1198.611553][T11579] hsr_slave_1: entered promiscuous mode [ 1198.612676][T11579] debugfs: 'hsr0' already exists in 'hsr' [ 1198.612702][T11579] Cannot create hsr debugfs directory [ 1200.443378][T11616] hsr_slave_0: entered promiscuous mode [ 1200.444355][T11616] hsr_slave_1: entered promiscuous mode [ 1200.459404][T11616] debugfs: 'hsr0' already exists in 'hsr' [ 1200.459424][T11616] Cannot create hsr debugfs directory [ 1200.496694][ T5811] Bluetooth: hci1: command tx timeout [ 1202.598259][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 1202.598348][T11728] openvswitch: netlink: Flow actions attr not present in new flow. [ 1203.481984][T10951] Bluetooth: hci1: command tx timeout [ 1205.746581][T10951] Bluetooth: hci1: command tx timeout [ 1206.189073][T11741] netlink: 220 bytes leftover after parsing attributes in process `syz.4.979'. [ 1214.704029][T11696] chnl_net:caif_netlink_parms(): no params data found [ 1219.711440][T11791] 9p: Bad value for 'rfdno' [ 1219.760818][ T58] bridge_slave_1: left allmulticast mode [ 1219.760862][ T58] bridge_slave_1: left promiscuous mode [ 1219.761196][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.869335][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 1219.929364][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 1220.207660][T11787] Can't find ip_set type [ 1220.482139][ T58] bridge_slave_0: left allmulticast mode [ 1220.482171][ T58] bridge_slave_0: left promiscuous mode [ 1220.482421][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.906149][ T58] bridge_slave_1: left allmulticast mode [ 1221.906190][ T58] bridge_slave_1: left promiscuous mode [ 1221.906453][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.255338][T11805] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.255357][T11805] binder: 11800:11805 ioctl 4018620d 200000004a80 returned -16 [ 1223.068970][ T58] bridge_slave_0: left allmulticast mode [ 1223.069001][ T58] bridge_slave_0: left promiscuous mode [ 1223.069275][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.587008][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1224.877127][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1224.879289][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.879318][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.879345][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1224.879361][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.888477][ T10] usb 5-1: config 0 descriptor?? [ 1226.093797][ T10] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1226.093837][ T10] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1226.294020][ T10] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 1226.516055][ T10] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1226.715690][ T10] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 1226.716369][ T10] ft260 0003:0403:6030.000A: failed to retrieve status: -5 [ 1226.925572][ T10] ft260 0003:0403:6030.000A: failed to reset I2C controller: -71 [ 1226.975031][ T10] usb 5-1: USB disconnect, device number 46 [ 1227.697450][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.758732][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.803745][ T58] bond0 (unregistering): Released all slaves [ 1228.088870][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'. [ 1228.156885][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'. [ 1229.117249][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.250708][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.309210][ T58] bond0 (unregistering): Released all slaves [ 1229.734152][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.734304][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.734482][T11696] bridge_slave_0: entered allmulticast mode [ 1229.736229][T11696] bridge_slave_0: entered promiscuous mode [ 1230.698898][T11696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.699049][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.699339][T11696] bridge_slave_1: entered allmulticast mode [ 1230.729187][T11696] bridge_slave_1: entered promiscuous mode [ 1230.938040][T11696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.974247][T11696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.160124][T11696] team0: Port device team_slave_0 added [ 1231.276940][ T58] hsr_slave_0: left promiscuous mode [ 1231.316866][ T58] hsr_slave_1: left promiscuous mode [ 1231.318278][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.340228][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.517054][ T58] hsr_slave_0: left promiscuous mode [ 1231.537411][ T58] hsr_slave_1: left promiscuous mode [ 1231.538196][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.588821][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.282356][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1232.294548][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1232.297665][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1232.299859][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1232.301071][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1233.969304][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1234.339450][ T5811] Bluetooth: hci5: command tx timeout [ 1234.813634][T11863] binder: 11862:11863 ioctl 4018620d 0 returned -22 [ 1235.079167][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1236.416933][ T5811] Bluetooth: hci5: command tx timeout [ 1238.496801][ T5811] Bluetooth: hci5: command tx timeout [ 1238.984453][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.984533][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.178937][T11880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1240.671019][T10951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1240.692348][T10951] Bluetooth: hci5: command tx timeout [ 1240.703893][T10951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1240.707723][T10951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1240.733958][T10951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1240.735875][T10951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1242.178465][ T7702] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1242.248964][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1242.316814][ T7702] usb 5-1: device descriptor read/64, error -71 [ 1242.407723][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1242.608017][ T7702] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1242.768318][ T7702] usb 5-1: device descriptor read/64, error -71 [ 1242.887971][ T7702] usb usb5-port1: attempt power cycle [ 1242.976659][T10951] Bluetooth: hci6: command tx timeout [ 1243.089622][T11696] team0: Port device team_slave_1 added [ 1243.246835][ T7702] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1243.267395][ T7702] usb 5-1: device descriptor read/8, error -71 [ 1243.516723][ T7702] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1243.547166][ T7702] usb 5-1: device descriptor read/8, error -71 [ 1243.657210][ T7702] usb usb5-port1: unable to enumerate USB device [ 1243.876319][T11696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.876342][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.876401][T11696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.984738][T11696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.984789][T11696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.984846][T11696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.066998][T10951] Bluetooth: hci6: command tx timeout [ 1245.343348][T11696] hsr_slave_0: entered promiscuous mode [ 1245.344302][T11696] hsr_slave_1: entered promiscuous mode [ 1245.344896][T11696] debugfs: 'hsr0' already exists in 'hsr' [ 1245.344968][T11696] Cannot create hsr debugfs directory [ 1247.148683][T10951] Bluetooth: hci6: command tx timeout [ 1248.079479][T11850] chnl_net:caif_netlink_parms(): no params data found [ 1248.796762][ T9030] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1248.927702][T11878] chnl_net:caif_netlink_parms(): no params data found [ 1248.966715][ T9030] usb 5-1: Using ep0 maxpacket: 8 [ 1248.968589][ T9030] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1248.968607][ T9030] usb 5-1: config 179 has no interface number 0 [ 1248.968643][ T9030] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1248.968659][ T9030] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1248.968675][ T9030] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1248.968690][ T9030] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1248.968706][ T9030] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1248.968722][ T9030] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1248.968742][ T9030] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1248.968801][ T9030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.195478][ T9030] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 1249.216665][T10951] Bluetooth: hci6: command tx timeout [ 1249.373140][ T5149] input input9: unable to receive magic message: -71 [ 1249.435026][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1249.472498][ T5149] input input9: unable to receive magic message: -71 [ 1249.844947][ T5149] input input9: unable to receive magic message: -71 [ 1249.980970][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1249.981321][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1249.981373][ T9030] usb 5-1: USB disconnect, device number 51 [ 1250.173526][T11881] udevd[11881]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1250.626708][ T9030] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1250.779461][ T9030] usb 5-1: no configurations [ 1250.779485][ T9030] usb 5-1: can't read configurations, error -22 [ 1250.879035][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.879273][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.879524][T11850] bridge_slave_0: entered allmulticast mode [ 1250.885108][T11850] bridge_slave_0: entered promiscuous mode [ 1250.906645][ T9030] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1250.930530][T11934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1250.956407][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.964170][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.964346][T11850] bridge_slave_1: entered allmulticast mode [ 1250.965932][T11850] bridge_slave_1: entered promiscuous mode [ 1251.069211][ T9030] usb 5-1: no configurations [ 1251.069234][ T9030] usb 5-1: can't read configurations, error -22 [ 1251.072994][ T9030] usb usb5-port1: attempt power cycle [ 1251.139112][T11878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.140738][T11878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.140958][T11878] bridge_slave_0: entered allmulticast mode [ 1251.143801][T11878] bridge_slave_0: entered promiscuous mode [ 1251.180901][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.183522][T11878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.183944][T11878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.184140][T11878] bridge_slave_1: entered allmulticast mode [ 1251.220306][T11878] bridge_slave_1: entered promiscuous mode [ 1251.226215][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.231291][ T58] bridge_slave_1: left allmulticast mode [ 1251.231320][ T58] bridge_slave_1: left promiscuous mode [ 1251.231613][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.337649][ T58] bridge_slave_0: left allmulticast mode [ 1251.337678][ T58] bridge_slave_0: left promiscuous mode [ 1251.337849][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.423723][ T58] bridge_slave_1: left allmulticast mode [ 1251.423746][ T58] bridge_slave_1: left promiscuous mode [ 1251.423946][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.466753][ T9030] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1251.478713][ T58] bridge_slave_0: left allmulticast mode [ 1251.478742][ T58] bridge_slave_0: left promiscuous mode [ 1251.478999][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.488925][ T9030] usb 5-1: no configurations [ 1251.488942][ T9030] usb 5-1: can't read configurations, error -22 [ 1251.644637][ T9030] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1251.690733][ T9030] usb 5-1: no configurations [ 1251.690756][ T9030] usb 5-1: can't read configurations, error -22 [ 1251.691100][ T9030] usb usb5-port1: unable to enumerate USB device [ 1251.837354][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.917701][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.978722][ T58] bond0 (unregistering): Released all slaves [ 1252.238108][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.317444][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.385048][ T58] bond0 (unregistering): Released all slaves [ 1252.639471][T11850] team0: Port device team_slave_0 added [ 1252.643419][T11878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.648991][T11878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.714058][T11850] team0: Port device team_slave_1 added [ 1252.826843][ T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1252.883136][T11878] team0: Port device team_slave_0 added [ 1252.948586][T11878] team0: Port device team_slave_1 added [ 1252.973851][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.973865][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.973879][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.976636][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1253.021367][ T10] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1253.021400][ T10] usb 8-1: config 179 has no interface number 0 [ 1253.021465][ T10] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1253.021493][ T10] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1253.021522][ T10] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1253.021549][ T10] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1253.021577][ T10] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1253.021604][ T10] usb 8-1: config 179 interface 65 has no altsetting 0 [ 1253.021641][ T10] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1253.021664][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.063463][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input10 [ 1253.110089][ T5149] input input10: unable to receive magic message: -110 [ 1253.209925][ T5149] input input10: unable to receive magic message: -32 [ 1253.310563][ T58] hsr_slave_0: left promiscuous mode [ 1253.323819][ T5149] input input10: unable to receive magic message: -32 [ 1253.348478][ T58] hsr_slave_1: left promiscuous mode [ 1253.349744][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1253.349747][ T9030] usb 8-1: USB disconnect, device number 37 [ 1253.349906][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1253.364315][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.429349][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.628295][ T58] hsr_slave_0: left promiscuous mode [ 1253.666801][ T58] hsr_slave_1: left promiscuous mode [ 1253.667541][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.687496][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.806815][ T9030] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1253.956767][ T9030] usb 5-1: Using ep0 maxpacket: 16 [ 1253.972372][ T9030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1253.975159][ T9030] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1253.975189][ T9030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.975209][ T9030] usb 5-1: Product: syz [ 1253.975224][ T9030] usb 5-1: Manufacturer: syz [ 1253.975238][ T9030] usb 5-1: SerialNumber: syz [ 1254.023837][ T9030] usb 5-1: config 0 descriptor?? [ 1254.034557][ T9030] hub 5-1:0.0: bad descriptor, ignoring hub [ 1254.034610][ T9030] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1254.061239][ T9030] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.776923][T11325] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1254.780724][ T5881] usb 5-1: USB disconnect, device number 56 [ 1254.797674][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1254.929838][T11325] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.929859][T11325] usb 8-1: config 0 has no interface number 0 [ 1254.929886][T11325] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.929901][T11325] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.929925][T11325] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1254.929938][T11325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.934124][T11325] usb 8-1: config 0 descriptor?? [ 1255.017550][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1255.498768][T11325] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.000B/input/input11 [ 1255.714732][T11325] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1255.768863][T11325] usb 8-1: USB disconnect, device number 38 [ 1255.833376][T11959] fido_id[11959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1256.539616][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1256.697393][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1257.310868][T11964] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1027'. [ 1257.368451][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1027'. [ 1257.580049][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1257.584084][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1257.603960][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1257.623040][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1257.624049][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1257.969150][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.969170][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.969199][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.080412][T11878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.080432][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.080459][T11878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.279328][T11878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.279341][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.279357][T11878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.891687][T11850] hsr_slave_0: entered promiscuous mode [ 1258.893214][T11850] hsr_slave_1: entered promiscuous mode [ 1258.894253][T11850] debugfs: 'hsr0' already exists in 'hsr' [ 1258.894280][T11850] Cannot create hsr debugfs directory [ 1258.965728][T11878] hsr_slave_0: entered promiscuous mode [ 1258.967666][T11878] hsr_slave_1: entered promiscuous mode [ 1258.969222][T11878] debugfs: 'hsr0' already exists in 'hsr' [ 1258.969249][T11878] Cannot create hsr debugfs directory [ 1259.222393][T11987] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1033'. [ 1259.605462][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1036'. [ 1259.662423][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1036'. [ 1259.697746][ T5114] Bluetooth: hci0: command tx timeout [ 1260.116726][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1039'. [ 1260.116749][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1039'. [ 1260.116767][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1039'. [ 1260.116866][T12011] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1039'. [ 1260.314940][T12014] batman_adv: batadv0: Adding interface: dummy0 [ 1260.314959][T12014] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.314992][T12014] batman_adv: batadv0: Interface activated: dummy0 [ 1260.389052][T12015] batadv0: mtu less than device minimum [ 1260.395163][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.409027][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.419187][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.432465][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.441775][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.459423][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.469891][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.478909][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.487691][T12015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1260.830782][T12011] syz.7.1039 (12011) used greatest stack depth: 16960 bytes left [ 1261.067772][T12020] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1043'. [ 1261.781337][ T5114] Bluetooth: hci0: command tx timeout [ 1262.437381][T11970] chnl_net:caif_netlink_parms(): no params data found [ 1262.733847][T11878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1262.747423][T12034] __nla_validate_parse: 3 callbacks suppressed [ 1262.747443][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 1262.804432][T12034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.918823][T12034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.950213][T12034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.121733][T12034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.139847][T12034] batman_adv: batadv0: Interface deactivated: dummy0 [ 1263.139877][T12034] batman_adv: batadv0: Removing interface: dummy0 [ 1263.358441][T11878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1263.547036][T11878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1263.641129][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1054'. [ 1263.721406][T11878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1263.785082][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.785667][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.859156][ T5114] Bluetooth: hci0: command tx timeout [ 1264.655492][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.655675][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.655921][T11970] bridge_slave_0: entered allmulticast mode [ 1264.681293][T11970] bridge_slave_0: entered promiscuous mode [ 1264.852450][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.852555][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.852738][T11970] bridge_slave_1: entered allmulticast mode [ 1264.854369][T11970] bridge_slave_1: entered promiscuous mode [ 1264.973074][T11850] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1265.069363][T11850] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1265.137997][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.143025][T11850] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1265.351750][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.354022][T11850] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1265.592274][T11970] team0: Port device team_slave_0 added [ 1265.669911][T11970] team0: Port device team_slave_1 added [ 1265.938021][ T5114] Bluetooth: hci0: command tx timeout [ 1265.967549][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.967563][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.967578][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.061735][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.061754][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.061780][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.147768][ T58] bridge_slave_1: left allmulticast mode [ 1266.147801][ T58] bridge_slave_1: left promiscuous mode [ 1266.148060][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.242088][ T58] bridge_slave_0: left allmulticast mode [ 1266.242121][ T58] bridge_slave_0: left promiscuous mode [ 1266.242739][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.335711][ T58] bridge_slave_1: left allmulticast mode [ 1266.335743][ T58] bridge_slave_1: left promiscuous mode [ 1266.336010][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.372128][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1065'. [ 1266.430255][ T58] bridge_slave_0: left allmulticast mode [ 1266.430288][ T58] bridge_slave_0: left promiscuous mode [ 1266.430566][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.867317][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.947628][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.021713][ T58] bond0 (unregistering): Released all slaves [ 1267.473806][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.567424][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.648797][ T58] bond0 (unregistering): Released all slaves [ 1267.675437][T12090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.675470][T12090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.731793][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1068'. [ 1267.732040][T12099] netlink: 'syz.4.1068': attribute type 7 has an invalid length. [ 1267.732055][T12099] netlink: 'syz.4.1068': attribute type 8 has an invalid length. [ 1267.732068][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 1267.798271][T12090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.798293][T12090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.381644][T11970] hsr_slave_0: entered promiscuous mode [ 1268.383103][T11970] hsr_slave_1: entered promiscuous mode [ 1268.384131][T11970] debugfs: 'hsr0' already exists in 'hsr' [ 1268.384157][T11970] Cannot create hsr debugfs directory [ 1268.787277][ T58] hsr_slave_0: left promiscuous mode [ 1268.861050][ T58] hsr_slave_1: left promiscuous mode [ 1268.862128][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.939999][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.300090][ T58] hsr_slave_0: left promiscuous mode [ 1269.336738][ T58] hsr_slave_1: left promiscuous mode [ 1269.338137][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.360122][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1074'. [ 1269.360143][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1074'. [ 1269.360160][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1074'. [ 1269.360205][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1074'. [ 1269.379276][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.486812][ T807] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1269.654972][ T807] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1269.655001][ T807] usb 5-1: config 0 has no interface number 0 [ 1269.655053][ T807] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.655080][ T807] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.655121][ T807] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1269.655146][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.718798][ T807] usb 5-1: config 0 descriptor?? [ 1270.219118][T12117] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1075'. [ 1270.219149][T12117] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1075'. [ 1270.271126][ T807] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.000C/input/input12 [ 1270.289334][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1270.497330][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1270.550394][ T807] holtek_kbd 0003:04D9:A055.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 1270.560800][ T807] usb 5-1: USB disconnect, device number 57 [ 1270.699109][T12118] fido_id[12118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1271.957520][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1272.139984][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1273.656786][ T807] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1273.699235][T11878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.875322][ T807] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1273.875353][ T807] usb 8-1: config 0 has no interface number 0 [ 1273.875398][ T807] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.875413][ T807] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.875438][ T807] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1273.875451][ T807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.883577][ T807] usb 8-1: config 0 descriptor?? [ 1273.886776][ T9030] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1274.036622][ T9030] usb 5-1: Using ep0 maxpacket: 16 [ 1274.055690][ T9030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1274.073477][ T9030] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1274.073508][ T9030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.073572][ T9030] usb 5-1: Product: syz [ 1274.073588][ T9030] usb 5-1: Manufacturer: syz [ 1274.073602][ T9030] usb 5-1: SerialNumber: syz [ 1274.079463][ T9030] usb 5-1: config 0 descriptor?? [ 1274.104845][ T9030] hub 5-1:0.0: bad descriptor, ignoring hub [ 1274.104884][ T9030] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1274.134046][ T9030] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1274.269417][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.410460][ T37] audit: type=1326 audit(1770604687.382:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.4.1080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f877ea6aeb9 code=0x0 [ 1274.535974][ T807] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.000D/input/input13 [ 1274.685019][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.685183][T10021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.729883][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.745769][T10021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.762158][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.849458][ T807] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1274.897147][ T807] usb 8-1: USB disconnect, device number 39 [ 1275.044807][T12135] fido_id[12135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1275.078875][T11850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.135744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.135854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.452619][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.452775][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.698245][T11850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1275.698274][T11850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1276.660221][ T807] usb 5-1: USB disconnect, device number 58 [ 1277.095943][T11970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1277.334551][T11970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1277.464426][T11970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1277.514125][T11970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1277.707560][T11878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.715981][T11850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.146852][ T7702] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1278.204081][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.329673][ T7702] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1278.329694][ T7702] usb 8-1: config 0 has no interface number 0 [ 1278.329724][ T7702] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.329739][ T7702] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.329762][ T7702] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1278.329776][ T7702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.343913][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.369765][ T7702] usb 8-1: config 0 descriptor?? [ 1278.447600][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.447879][T10021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.545370][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.546052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.037056][T11878] veth0_vlan: entered promiscuous mode [ 1279.113391][T11850] veth0_vlan: entered promiscuous mode [ 1279.130371][ T7702] usbhid 8-1:0.1: can't add hid device: -71 [ 1279.130508][ T7702] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 1279.154902][ T7702] usb 8-1: USB disconnect, device number 40 [ 1279.187119][T11878] veth1_vlan: entered promiscuous mode [ 1279.258477][T11850] veth1_vlan: entered promiscuous mode [ 1279.423562][T11878] veth0_macvtap: entered promiscuous mode [ 1279.460835][T11878] veth1_macvtap: entered promiscuous mode [ 1279.472746][T11850] veth0_macvtap: entered promiscuous mode [ 1279.523928][T11850] veth1_macvtap: entered promiscuous mode [ 1279.591904][T11878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.612943][T11878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.668833][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.675890][T11850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.678104][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.698628][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.704145][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.730970][T11850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.902822][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.944060][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.950997][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.952142][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.952499][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.564157][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.564181][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.826633][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.826657][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.001636][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.001660][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.165974][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.166000][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.286627][ T5783] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1281.693167][ T5783] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1281.693198][ T5783] usb 5-1: config 0 has no interface number 0 [ 1281.693246][ T5783] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.693273][ T5783] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.693315][ T5783] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1281.693339][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.794492][T12215] 9pnet_virtio: no channels available for device syz [ 1281.960416][T12217] overlayfs: overlapping lowerdir path [ 1282.264363][T12218] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1282.264685][T12218] overlayfs: overlapping lowerdir path [ 1282.719368][ T5783] usb 5-1: config 0 descriptor?? [ 1283.525677][ T5783] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.000E/input/input14 [ 1283.684991][T11970] veth0_vlan: entered promiscuous mode [ 1283.742408][T11970] veth1_vlan: entered promiscuous mode [ 1283.996233][T11970] veth0_macvtap: entered promiscuous mode [ 1284.013552][T11970] veth1_macvtap: entered promiscuous mode [ 1284.440164][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.519061][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.574761][ T1156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.586666][ T1156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.818218][ T1156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.903696][ T5783] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 1284.935186][ T5783] usb 5-1: USB disconnect, device number 59 [ 1284.948695][T10015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.035026][T12233] fido_id[12233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1286.649052][ T9030] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1286.820029][ T9030] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.820069][ T9030] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1286.820113][ T9030] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.820137][ T9030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.883357][T12236] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1286.921964][ T9030] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1287.963094][ T10] usb 6-1: USB disconnect, device number 2 [ 1289.042020][ T3230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.042045][ T3230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.069148][T12269] net_ratelimit: 50 callbacks suppressed [ 1289.069169][T12269] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1289.811285][ T6142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.811310][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.814075][T12274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.892210][T12295] input: syz1 as /devices/virtual/input/input15 [ 1292.164746][T10951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1292.186220][T10951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1292.188208][T10951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1292.196695][T10951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1292.200963][T10951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1293.059731][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1293.184495][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1131'. [ 1293.184512][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1131'. [ 1293.184523][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1131'. [ 1293.184563][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1131'. [ 1293.217809][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 1293.241494][ T5881] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1293.241515][ T5881] usb 6-1: config 179 has no interface number 0 [ 1293.241545][ T5881] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1293.241561][ T5881] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1293.241578][ T5881] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1293.241593][ T5881] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1293.241606][ T5881] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1293.241628][ T5881] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1293.241648][ T5881] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1293.241661][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.460062][ T5881] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16 [ 1293.680008][ T5881] usb 6-1: USB disconnect, device number 3 [ 1293.680104][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1293.837055][ T5459] veth0_macvtap: left promiscuous mode [ 1293.985140][T12325] chnl_net:caif_netlink_parms(): no params data found [ 1294.143228][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1133'. [ 1294.143254][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1133'. [ 1294.194654][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1133'. [ 1294.194684][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1133'. [ 1294.337285][ T5114] Bluetooth: hci1: command tx timeout [ 1294.406800][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1294.588630][ T5881] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1294.588655][ T5881] usb 7-1: config 0 has no interface number 0 [ 1294.588686][ T5881] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.588708][ T5881] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.588732][ T5881] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1294.588746][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.600670][ T5881] usb 7-1: config 0 descriptor?? [ 1295.246982][T10021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.381532][ T5881] usbhid 7-1:0.1: can't add hid device: -71 [ 1295.381667][ T5881] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1295.420465][ T5881] usb 7-1: USB disconnect, device number 2 [ 1295.933017][T10021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.416888][ T5114] Bluetooth: hci1: command tx timeout [ 1296.703229][T10021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.759725][T12367] warning: `syz.7.1137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1296.760451][T12325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.760662][T12325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.811836][T12325] bridge_slave_0: entered allmulticast mode [ 1296.851300][T12325] bridge_slave_0: entered promiscuous mode [ 1297.042861][T12325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.043188][T12325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.043353][T12325] bridge_slave_1: entered allmulticast mode [ 1297.054186][T12325] bridge_slave_1: entered promiscuous mode [ 1297.056040][T12380] batman_adv: batadv0: Adding interface: dummy0 [ 1297.056062][T12380] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.056104][T12380] batman_adv: batadv0: Interface activated: dummy0 [ 1297.133078][T12382] batadv0: mtu less than device minimum [ 1297.163918][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.182580][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.229963][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.275751][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.297581][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.332861][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.357532][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.383550][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.414778][T12382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1297.558917][T12393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1144'. [ 1297.558944][T12393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1144'. [ 1297.965016][T10021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.365109][T12325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.383905][T12325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.498761][ T5114] Bluetooth: hci1: command tx timeout [ 1298.507832][T12415] __nla_validate_parse: 2 callbacks suppressed [ 1298.507851][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1150'. [ 1298.507886][T12415] netlink: 'syz.6.1150': attribute type 7 has an invalid length. [ 1298.507899][T12415] netlink: 'syz.6.1150': attribute type 8 has an invalid length. [ 1298.507910][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1150'. [ 1298.722765][T12325] team0: Port device team_slave_0 added [ 1298.785419][T12419] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1151'. [ 1298.785456][T12419] netlink: 'syz.8.1151': attribute type 7 has an invalid length. [ 1298.785471][T12419] netlink: 'syz.8.1151': attribute type 8 has an invalid length. [ 1298.785484][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1151'. [ 1298.848938][T12325] team0: Port device team_slave_1 added [ 1298.917281][T12419] erspan0: entered promiscuous mode [ 1298.946816][T12419] batadv_slave_1: entered promiscuous mode [ 1298.947077][T12419] batadv_slave_1: left promiscuous mode [ 1299.010280][T12419] erspan0: left promiscuous mode [ 1299.395614][T12325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.395633][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.395663][T12325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.551222][T12439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'. [ 1299.551263][T12439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'. [ 1299.599305][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'. [ 1299.599342][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'. [ 1299.602953][T12325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.602969][T12325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.602998][T12325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.712654][T10021] bridge_slave_1: left allmulticast mode [ 1299.712676][T10021] bridge_slave_1: left promiscuous mode [ 1299.712841][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.798851][T10021] bridge_slave_0: left allmulticast mode [ 1299.798884][T10021] bridge_slave_0: left promiscuous mode [ 1299.799169][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.427551][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.427623][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.586321][ T5114] Bluetooth: hci1: command tx timeout [ 1300.757185][T12464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.818821][T12464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.006024][ T9030] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1301.209571][ T9030] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1301.209602][ T9030] usb 8-1: config 0 has no interface number 0 [ 1301.209646][ T9030] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.209662][ T9030] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.209685][ T9030] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1301.209699][ T9030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.270581][ T9030] usb 8-1: config 0 descriptor?? [ 1301.707523][ T9030] usbhid 8-1:0.1: can't add hid device: -71 [ 1301.707662][ T9030] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 1301.737931][ T9030] usb 8-1: USB disconnect, device number 41 [ 1302.669407][T10021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.784823][T10021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.870387][T10021] bond0 (unregistering): Released all slaves [ 1303.139229][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1172'. [ 1303.139270][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1172'. [ 1303.621483][T10021] IPVS: stopping master sync thread 6018 ... [ 1303.883348][T12487] __nla_validate_parse: 3 callbacks suppressed [ 1303.883369][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 1303.883398][T12487] netlink: 'syz.5.1174': attribute type 7 has an invalid length. [ 1303.883412][T12487] netlink: 'syz.5.1174': attribute type 8 has an invalid length. [ 1303.883425][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'. [ 1303.940352][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1174'. [ 1303.940390][T12489] netlink: 'syz.5.1174': attribute type 7 has an invalid length. [ 1303.940404][T12489] netlink: 'syz.5.1174': attribute type 8 has an invalid length. [ 1303.940417][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'. [ 1304.503622][T12487] erspan0: entered promiscuous mode [ 1304.524658][T12487] batadv_slave_1: entered promiscuous mode [ 1304.524936][T12487] batadv_slave_1: left promiscuous mode [ 1304.611147][T12487] erspan0: left promiscuous mode [ 1304.705466][T12489] erspan0: entered promiscuous mode [ 1304.778485][T12489] batadv_slave_1: entered promiscuous mode [ 1304.778887][T12489] batadv_slave_1: left promiscuous mode [ 1304.826774][T12489] erspan0: left promiscuous mode [ 1307.138357][T12325] hsr_slave_0: entered promiscuous mode [ 1307.140200][T12325] hsr_slave_1: entered promiscuous mode [ 1307.144015][T12325] debugfs: 'hsr0' already exists in 'hsr' [ 1307.144043][T12325] Cannot create hsr debugfs directory [ 1307.826159][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 1307.826204][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 1307.923085][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 1307.923132][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 1308.496628][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1308.524003][T12529] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1187'. [ 1308.590180][T10021] hsr_slave_0: left promiscuous mode [ 1308.667437][T10021] hsr_slave_1: left promiscuous mode [ 1308.685447][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1308.688989][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1308.692930][ T10] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1308.692956][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.692976][ T10] usb 6-1: Product: syz [ 1308.692988][ T10] usb 6-1: Manufacturer: syz [ 1308.693001][ T10] usb 6-1: SerialNumber: syz [ 1308.707762][ T10] usb 6-1: config 0 descriptor?? [ 1308.718296][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 1308.718334][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1308.728666][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1309.204525][T10021] veth1_macvtap: left promiscuous mode [ 1309.223869][T10021] veth1_vlan: left promiscuous mode [ 1309.225074][T10021] veth0_vlan: left promiscuous mode [ 1309.495661][ T10] usb 6-1: USB disconnect, device number 4 [ 1310.425546][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.581010][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.583204][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.214250][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.275680][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.282313][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.828776][T12175] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1311.991870][T12175] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1311.991901][T12175] usb 9-1: config 0 has no interface number 0 [ 1311.991945][T12175] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.991961][T12175] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.991986][T12175] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1311.991999][T12175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.996200][T12175] usb 9-1: config 0 descriptor?? [ 1312.450135][T12175] usbhid 9-1:0.1: can't add hid device: -71 [ 1312.450278][T12175] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1312.454857][T12175] usb 9-1: USB disconnect, device number 2 [ 1313.466714][ T9030] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1313.637653][ T9030] usb 9-1: Using ep0 maxpacket: 16 [ 1313.639723][ T9030] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1313.642255][ T9030] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1313.642286][ T9030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.642307][ T9030] usb 9-1: Product: syz [ 1313.642321][ T9030] usb 9-1: Manufacturer: syz [ 1313.642335][ T9030] usb 9-1: SerialNumber: syz [ 1313.645684][ T9030] usb 9-1: config 0 descriptor?? [ 1313.701110][ T9030] hub 9-1:0.0: bad descriptor, ignoring hub [ 1313.701155][ T9030] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1313.735240][ T9030] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input17 [ 1314.432431][T10021] team0 (unregistering): Port device team_slave_1 removed [ 1314.727285][T10021] team0 (unregistering): Port device team_slave_0 removed [ 1317.378996][ T5881] infiniband syz0: ib_query_port failed (-19) [ 1317.489028][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1202'. [ 1317.580892][T12573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.580920][T12573] net_ratelimit: 10 callbacks suppressed [ 1317.580932][T12573] batadv0: mtu less than device minimum [ 1317.603520][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.642794][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.657837][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.678699][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.691914][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.721352][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.766270][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.774240][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.785142][T12573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1317.916746][ T9030] usb 9-1: USB disconnect, device number 3 [ 1317.961758][T12573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.098158][T12585] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1206'. [ 1318.132917][T12573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.468558][T12573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.517922][T12573] batman_adv: batadv0: Interface deactivated: dummy0 [ 1318.517952][T12573] batman_adv: batadv0: Removing interface: dummy0 [ 1318.721998][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1209'. [ 1318.722036][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1209'. [ 1320.306664][T11325] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1320.438856][T12612] syz.5.1216 uses obsolete (PF_INET,SOCK_PACKET) [ 1320.492221][T11325] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1320.492250][T11325] usb 9-1: config 0 has no interface number 0 [ 1320.492296][T11325] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.492321][T11325] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.492359][T11325] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1320.492382][T11325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.524825][T11325] usb 9-1: config 0 descriptor?? [ 1320.946722][ T5881] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1320.992137][T11325] usbhid 9-1:0.1: can't add hid device: -71 [ 1320.992272][T11325] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1321.019587][T11325] usb 9-1: USB disconnect, device number 4 [ 1321.107053][ T5881] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.107083][ T5881] usb 8-1: config 0 has no interface number 0 [ 1321.107135][ T5881] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.107163][ T5881] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.107203][ T5881] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1321.107226][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.174618][ T5881] usb 8-1: config 0 descriptor?? [ 1321.494835][T12634] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1222'. [ 1321.722663][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1223'. [ 1321.769553][ T5881] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.000F/input/input18 [ 1322.332671][ T5881] holtek_kbd 0003:04D9:A055.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1322.456804][ T5881] usb 8-1: USB disconnect, device number 42 [ 1322.695213][T12648] fido_id[12648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1322.887050][T12325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1323.012875][T12325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1323.161244][T12325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1323.255187][T12325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1323.400527][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1230'. [ 1323.847056][T12673] syz.7.1232 (12673) used greatest stack depth: 16256 bytes left [ 1323.910243][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 1324.052672][T12325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.164359][T12325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.206144][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.224202][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.295559][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.295800][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.315166][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1235'. [ 1324.326758][ T807] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1324.488528][ T807] usb 8-1: Using ep0 maxpacket: 32 [ 1324.510475][ T807] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1324.510508][ T807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.510529][ T807] usb 8-1: Product: syz [ 1324.510545][ T807] usb 8-1: Manufacturer: syz [ 1324.510559][ T807] usb 8-1: SerialNumber: syz [ 1324.562919][ T807] usb 8-1: config 0 descriptor?? [ 1324.925484][ T807] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 043 [ 1325.226716][ T807] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1325.396599][ T807] usb 9-1: Using ep0 maxpacket: 16 [ 1325.400232][ T807] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1325.404225][ T807] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1325.404259][ T807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.404280][ T807] usb 9-1: Product: syz [ 1325.404295][ T807] usb 9-1: Manufacturer: syz [ 1325.404309][ T807] usb 9-1: SerialNumber: syz [ 1325.467861][ T807] usb 9-1: config 0 descriptor?? [ 1325.472208][ T807] hub 9-1:0.0: bad descriptor, ignoring hub [ 1325.472249][ T807] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1325.512345][ T807] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input19 [ 1325.548907][T12325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.070532][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1242'. [ 1327.147472][T12678] i2c i2c-1: failure writing data [ 1327.235042][ T5783] usb 8-1: USB disconnect, device number 43 [ 1327.567559][T12325] veth0_vlan: entered promiscuous mode [ 1327.604052][T12325] veth1_vlan: entered promiscuous mode [ 1327.906014][T12325] veth0_macvtap: entered promiscuous mode [ 1327.914476][T12325] veth1_macvtap: entered promiscuous mode [ 1327.971695][T12325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.023949][T12325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.057218][T10015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.058986][T10015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.059231][T10015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.059802][T10015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.657626][T12771] Bluetooth: MGMT ver 1.23 [ 1328.976623][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.976643][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.205347][T10015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.205369][T10015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.375496][ T807] usb 9-1: USB disconnect, device number 5 [ 1330.107585][ T4217] wlan1: Trigger new scan to find an IBSS to join [ 1333.285419][T10015] wlan1: Trigger new scan to find an IBSS to join [ 1333.833858][ T5459] veth0_macvtap: left promiscuous mode [ 1334.218421][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1281'. [ 1334.218461][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1281'. [ 1334.270282][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1281'. [ 1334.270447][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1281'. [ 1334.717878][T12858] netlink: 203340 bytes leftover after parsing attributes in process `syz.6.1270'. [ 1335.144185][T12872] veth0_macvtap: entered promiscuous mode [ 1335.144535][T12872] macvtap1: entered allmulticast mode [ 1335.144550][T12872] veth0_macvtap: entered allmulticast mode [ 1336.147561][ T5881] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1336.315138][ T5881] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1336.315168][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.315180][ T5881] usb 5-1: config 0 has no interface number 0 [ 1336.315207][ T5881] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1336.369194][ T5881] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1336.369229][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.369249][ T5881] usb 5-1: Product: syz [ 1336.369263][ T5881] usb 5-1: Manufacturer: syz [ 1336.369278][ T5881] usb 5-1: SerialNumber: syz [ 1336.414968][ T5881] usb 5-1: config 0 descriptor?? [ 1336.466228][ T5881] yurex 5-1:0.50: Could not find endpoints [ 1336.748854][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 1337.151860][ T3230] wlan1: Trigger new scan to find an IBSS to join [ 1338.163041][ T3230] wlan1: Creating new IBSS network, BSSID 6e:27:b5:1f:87:3b [ 1340.429526][T12175] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1340.486613][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1340.576622][T12175] usb 8-1: Using ep0 maxpacket: 8 [ 1340.579130][T12175] usb 8-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 1340.579147][T12175] usb 8-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1340.579170][T12175] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1340.579183][T12175] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.649982][ T10] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1340.650014][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.650034][ T10] usb 9-1: config 0 has no interface number 0 [ 1340.650087][ T10] usb 9-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.710108][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1340.710130][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.710142][ T10] usb 9-1: Product: syz [ 1340.710150][ T10] usb 9-1: Manufacturer: syz [ 1340.710158][ T10] usb 9-1: SerialNumber: syz [ 1340.761226][ T10] usb 9-1: config 0 descriptor?? [ 1340.781486][ T10] yurex 9-1:0.50: Could not find endpoints [ 1340.896254][ T9030] usb 8-1: USB disconnect, device number 44 [ 1340.913468][ T807] usb 5-1: USB disconnect, device number 60 [ 1341.266143][T12957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.270752][T12957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.408003][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1304'. [ 1341.477266][ T807] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1341.668703][ T807] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1341.668726][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.668738][ T807] usb 6-1: config 0 has no interface number 0 [ 1341.668767][ T807] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1341.679122][ T807] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1341.679151][ T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.679169][ T807] usb 6-1: Product: syz [ 1341.679183][ T807] usb 6-1: Manufacturer: syz [ 1341.679195][ T807] usb 6-1: SerialNumber: syz [ 1341.697675][ T807] usb 6-1: config 0 descriptor?? [ 1341.714373][ T807] yurex 6-1:0.50: Could not find endpoints [ 1342.164518][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1309'. [ 1342.426991][ T9030] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1342.576698][ T9030] usb 8-1: Using ep0 maxpacket: 32 [ 1342.598769][ T9030] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.598828][ T9030] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1342.598844][ T9030] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1342.598860][ T9030] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1342.622807][ T9030] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1342.622836][ T9030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.622848][ T9030] usb 8-1: Product: syz [ 1342.622856][ T9030] usb 8-1: Manufacturer: syz [ 1342.622864][ T9030] usb 8-1: SerialNumber: syz [ 1342.680689][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1343.149036][ T9030] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input20 [ 1343.436650][ T9030] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1343.436672][ T9030] (id 0x00) [ 1343.636549][ T9030] rc_core: IR keymap rc-imon-pad not found [ 1343.636566][ T9030] Registered IR keymap rc-empty [ 1343.636625][ T9030] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1343.636636][ T9030] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1343.658254][ T9030] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 1343.660194][ T9030] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input21 [ 1343.729989][ T9030] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:45> initialized [ 1344.276768][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1344.426576][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1344.428970][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.429029][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1344.429058][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1344.429087][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1344.432353][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1344.432381][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.432402][ T10] usb 7-1: Product: syz [ 1344.432416][ T10] usb 7-1: Manufacturer: syz [ 1344.432431][ T10] usb 7-1: SerialNumber: syz [ 1344.582159][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1344.607223][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input22 [ 1344.671125][ T9030] usb 9-1: USB disconnect, device number 6 [ 1344.776869][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1344.776893][ T10] (id 0x00) [ 1345.026736][ T10] rc_core: IR keymap rc-imon-pad not found [ 1345.026825][ T10] Registered IR keymap rc-empty [ 1345.030793][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1345.030819][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1345.196699][ T10] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1 [ 1345.248416][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1/input23 [ 1345.433606][ T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:3> initialized [ 1345.876717][ T5783] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1345.876748][T12988] imon:send_packet: task interrupted [ 1345.876860][T12988] imon:send_packet: packet tx failed (-512) [ 1345.876989][T12988] imon:vfd_write: send packet #2 failed [ 1345.881952][T13000] imon:display_open: display port is already open [ 1345.967445][T13003] usb 8-1: USB disconnect, device number 45 [ 1346.043133][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 1346.048425][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1346.051374][ T5783] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1346.051400][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.051418][ T5783] usb 5-1: Product: syz [ 1346.051431][ T5783] usb 5-1: Manufacturer: syz [ 1346.051444][ T5783] usb 5-1: SerialNumber: syz [ 1346.069548][ T5783] usb 5-1: config 0 descriptor?? [ 1346.105802][ T5783] hub 5-1:0.0: bad descriptor, ignoring hub [ 1346.105842][ T5783] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1346.171108][ T5783] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1346.313607][ T37] audit: type=1326 audit(1770604759.332:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12998 comm="syz.4.1325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29257faeb9 code=0x0 [ 1346.344786][ T807] usb 6-1: USB disconnect, device number 5 [ 1346.489817][ T5783] usb 5-1: USB disconnect, device number 61 [ 1346.703776][T11956] udevd[11956]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1347.056774][T13003] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1347.107418][ T5783] usb 7-1: USB disconnect, device number 3 [ 1347.206576][T13003] usb 8-1: Using ep0 maxpacket: 16 [ 1347.209476][T13003] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1347.212564][T13003] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1347.212594][T13003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.212615][T13003] usb 8-1: Product: syz [ 1347.212630][T13003] usb 8-1: Manufacturer: syz [ 1347.212644][T13003] usb 8-1: SerialNumber: syz [ 1347.233186][T13003] usb 8-1: config 0 descriptor?? [ 1347.249999][T13003] hub 8-1:0.0: bad descriptor, ignoring hub [ 1347.250037][T13003] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1347.261004][T13003] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input24 [ 1348.296755][ T5881] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1348.406665][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1348.446640][ T5881] usb 7-1: Using ep0 maxpacket: 8 [ 1348.448950][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1348.448976][ T5881] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1348.448990][ T5881] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1348.449005][ T5881] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1348.451786][ T5881] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1348.451817][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.451838][ T5881] usb 7-1: Product: syz [ 1348.451851][ T5881] usb 7-1: Manufacturer: syz [ 1348.451866][ T5881] usb 7-1: SerialNumber: syz [ 1348.542242][ T5881] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1348.621260][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1348.621292][ T10] usb 6-1: config 0 has no interface number 0 [ 1348.621371][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.621398][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.621439][ T10] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1348.621480][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.693105][ T10] usb 6-1: config 0 descriptor?? [ 1348.781705][T13003] usb 7-1: USB disconnect, device number 4 [ 1349.211009][ T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0010/input/input25 [ 1349.619890][ T10] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 1349.663550][ T10] usb 6-1: USB disconnect, device number 6 [ 1350.062103][T13077] fido_id[13077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1351.315158][T12175] usb 8-1: USB disconnect, device number 46 [ 1351.856646][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1352.036941][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1352.039353][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.039410][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1352.039438][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1352.039466][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1352.042562][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1352.042589][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.042610][ T10] usb 7-1: Product: syz [ 1352.042624][ T10] usb 7-1: Manufacturer: syz [ 1352.042640][ T10] usb 7-1: SerialNumber: syz [ 1352.175036][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1352.200247][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input26 [ 1352.296632][T12175] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1352.396594][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1352.396616][ T10] (id 0x00) [ 1352.455859][T12175] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1352.455891][T12175] usb 8-1: config 0 has no interface number 0 [ 1352.455944][T12175] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.455972][T12175] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.456014][T12175] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1352.456039][T12175] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.528307][T12175] usb 8-1: config 0 descriptor?? [ 1352.616745][ T10] rc_core: IR keymap rc-imon-pad not found [ 1352.616768][ T10] Registered IR keymap rc-empty [ 1352.616928][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1352.616949][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1352.709818][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1352.739430][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input27 [ 1352.835344][ T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:5> initialized [ 1353.147353][T12175] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.0011/input/input28 [ 1353.464948][T12175] holtek_kbd 0003:04D9:A055.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1353.488151][T12175] usb 8-1: USB disconnect, device number 47 [ 1353.903607][T13140] fido_id[13140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1355.466986][T13143] imon:send_packet: task interrupted [ 1355.467007][T13143] imon:send_packet: packet tx failed (-512) [ 1355.467245][T13143] imon:vfd_write: send packet #5 failed [ 1355.600103][T11325] usb 7-1: USB disconnect, device number 5 [ 1356.936783][T12175] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1357.098323][T12175] usb 8-1: Using ep0 maxpacket: 16 [ 1357.101145][T12175] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.101204][T12175] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1357.104382][T12175] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1357.104412][T12175] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.104433][T12175] usb 8-1: Product: syz [ 1357.104447][T12175] usb 8-1: Manufacturer: syz [ 1357.104462][T12175] usb 8-1: SerialNumber: syz [ 1357.128128][T12175] usb 8-1: config 0 descriptor?? [ 1357.130984][T12175] hub 8-1:0.0: bad descriptor, ignoring hub [ 1357.131019][T12175] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1357.134971][T12175] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.339191][T12175] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1357.414291][T12175] usb 8-1: USB disconnect, device number 48 [ 1357.522590][T13012] udevd[13012]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.114257][T13003] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1358.266662][T13003] usb 7-1: Using ep0 maxpacket: 8 [ 1358.268975][T13003] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1358.268994][T13003] usb 7-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 1358.269006][T13003] usb 7-1: config 179 has no interface number 0 [ 1358.269034][T13003] usb 7-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1358.269049][T13003] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1358.269069][T13003] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1358.269083][T13003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.525041][T13003] usb 7-1: USB disconnect, device number 6 [ 1358.735023][T13198] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1382'. [ 1358.821760][T10951] Bluetooth: hci5: command 0x0406 tx timeout [ 1361.865551][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.865618][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.039955][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1404'. [ 1362.251969][T13249] ------------[ cut here ]------------ [ 1362.251987][T13249] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 1362.252018][T13249] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at mac80211_hwsim_sta_rc_update+0x696/0x860, CPU#1: syz.7.1404/13249 [ 1362.252066][T13249] Modules linked in: [ 1362.252089][T13249] CPU: 1 UID: 0 PID: 13249 Comm: syz.7.1404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1362.252119][T13249] Tainted: [L]=SOFTLOCKUP [ 1362.252127][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1362.252140][T13249] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 1362.252170][T13249] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 d6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 d9 8e 53 fb 90 0f 0b [ 1362.252189][T13249] RSP: 0018:ffffc90008f66ec0 EFLAGS: 00010283 [ 1362.252209][T13249] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff888024a01280 [ 1362.252225][T13249] RDX: 0000000000000000 RSI: ffff88805dd935e2 RDI: ffffffff8f53aa90 [ 1362.252240][T13249] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 1362.252277][T13249] R10: 0000000000000100 R11: 000000000000000d R12: 0000000000000000 [ 1362.252292][T13249] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 1362.252307][T13249] FS: 00007fd15f0e66c0(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 1362.252326][T13249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1362.252341][T13249] CR2: 000020000007e030 CR3: 000000003af10000 CR4: 00000000003526f0 [ 1362.252362][T13249] Call Trace: [ 1362.252371][T13249] [ 1362.252389][T13249] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 1362.252424][T13249] mac80211_hwsim_sta_add+0xa4/0x350 [ 1362.252456][T13249] drv_sta_state+0x86a/0x1760 [ 1362.252492][T13249] sta_info_insert_rcu+0x1712/0x2760 [ 1362.252522][T13249] ? sta_info_insert_rcu+0x2d2/0x2760 [ 1362.252566][T13249] ? ieee80211_add_station+0x4f1/0x6a0 [ 1362.252596][T13249] sta_info_insert+0x16/0xc0 [ 1362.252622][T13249] rdev_add_station+0xfc/0x270 [ 1362.252651][T13249] nl80211_new_station+0x1860/0x1c70 [ 1362.252696][T13249] ? __pfx_nl80211_new_station+0x10/0x10 [ 1362.252719][T13249] ? netdev_run_todo+0xd5c/0xde0 [ 1362.252774][T13249] ? nl80211_pre_doit+0x4f1/0x930 [ 1362.252804][T13249] genl_family_rcv_msg_doit+0x22a/0x330 [ 1362.252836][T13249] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1362.252858][T13249] ? rcu_is_watching+0x15/0xb0 [ 1362.252911][T13249] ? bpf_lsm_capable+0x9/0x20 [ 1362.252932][T13249] ? security_capable+0x7e/0x2c0 [ 1362.252963][T13249] genl_rcv_msg+0x61c/0x7a0 [ 1362.252994][T13249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1362.253014][T13249] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1362.253032][T13249] ? __pfx_nl80211_new_station+0x10/0x10 [ 1362.253054][T13249] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1362.253080][T13249] ? __pfx_ref_tracker_free+0x10/0x10 [ 1362.253102][T13249] ? __skb_clone+0x63/0x7a0 [ 1362.253134][T13249] netlink_rcv_skb+0x232/0x4b0 [ 1362.253165][T13249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1362.253189][T13249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1362.253236][T13249] ? netlink_deliver_tap+0x2e/0x1b0 [ 1362.253265][T13249] ? netlink_deliver_tap+0x2e/0x1b0 [ 1362.253298][T13249] genl_rcv+0x28/0x40 [ 1362.253318][T13249] netlink_unicast+0x831/0x9f0 [ 1362.253353][T13249] ? __pfx_netlink_unicast+0x10/0x10 [ 1362.253377][T13249] ? __alloc_skb+0x193/0x390 [ 1362.253410][T13249] ? netlink_sendmsg+0x650/0xb40 [ 1362.253436][T13249] ? skb_put+0x11b/0x210 [ 1362.253461][T13249] netlink_sendmsg+0x813/0xb40 [ 1362.253501][T13249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.253542][T13249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1362.253577][T13249] ____sys_sendmsg+0xa4e/0xac0 [ 1362.253600][T13249] ? __might_fault+0xaf/0x130 [ 1362.253638][T13249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1362.253673][T13249] ? import_iovec+0x73/0xa0 [ 1362.253707][T13249] ___sys_sendmsg+0x2a5/0x360 [ 1362.253730][T13249] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.253761][T13249] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.253794][T13249] ? futex_wait+0x29a/0x380 [ 1362.253852][T13249] ? __fget_files+0x2a/0x420 [ 1362.253870][T13249] ? __fget_files+0x3a6/0x420 [ 1362.253910][T13249] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1362.253937][T13249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1362.253973][T13249] ? rcu_is_watching+0x15/0xb0 [ 1362.254016][T13249] do_syscall_64+0xe2/0xf80 [ 1362.254046][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.254067][T13249] ? trace_irq_disable+0x37/0x100 [ 1362.254095][T13249] ? clear_bhb_loop+0x60/0xb0 [ 1362.254120][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.254140][T13249] RIP: 0033:0x7fd160e8aeb9 [ 1362.254160][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.254178][T13249] RSP: 002b:00007fd15f0e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.254201][T13249] RAX: ffffffffffffffda RBX: 00007fd161105fa0 RCX: 00007fd160e8aeb9 [ 1362.254217][T13249] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 1362.254231][T13249] RBP: 00007fd160ef8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1362.254245][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.254258][T13249] R13: 00007fd161106038 R14: 00007fd161105fa0 R15: 00007ffcd81d5f78 [ 1362.254296][T13249] [ 1362.254315][T13249] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1362.254340][T13249] CPU: 1 UID: 0 PID: 13249 Comm: syz.7.1404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1362.254371][T13249] Tainted: [L]=SOFTLOCKUP [ 1362.254378][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1362.254391][T13249] Call Trace: [ 1362.254400][T13249] [ 1362.254409][T13249] vpanic+0x1e0/0x670 [ 1362.254444][T13249] panic+0xc5/0xd0 [ 1362.254472][T13249] ? __pfx_panic+0x10/0x10 [ 1362.254522][T13249] __warn+0x315/0x4a0 [ 1362.254550][T13249] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 1362.254580][T13249] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 1362.254611][T13249] __report_bug+0x29a/0x540 [ 1362.254645][T13249] ? mac80211_hwsim_sta_rc_update+0x696/0x860 [ 1362.254674][T13249] ? __pfx___report_bug+0x10/0x10 [ 1362.254714][T13249] ? kasan_save_track+0x4f/0x80 [ 1362.254741][T13249] ? __kasan_kmalloc+0x93/0xb0 [ 1362.254766][T13249] ? __kmalloc_cache_noprof+0x1f2/0x6b0 [ 1362.254796][T13249] ? sta_info_insert_rcu+0x70f/0x2760 [ 1362.254822][T13249] ? sta_info_insert+0x16/0xc0 [ 1362.254846][T13249] ? rdev_add_station+0xfc/0x270 [ 1362.254885][T13249] report_bug_entry+0x19a/0x290 [ 1362.254915][T13249] ? mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 1362.254940][T13249] ? mac80211_hwsim_sta_rc_update+0x6f9/0x860 [ 1362.254966][T13249] handle_bug+0xca/0x200 [ 1362.254999][T13249] exc_invalid_op+0x1a/0x50 [ 1362.255032][T13249] asm_exc_invalid_op+0x1a/0x20 [ 1362.255051][T13249] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 1362.255080][T13249] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 d6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 d9 8e 53 fb 90 0f 0b [ 1362.255098][T13249] RSP: 0018:ffffc90008f66ec0 EFLAGS: 00010283 [ 1362.255116][T13249] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff888024a01280 [ 1362.255130][T13249] RDX: 0000000000000000 RSI: ffff88805dd935e2 RDI: ffffffff8f53aa90 [ 1362.255145][T13249] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 1362.255159][T13249] R10: 0000000000000100 R11: 000000000000000d R12: 0000000000000000 [ 1362.255172][T13249] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 1362.255215][T13249] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 1362.255249][T13249] mac80211_hwsim_sta_add+0xa4/0x350 [ 1362.255281][T13249] drv_sta_state+0x86a/0x1760 [ 1362.255314][T13249] sta_info_insert_rcu+0x1712/0x2760 [ 1362.255343][T13249] ? sta_info_insert_rcu+0x2d2/0x2760 [ 1362.255389][T13249] ? ieee80211_add_station+0x4f1/0x6a0 [ 1362.255418][T13249] sta_info_insert+0x16/0xc0 [ 1362.255444][T13249] rdev_add_station+0xfc/0x270 [ 1362.255475][T13249] nl80211_new_station+0x1860/0x1c70 [ 1362.255520][T13249] ? __pfx_nl80211_new_station+0x10/0x10 [ 1362.255541][T13249] ? netdev_run_todo+0xd5c/0xde0 [ 1362.255596][T13249] ? nl80211_pre_doit+0x4f1/0x930 [ 1362.255625][T13249] genl_family_rcv_msg_doit+0x22a/0x330 [ 1362.255656][T13249] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1362.255678][T13249] ? rcu_is_watching+0x15/0xb0 [ 1362.255720][T13249] ? bpf_lsm_capable+0x9/0x20 [ 1362.255743][T13249] ? security_capable+0x7e/0x2c0 [ 1362.255772][T13249] genl_rcv_msg+0x61c/0x7a0 [ 1362.255803][T13249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1362.255824][T13249] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1362.255843][T13249] ? __pfx_nl80211_new_station+0x10/0x10 [ 1362.255865][T13249] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1362.255897][T13249] ? __pfx_ref_tracker_free+0x10/0x10 [ 1362.255920][T13249] ? __skb_clone+0x63/0x7a0 [ 1362.255951][T13249] netlink_rcv_skb+0x232/0x4b0 [ 1362.255982][T13249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1362.256007][T13249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1362.256054][T13249] ? netlink_deliver_tap+0x2e/0x1b0 [ 1362.256083][T13249] ? netlink_deliver_tap+0x2e/0x1b0 [ 1362.256117][T13249] genl_rcv+0x28/0x40 [ 1362.256137][T13249] netlink_unicast+0x831/0x9f0 [ 1362.256174][T13249] ? __pfx_netlink_unicast+0x10/0x10 [ 1362.256200][T13249] ? __alloc_skb+0x193/0x390 [ 1362.256230][T13249] ? netlink_sendmsg+0x650/0xb40 [ 1362.256257][T13249] ? skb_put+0x11b/0x210 [ 1362.256282][T13249] netlink_sendmsg+0x813/0xb40 [ 1362.256323][T13249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.256364][T13249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1362.256398][T13249] ____sys_sendmsg+0xa4e/0xac0 [ 1362.256422][T13249] ? __might_fault+0xaf/0x130 [ 1362.256460][T13249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1362.256491][T13249] ? import_iovec+0x73/0xa0 [ 1362.256518][T13249] ___sys_sendmsg+0x2a5/0x360 [ 1362.256530][T13249] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.256546][T13249] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.256563][T13249] ? futex_wait+0x29a/0x380 [ 1362.256594][T13249] ? __fget_files+0x2a/0x420 [ 1362.256605][T13249] ? __fget_files+0x3a6/0x420 [ 1362.256622][T13249] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1362.256640][T13249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1362.256658][T13249] ? rcu_is_watching+0x15/0xb0 [ 1362.256681][T13249] do_syscall_64+0xe2/0xf80 [ 1362.256696][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.256707][T13249] ? trace_irq_disable+0x37/0x100 [ 1362.256722][T13249] ? clear_bhb_loop+0x60/0xb0 [ 1362.256736][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.256747][T13249] RIP: 0033:0x7fd160e8aeb9 [ 1362.256758][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.256768][T13249] RSP: 002b:00007fd15f0e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.256780][T13249] RAX: ffffffffffffffda RBX: 00007fd161105fa0 RCX: 00007fd160e8aeb9 [ 1362.256788][T13249] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 1362.256796][T13249] RBP: 00007fd160ef8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1362.256803][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.256810][T13249] R13: 00007fd161106038 R14: 00007fd161105fa0 R15: 00007ffcd81d5f78 [ 1362.256830][T13249] [ 1362.257233][T13249] Kernel Offset: disabled