last executing test programs: 15m12.716075403s ago: executing program 2 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 15m10.009731048s ago: executing program 2 (id=544): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r8}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 15m8.627254956s ago: executing program 2 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) clock_gettime(0xfffffffffffffffe, 0x0) 15m7.569021431s ago: executing program 2 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 15m6.081993596s ago: executing program 2 (id=550): getpgrp(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 15m4.79535724s ago: executing program 2 (id=553): syz_usb_connect(0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = dup(0xffffffffffffffff) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000042a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m46.635950314s ago: executing program 32 (id=553): syz_usb_connect(0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = dup(0xffffffffffffffff) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000042a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m26.23133778s ago: executing program 3 (id=595): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x84, 0x2, "46e2"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x81, 0x2, "b822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 14m18.922558666s ago: executing program 3 (id=605): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x5, 0x1) 14m17.901827423s ago: executing program 3 (id=607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 14m10.598309232s ago: executing program 3 (id=621): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x30383653, 0x4, 0x800, 0x4, 0x5, 0x4, 0x0, 0x4, 0x1, 0x6}}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_print_times', 0x10902, 0x60) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000080)={0x9, 0x1, 0x7, {0x400e802, 0x3, 0x400, 0x4}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x84, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xfffffffffffffefb, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048050) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) 14m9.610137977s ago: executing program 3 (id=622): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 14m8.954508469s ago: executing program 3 (id=624): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000200000000000000000000001800000003000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 14m5.562816191s ago: executing program 1 (id=630): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1, 0x6, 0x8}, &(0x7f0000000080)=0x8) 14m5.143974966s ago: executing program 1 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 14m4.028939984s ago: executing program 1 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 14m2.848663692s ago: executing program 1 (id=635): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0xffffffff, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 14m1.377425338s ago: executing program 1 (id=637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) 14m0.107363858s ago: executing program 1 (id=639): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2) 13m53.128122213s ago: executing program 33 (id=624): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000200000000000000000000001800000003000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 13m44.810179776s ago: executing program 34 (id=639): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2) 4m20.677194854s ago: executing program 4 (id=2210): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) 4m15.352933846s ago: executing program 4 (id=2224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) 4m14.18390786s ago: executing program 4 (id=2228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xa, 0xaa, &(0x7f0000000140)=""/170, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x5000, 0x3, 0x2, 0x0, 0x0, [{0x5, 0x8, 0x6, '\x00', 0x9}, {0x3, 0x1, 0xd1, '\x00', 0x3}, {0xfe, 0x5, 0x3, '\x00', 0x69}, {0x0, 0x4, 0x19, '\x00', 0xff}, {0x1, 0xd, 0x2, '\x00', 0x7}, {0x1, 0x27, 0x3, '\x00', 0x7}, {0xc, 0x9, 0x2, '\x00', 0x4}, {0x85, 0x1, 0x6, '\x00', 0x7}, {0x9, 0x9, 0x1, '\x00', 0x6}, {0x8, 0x4, 0xd, '\x00', 0x5}, {0xff, 0xb6, 0x3, '\x00', 0x80}, {0x7, 0x0, 0x81, '\x00', 0x3}, {0x8, 0x1, 0x4, '\x00', 0x2}, {0x8, 0xfe, 0x60, '\x00', 0x1}, {0x7, 0x3, 0x3, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0x2}, {0x8, 0x4, 0xec, '\x00', 0x5}, {0x8, 0x8}, {0x8, 0x8, 0x5, '\x00', 0x1}, {0x3, 0x8, 0x6, '\x00', 0x4}, {0x7, 0x3, 0xf, '\x00', 0x7}, {0x2, 0x0, 0xf1, '\x00', 0xcf}, {0x2, 0x9, 0x5, '\x00', 0x7}, {0x2, 0x0, 0x9, '\x00', 0x7}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000300), &(0x7f0000000000)=0x6e) sendmsg$nl_route(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r7, &(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000042) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 4m9.952619995s ago: executing program 4 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) 4m8.349542837s ago: executing program 4 (id=2237): openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400e}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m5.594699391s ago: executing program 4 (id=2242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap$xdp(&(0x7f0000174000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x180000000) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 3m39.779945203s ago: executing program 6 (id=2281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d5", 0x9}], 0x1}, 0x0) 3m38.413948328s ago: executing program 6 (id=2283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 3m38.165782644s ago: executing program 6 (id=2286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 3m36.504926565s ago: executing program 6 (id=2288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58c", 0xa}], 0x1}, 0x0) 3m34.698642452s ago: executing program 6 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='nilfs2\x00', 0x2208004, 0x0) 3m32.291234496s ago: executing program 6 (id=2293): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) 3m16.489169173s ago: executing program 35 (id=2293): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) 4.239330693s ago: executing program 5 (id=2748): creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 4.206531539s ago: executing program 5 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x40) 4.117034479s ago: executing program 5 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) 4.004789367s ago: executing program 5 (id=2751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) 3.88313642s ago: executing program 5 (id=2752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000002780)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r6, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 3.391439893s ago: executing program 0 (id=2754): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) shutdown(r0, 0x0) 3.204098064s ago: executing program 7 (id=2755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbf9, {0x2, 0x20, 0x20, 0xfe, 0x0, 0x0, 0xc8, 0x0, 0x2000}}, 0x1c}}, 0x20048004) 2.68765619s ago: executing program 0 (id=2756): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.686675222s ago: executing program 7 (id=2757): creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x8001}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.685914406s ago: executing program 5 (id=2758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009f000000000000000088a8600081"], 0x3a) 2.455186816s ago: executing program 7 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x40) 2.454590376s ago: executing program 0 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) 2.106610417s ago: executing program 0 (id=2761): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.034153217s ago: executing program 7 (id=2762): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) 1.057595008s ago: executing program 0 (id=2763): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x3035, 0x1558, 0x20, 0x0, 0x0) 835.271929ms ago: executing program 7 (id=2764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x80, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60dd690b004afe0000000000000000000000ffff00000000ff020000000000000000000000000001242081000000000000000000000086dd080088be94953afc48f407cb0100000000000000080022eb0000000020000000020000000000000800655800"/123], 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @empty, 0x8, 0x70, 0x9, 0x100, 0x7, 0x40080}) syz_emit_ethernet(0x7a, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x3d, 0x0, 0x0, 0xfffc, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010111, 0x10000}, {@empty}, {@local}, {@local}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semtimedop(r1, &(0x7f0000000300)=[{0x0, 0x36, 0x1800}], 0x1, 0x0) 556.215763ms ago: executing program 7 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='nilfs2\x00', 0x2208004, 0x0) 0s ago: executing program 0 (id=2766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000002780)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r6, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) kernel console output (not intermixed with test programs): [ T5926] usb 1-1: no configurations [ 810.200023][ T5926] usb 1-1: can't read configurations, error -22 [ 810.200551][ T5926] usb usb1-port1: attempt power cycle [ 810.534967][T12060] overlayfs: missing 'lowerdir' [ 810.547027][ T5926] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 810.575830][ T5926] usb 1-1: no configurations [ 810.575848][ T5926] usb 1-1: can't read configurations, error -22 [ 810.707255][ T5926] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 810.738076][ T5926] usb 1-1: no configurations [ 810.738088][ T5926] usb 1-1: can't read configurations, error -22 [ 810.738502][ T5926] usb usb1-port1: unable to enumerate USB device [ 812.057100][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 813.691628][T11286] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 813.882754][T12089] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.919314][T11286] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 813.919352][T11286] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 813.919377][T11286] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.919401][T11286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 813.919433][T11286] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 813.919453][T11286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.925233][T11286] usb 5-1: config 0 descriptor?? [ 813.959023][T12087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 814.194516][T12087] 9pnet_fd: Insufficient options for proto=fd [ 814.219745][T12089] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.258721][T11286] usbhid 5-1:0.0: can't add hid device: -71 [ 814.258851][T11286] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 814.284742][T11286] usb 5-1: USB disconnect, device number 33 [ 814.350058][T12093] siw: device registration error -23 [ 814.410220][T12089] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.560444][T12089] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.765038][ T3727] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.766965][ T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.805309][ T3727] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.805397][ T3727] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.567631][ T5912] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 816.924692][ T5912] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 816.924722][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.103471][ T5912] usb 5-1: config 0 descriptor?? [ 818.262287][ T5912] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 818.262574][ T5912] asix 5-1:0.0: probe with driver asix failed with error -32 [ 818.326884][T11800] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 818.410392][T12132] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 818.544272][T11800] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 818.544288][T11800] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 818.549857][T11800] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 818.549889][T11800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.549906][T11800] usb 7-1: Product: syz [ 818.549918][T11800] usb 7-1: Manufacturer: syz [ 818.549930][T11800] usb 7-1: SerialNumber: syz [ 818.741826][T12135] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.998735][T11800] usb 7-1: USB disconnect, device number 17 [ 819.095538][T12135] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.392386][ T6455] usb 5-1: USB disconnect, device number 34 [ 819.712296][T12135] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.404454][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 820.404796][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 822.812005][T12135] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.286952][ T5927] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 823.661878][ T5927] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 823.661906][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.706140][ T5927] usb 1-1: config 0 descriptor?? [ 823.731967][ T6674] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.109517][T12184] overlayfs: missing 'workdir' [ 824.269886][ T7912] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.329868][ T5927] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 824.330040][ T5927] asix 1-1:0.0: probe with driver asix failed with error -32 [ 824.408664][ T7912] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.484740][ T13] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.096178][ T5927] usb 1-1: USB disconnect, device number 47 [ 826.647082][ T5927] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 826.796956][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 826.799727][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.799751][ T5927] usb 6-1: config 0 has no interfaces? [ 826.803733][ T5927] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 826.803759][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 826.803778][ T5927] usb 6-1: Product: syz [ 826.803791][ T5927] usb 6-1: Manufacturer: syz [ 826.803804][ T5927] usb 6-1: SerialNumber: syz [ 826.872626][ T5927] usb 6-1: config 0 descriptor?? [ 827.747744][ T5927] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 827.911394][ T5927] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.911419][ T5927] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 827.911454][ T5927] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 827.911475][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.986520][ T5927] usb 8-1: config 0 descriptor?? [ 830.189775][T11821] usb 6-1: USB disconnect, device number 30 [ 830.473211][ T9] usb 8-1: USB disconnect, device number 38 [ 831.671415][ T5927] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 831.817023][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 831.820054][ T5927] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 831.820080][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.820098][ T5927] usb 1-1: config 0 has no interface number 0 [ 831.820144][ T5927] usb 1-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.825195][ T5927] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 831.825225][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.825243][ T5927] usb 1-1: Product: syz [ 831.825257][ T5927] usb 1-1: Manufacturer: syz [ 831.825271][ T5927] usb 1-1: SerialNumber: syz [ 831.914299][ T5927] usb 1-1: config 0 descriptor?? [ 832.209664][ T5927] usb 1-1: USB disconnect, device number 48 [ 832.297130][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 832.312770][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 832.379935][ T9371] udevd[9371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.847427][T11821] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 832.866997][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 833.007787][T11821] usb 5-1: Using ep0 maxpacket: 32 [ 833.009400][T11821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.009414][T11821] usb 5-1: config 0 has no interfaces? [ 833.011359][T11821] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 833.011384][T11821] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 833.011404][T11821] usb 5-1: Product: syz [ 833.011411][T11821] usb 5-1: Manufacturer: syz [ 833.011418][T11821] usb 5-1: SerialNumber: syz [ 833.021516][ T31] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 833.021543][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.089744][T11821] usb 5-1: config 0 descriptor?? [ 833.093246][ T31] usb 6-1: config 0 descriptor?? [ 835.770938][ T31] usb 5-1: USB disconnect, device number 35 [ 835.905356][T11821] usb 6-1: USB disconnect, device number 31 [ 838.127122][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1817'. [ 838.297042][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 839.046941][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 839.207467][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 839.207495][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.219381][ T9] usb 1-1: config 0 descriptor?? [ 841.037084][T11286] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 841.044534][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1829'. [ 841.213076][T11286] usb 5-1: Using ep0 maxpacket: 32 [ 841.217286][T11286] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 841.217311][T11286] usb 5-1: config 0 has no interface number 0 [ 841.217358][T11286] usb 5-1: config 0 interface 184 has no altsetting 0 [ 841.221968][T11286] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 841.221997][T11286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.222015][T11286] usb 5-1: Product: syz [ 841.222027][T11286] usb 5-1: Manufacturer: syz [ 841.222040][T11286] usb 5-1: SerialNumber: syz [ 841.239775][ T31] usb 1-1: USB disconnect, device number 49 [ 841.252733][T11286] usb 5-1: config 0 descriptor?? [ 841.291278][T11286] smsc75xx v1.0.0 [ 841.396999][T11821] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 841.547765][T11821] usb 6-1: Using ep0 maxpacket: 32 [ 841.551105][T11821] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 841.551122][T11821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.551131][T11821] usb 6-1: config 0 has no interface number 0 [ 841.551157][T11821] usb 6-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 841.553028][T11821] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 841.553044][T11821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.553054][T11821] usb 6-1: Product: syz [ 841.553060][T11821] usb 6-1: Manufacturer: syz [ 841.553068][T11821] usb 6-1: SerialNumber: syz [ 841.565097][T11821] usb 6-1: config 0 descriptor?? [ 842.011376][T11821] usb 6-1: USB disconnect, device number 32 [ 842.033587][T11286] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 842.033607][T11286] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 842.106535][ T9804] udevd[9804]: setting owner of /dev/bus/usb/006/032 to uid=0, gid=0 failed: No such file or directory [ 842.427491][T10025] udevd[10025]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.242262][T11286] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 843.242281][T11286] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 843.242291][T11286] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 843.242469][T11286] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 843.378130][T11286] usb 5-1: USB disconnect, device number 36 [ 843.802652][T12417] netlink: 'syz.5.1842': attribute type 3 has an invalid length. [ 844.226924][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 844.357563][T11800] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 844.386923][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 844.390431][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 844.390521][ T9] usb 7-1: no configurations [ 844.390532][ T9] usb 7-1: can't read configurations, error -22 [ 844.393005][T11286] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 844.510984][T11800] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 844.511010][T11800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.511027][T11800] usb 1-1: config 0 has no interface number 0 [ 844.511172][T11800] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 844.511193][T11800] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.536959][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 844.544026][T11286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 844.546671][T11286] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 844.546696][T11286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.546714][T11286] usb 5-1: Product: syz [ 844.546722][T11286] usb 5-1: Manufacturer: syz [ 844.546729][T11286] usb 5-1: SerialNumber: syz [ 844.555745][T11286] usb 5-1: config 0 descriptor?? [ 844.615987][T11800] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 844.616009][T11800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.616026][T11800] usb 1-1: Product: syz [ 844.619563][T11800] usb 1-1: Manufacturer: syz [ 844.619584][T11800] usb 1-1: SerialNumber: syz [ 844.746963][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 844.747626][T11800] usb 1-1: config 0 descriptor?? [ 844.756641][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 844.778587][ T9] usb 7-1: no configurations [ 844.778606][ T9] usb 7-1: can't read configurations, error -22 [ 844.781853][ T9] usb usb7-port1: attempt power cycle [ 845.157199][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 845.220011][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 845.321768][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 845.322511][ T9] usb 7-1: no configurations [ 845.322534][ T9] usb 7-1: can't read configurations, error -22 [ 845.477145][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 845.498159][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 845.502837][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 845.502983][ T9] usb 7-1: no configurations [ 845.502995][ T9] usb 7-1: can't read configurations, error -22 [ 845.540964][ T9] usb usb7-port1: unable to enumerate USB device [ 845.756639][T11800] usb 1-1: USB disconnect, device number 50 [ 845.926190][T11286] usb 5-1: USB disconnect, device number 37 [ 846.031425][T11974] udevd[11974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.773295][T12448] netlink: 'syz.0.1855': attribute type 3 has an invalid length. [ 847.327042][T11800] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 847.495517][T11800] usb 1-1: Using ep0 maxpacket: 32 [ 847.506543][T11800] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 847.506569][T11800] usb 1-1: config 0 has no interface number 0 [ 847.506616][T11800] usb 1-1: config 0 interface 184 has no altsetting 0 [ 847.536289][T11800] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 847.536318][T11800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.536336][T11800] usb 1-1: Product: syz [ 847.536348][T11800] usb 1-1: Manufacturer: syz [ 847.536361][T11800] usb 1-1: SerialNumber: syz [ 847.653503][T11800] usb 1-1: config 0 descriptor?? [ 847.676005][T11800] smsc75xx v1.0.0 [ 847.979630][T12469] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 848.013591][ T3799] Bluetooth: hci4: Frame reassembly failed (-84) [ 848.281331][T11800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 848.281361][T11800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 849.976976][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 850.047057][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 850.345096][T11800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 850.345116][T11800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 850.345127][T11800] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 850.345307][T11800] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 850.398928][T11800] usb 1-1: USB disconnect, device number 51 [ 850.676469][T12493] netlink: 'syz.6.1870': attribute type 3 has an invalid length. [ 850.737062][T11286] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 850.902309][T11286] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 850.902368][T11286] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 850.902390][T11286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.976143][T11286] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 850.976217][T11286] imon 6-1:16.0: unable to initialize intf0, err -19 [ 850.976226][T11286] imon:imon_probe: failed to initialize context! [ 850.976232][T11286] imon 6-1:16.0: unable to register, err -19 [ 851.210632][ T31] usb 6-1: USB disconnect, device number 33 [ 851.377165][T11286] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 851.590919][T11286] usb 5-1: Using ep0 maxpacket: 32 [ 851.593274][T11286] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 851.593299][T11286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.593316][T11286] usb 5-1: config 0 has no interface number 0 [ 851.593365][T11286] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.617897][T11286] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 851.617926][T11286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.617944][T11286] usb 5-1: Product: syz [ 851.617956][T11286] usb 5-1: Manufacturer: syz [ 851.617968][T11286] usb 5-1: SerialNumber: syz [ 851.709221][T11286] usb 5-1: config 0 descriptor?? [ 852.406923][T11800] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 852.561090][T11800] usb 6-1: Using ep0 maxpacket: 32 [ 852.565425][T11800] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 852.565451][T11800] usb 6-1: config 0 has no interface number 0 [ 852.565503][T11800] usb 6-1: config 0 interface 184 has no altsetting 0 [ 852.604071][T11800] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 852.604098][T11800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.604115][T11800] usb 6-1: Product: syz [ 852.604128][T11800] usb 6-1: Manufacturer: syz [ 852.604141][T11800] usb 6-1: SerialNumber: syz [ 852.614506][T11286] usb 5-1: USB disconnect, device number 38 [ 852.688986][T11800] usb 6-1: config 0 descriptor?? [ 852.709352][T11800] smsc75xx v1.0.0 [ 852.833181][T12522] netlink: 'syz.7.1885': attribute type 3 has an invalid length. [ 852.884787][ T9371] udevd[9371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.317946][T11800] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 853.317975][T11800] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 853.846984][T11286] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 853.999905][T11286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.999937][T11286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.999973][T11286] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 854.000003][T11286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.021935][T11286] usb 5-1: config 0 descriptor?? [ 854.592959][T11286] apple 0003:05AC:0262.000B: hidraw0: USB HID v0.00 Device [HID 05ac:0262] on usb-dummy_hcd.4-1/input0 [ 854.759324][T11286] usb 5-1: USB disconnect, device number 39 [ 854.764223][T11800] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 854.764241][T11800] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 854.764252][T11800] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 854.764430][T11800] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 855.181882][T11800] usb 6-1: USB disconnect, device number 34 [ 855.276295][ T7912] Bluetooth: hci4: Frame reassembly failed (-84) [ 855.418032][T12553] netlink: 'syz.6.1896': attribute type 3 has an invalid length. [ 856.877043][T11286] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 857.071441][T11286] usb 1-1: Using ep0 maxpacket: 8 [ 857.074217][T11286] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 857.074236][T11286] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.074246][T11286] usb 1-1: config 0 has no interfaces? [ 857.074265][T11286] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 857.074277][T11286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.121522][T11286] usb 1-1: config 0 descriptor?? [ 857.339529][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 857.393064][T11286] usb 1-1: USB disconnect, device number 52 [ 857.571054][T12580] tipc: Enabling of bearer rejected, failed to enable media [ 859.727269][ T5912] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 859.923432][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 860.077070][ T5912] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 860.077099][ T5912] usb 7-1: config 0 has no interface number 0 [ 860.077210][ T5912] usb 7-1: config 0 interface 184 has no altsetting 0 [ 860.096022][ T5912] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 860.096054][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.096073][ T5912] usb 7-1: Product: syz [ 860.096087][ T5912] usb 7-1: Manufacturer: syz [ 860.096101][ T5912] usb 7-1: SerialNumber: syz [ 860.173132][ T5912] usb 7-1: config 0 descriptor?? [ 860.207444][ T5912] smsc75xx v1.0.0 [ 860.820967][ T5912] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 860.820994][ T5912] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.937489][ T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 861.087255][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 861.092290][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 861.092314][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.092342][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 861.107966][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 861.107994][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.108011][ T31] usb 5-1: Product: syz [ 861.108023][ T31] usb 5-1: Manufacturer: syz [ 861.108035][ T31] usb 5-1: SerialNumber: syz [ 862.141262][T12631] vivid-000: kernel_thread() failed [ 862.152163][ T31] usb 5-1: 0:2 : does not exist [ 862.363816][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.364311][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.364889][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.365381][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.365592][ T31] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 862.366920][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.425903][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.427452][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 862.501474][ T31] usb 5-1: USB disconnect, device number 40 [ 862.648257][T10025] udevd[10025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.917576][ T5912] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 862.917605][ T5912] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 862.917620][ T5912] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 862.917902][ T5912] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 862.925364][ T5912] usb 7-1: USB disconnect, device number 22 [ 864.837110][ T6455] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 864.992537][ T6455] usb 8-1: config 5 has an invalid interface number: 123 but max is 0 [ 864.992567][ T6455] usb 8-1: config 5 has no interface number 0 [ 864.992613][ T6455] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 864.992639][ T6455] usb 8-1: config 5 interface 123 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.992664][ T6455] usb 8-1: config 5 interface 123 has no altsetting 0 [ 864.995995][ T6455] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 864.996028][ T6455] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.996047][ T6455] usb 8-1: Product: syz [ 864.996059][ T6455] usb 8-1: Manufacturer: syz [ 864.996071][ T6455] usb 8-1: SerialNumber: syz [ 865.393195][ T6455] comedi comedi5: Wrong number of endpoints [ 865.393218][ T6455] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device. [ 865.473543][ T6455] usb 8-1: USB disconnect, device number 39 [ 866.642204][T12670] vivid-003: kernel_thread() failed [ 867.047237][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 868.457097][ T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 868.967728][T12697] tmpfs: Unknown parameter 'quot' [ 868.997823][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 869.173221][ T31] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 869.173303][ T31] usb 5-1: config 0 has no interface number 0 [ 869.173749][ T31] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 869.735860][ T31] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 869.735891][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.735909][ T31] usb 5-1: Product: syz [ 869.735921][ T31] usb 5-1: Manufacturer: syz [ 869.735934][ T31] usb 5-1: SerialNumber: syz [ 869.821311][ T31] usb 5-1: config 0 descriptor?? [ 870.206025][ T31] usb 5-1: USB disconnect, device number 41 [ 870.262048][ T9371] udevd[9371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.385515][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.385588][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.417019][ T6455] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 870.595751][ T6455] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 870.595781][ T6455] usb 1-1: config 5 has no interface number 0 [ 870.595828][ T6455] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 870.595855][ T6455] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 870.595878][ T6455] usb 1-1: config 5 interface 123 has no altsetting 0 [ 870.716682][ T6455] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 870.716700][ T6455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.716711][ T6455] usb 1-1: Product: syz [ 870.716719][ T6455] usb 1-1: Manufacturer: syz [ 870.716726][ T6455] usb 1-1: SerialNumber: syz [ 871.119958][ T6455] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 871.173259][ T6455] usb 1-1: USB disconnect, device number 53 [ 871.496991][T11800] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 871.637122][T11800] usb 5-1: device descriptor read/64, error -71 [ 871.877105][T11800] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 872.017023][T11800] usb 5-1: device descriptor read/64, error -71 [ 872.124063][T12731] tmpfs: Unknown parameter 'quot' [ 872.290749][T11800] usb usb5-port1: attempt power cycle [ 873.137538][T11800] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 873.186329][T11800] usb 5-1: device descriptor read/8, error -71 [ 873.290259][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1960'. [ 873.417004][T11800] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 873.447727][T11800] usb 5-1: device descriptor read/8, error -71 [ 873.816964][ T6455] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 873.966939][ T6455] usb 6-1: Using ep0 maxpacket: 32 [ 873.969538][ T6455] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 873.969562][ T6455] usb 6-1: config 0 has no interface number 0 [ 873.969618][ T6455] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 873.973027][ T6455] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 873.973054][ T6455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.973073][ T6455] usb 6-1: Product: syz [ 873.973085][ T6455] usb 6-1: Manufacturer: syz [ 873.973098][ T6455] usb 6-1: SerialNumber: syz [ 873.996988][ T31] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 874.061657][ T6455] usb 6-1: config 0 descriptor?? [ 874.206103][ T31] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 874.206131][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.206148][ T31] usb 1-1: config 0 has no interface number 0 [ 874.206256][ T31] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 874.206277][ T31] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.223507][T11800] usb usb5-port1: unable to enumerate USB device [ 874.318756][ T31] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 874.318786][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.318804][ T31] usb 1-1: Product: syz [ 874.318817][ T31] usb 1-1: Manufacturer: syz [ 874.318829][ T31] usb 1-1: SerialNumber: syz [ 874.379839][ T31] usb 1-1: config 0 descriptor?? [ 875.043006][ T6455] usb 6-1: USB disconnect, device number 35 [ 875.103517][ T9804] udevd[9804]: setting mode of /dev/bus/usb/006/035 to 020664 failed: No such file or directory [ 875.103718][ T9804] udevd[9804]: setting owner of /dev/bus/usb/006/035 to uid=0, gid=0 failed: No such file or directory [ 875.867107][T12763] netlink: 'syz.5.1967': attribute type 3 has an invalid length. [ 875.867353][T12763] netlink: 'syz.5.1967': attribute type 3 has an invalid length. [ 876.099449][ T31] usb 1-1: USB disconnect, device number 54 [ 876.270845][ T9371] udevd[9371]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.053732][ T6455] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 878.247830][ T6455] usb 7-1: device descriptor read/64, error -71 [ 878.577809][ T6455] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 879.067864][ T6455] usb 7-1: device descriptor read/64, error -71 [ 879.263010][ T6455] usb usb7-port1: attempt power cycle [ 880.587319][ T6455] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 880.681368][ T6455] usb 7-1: device descriptor read/8, error -71 [ 883.177444][T12839] fuse: Bad value for 'fd' [ 883.242585][ T5927] Process accounting resumed [ 885.287051][ T5927] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 885.546920][ T5927] usb 6-1: device descriptor read/64, error -71 [ 885.796907][ T5927] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 885.959967][ T5927] usb 6-1: device descriptor read/64, error -71 [ 886.067881][ T5927] usb usb6-port1: attempt power cycle [ 886.477898][ T5927] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 886.582446][ T5927] usb 6-1: device descriptor read/8, error -71 [ 886.898951][T12877] syzkaller0: entered promiscuous mode [ 886.898986][T12877] syzkaller0: entered allmulticast mode [ 886.917232][ T5927] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 886.937834][ T5927] usb 6-1: device descriptor read/8, error -71 [ 887.047576][ T5927] usb usb6-port1: unable to enumerate USB device [ 889.049480][T12898] fuse: Bad value for 'fd' [ 889.051933][ T9] Process accounting resumed [ 889.918197][T12918] trusted_key: encrypted_key: insufficient parameters specified [ 891.431159][T12931] fuse: Bad value for 'fd' [ 891.492481][ T5927] Process accounting resumed [ 892.563409][ T5912] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 892.736970][ T5912] usb 1-1: device descriptor read/64, error -71 [ 892.962179][T12937] syzkaller0: entered promiscuous mode [ 892.962385][T12937] syzkaller0: entered allmulticast mode [ 892.977004][ T5912] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 893.106919][ T5912] usb 1-1: device descriptor read/64, error -71 [ 893.217396][ T5912] usb usb1-port1: attempt power cycle [ 893.687004][ T5912] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 893.707760][ T5912] usb 1-1: device descriptor read/8, error -71 [ 893.971663][ T5912] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 893.987829][ T5912] usb 1-1: device descriptor read/8, error -71 [ 894.097400][ T5912] usb usb1-port1: unable to enumerate USB device [ 894.147075][ T6455] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 894.297028][ T6455] usb 5-1: Using ep0 maxpacket: 16 [ 894.300473][ T6455] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 894.300496][ T6455] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.300513][ T6455] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.303648][ T6455] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 894.303675][ T6455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.303692][ T6455] usb 5-1: Product: syz [ 894.303706][ T6455] usb 5-1: Manufacturer: syz [ 894.303718][ T6455] usb 5-1: SerialNumber: syz [ 894.826231][T12958] trusted_key: encrypted_key: insufficient parameters specified [ 894.981025][ T6455] usb 5-1: 0:2 : does not exist [ 895.871725][ T6455] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 895.989586][ T6455] usb 5-1: USB disconnect, device number 46 [ 896.833949][ T9371] udevd[9371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.971122][T11286] IPVS: starting estimator thread 0... [ 897.206991][T12970] IPVS: using max 8 ests per chain, 19200 per kthread [ 899.782236][ T6455] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 899.782827][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 899.991772][ T6455] usb 7-1: device descriptor read/64, error -32 [ 901.697158][ T6455] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 902.067555][ T6455] usb 7-1: device descriptor read/64, error -71 [ 902.546668][T13004] trusted_key: encrypted_key: insufficient parameters specified [ 902.782462][ T6455] usb usb7-port1: attempt power cycle [ 904.323818][T11821] IPVS: starting estimator thread 0... [ 904.407406][T13015] IPVS: using max 7 ests per chain, 16800 per kthread [ 905.432116][T13038] fuse: Invalid rootmode [ 905.444155][T11821] Process accounting resumed [ 907.356924][ T6455] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 907.487027][ T6455] usb 6-1: device descriptor read/64, error -71 [ 907.727124][ T6455] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 907.858526][ T6455] usb 6-1: device descriptor read/64, error -71 [ 907.969024][ T6455] usb usb6-port1: attempt power cycle [ 908.306997][ T6455] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 908.328209][ T6455] usb 6-1: device descriptor read/8, error -71 [ 909.496318][ T6455] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 909.537711][ T6455] usb 6-1: device descriptor read/8, error -71 [ 909.647789][ T6455] usb usb6-port1: unable to enumerate USB device [ 909.727597][T13077] fuse: Invalid rootmode [ 909.729373][ T6648] Process accounting resumed [ 914.537971][T13133] fuse: Bad value for 'rootmode' [ 914.545039][ T6648] Process accounting resumed [ 926.977726][T13210] vivid-004: kernel_thread() failed [ 932.040145][T13271] vivid-001: kernel_thread() failed [ 932.264689][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.265077][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.850558][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 934.029252][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 934.032028][ T9] usb 1-1: config 0 has no interfaces? [ 934.032071][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 934.032092][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.064305][ T9] usb 1-1: config 0 descriptor?? [ 938.198153][ T1830] usb 1-1: USB disconnect, device number 59 [ 944.206546][ T1830] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 944.567419][ T1830] usb 7-1: Using ep0 maxpacket: 8 [ 944.586724][ T1830] usb 7-1: config 0 has no interfaces? [ 944.586905][ T1830] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 944.586926][ T1830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.596159][ T1830] usb 7-1: config 0 descriptor?? [ 946.621188][ T9] usb 7-1: USB disconnect, device number 30 [ 977.411490][T13626] fuse: Unknown parameter 'user_id00000000000000000000' [ 978.172847][ T31] Process accounting resumed [ 982.371183][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 986.073794][T13675] fuse: Bad value for 'fd' [ 986.078917][T11286] Process accounting resumed [ 990.704677][T13721] trusted_key: encrypted_key: key user:syz not found [ 991.696286][T13728] fuse: Bad value for 'fd' [ 991.700175][ T5927] Process accounting resumed [ 993.572325][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.572402][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.674419][T13762] trusted_key: encrypted_key: key user:syz not found [ 997.907263][T13768] fuse: Bad value for 'fd' [ 997.910125][ T1830] Process accounting resumed [ 1002.662936][T13819] trusted_key: encrypted_key: key user:syz not found [ 1006.846013][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1008.087397][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.106358][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.198865][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.224333][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.226486][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1010.537033][ T5158] Bluetooth: hci3: command tx timeout [ 1013.186908][ T5847] Bluetooth: hci3: command tx timeout [ 1014.650702][T13846] lo speed is unknown, defaulting to 1000 [ 1015.259362][ T5847] Bluetooth: hci3: command tx timeout [ 1017.511262][ T5847] Bluetooth: hci3: command tx timeout [ 1019.394324][T13911] afs: Unknown parameter 'dynkaller' [ 1019.404071][T13846] chnl_net:caif_netlink_parms(): no params data found [ 1024.380059][T13945] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1024.443619][ T3727] Bluetooth: hci4: Frame reassembly failed (-84) [ 1024.457877][T13846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.458044][T13846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.458300][T13846] bridge_slave_0: entered allmulticast mode [ 1024.477901][T13846] bridge_slave_0: entered promiscuous mode [ 1024.495393][T13846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.495622][T13846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.495877][T13846] bridge_slave_1: entered allmulticast mode [ 1024.556940][T13846] bridge_slave_1: entered promiscuous mode [ 1025.204140][T13846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.244661][T13846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.097943][T13846] team0: Port device team_slave_0 added [ 1026.345912][T13846] team0: Port device team_slave_1 added [ 1026.456893][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1027.373771][T13971] NILFS (loop6): device size too small [ 1029.457297][T13846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.457314][T13846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.457336][T13846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.459896][T13846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.459911][T13846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.459935][T13846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.653146][T13846] hsr_slave_0: entered promiscuous mode [ 1031.674800][T13846] hsr_slave_1: entered promiscuous mode [ 1031.690774][T13846] debugfs: 'hsr0' already exists in 'hsr' [ 1031.690808][T13846] Cannot create hsr debugfs directory [ 1034.310234][T14023] NILFS (loop6): device size too small [ 1037.227095][T14036] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1037.276399][ T1378] Bluetooth: hci4: Frame reassembly failed (-84) [ 1039.349720][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 1039.349994][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1043.666663][T14063] NILFS (loop7): device size too small [ 1049.847509][T13846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1051.134234][T13846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1051.370724][T13846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1051.449838][T13846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1053.951887][T13846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.044735][T13846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.100976][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.101152][ T6674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.142001][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.143046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.127383][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.127431][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.740700][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1058.763298][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1058.764956][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1058.766098][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1058.766559][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.902527][T14029] syz_tun (unregistering): left allmulticast mode [ 1060.937041][ T5847] Bluetooth: hci4: command tx timeout [ 1063.017265][ T5847] Bluetooth: hci4: command tx timeout [ 1064.952728][T12009] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.097012][ T5847] Bluetooth: hci4: command tx timeout [ 1065.246890][T14124] lo speed is unknown, defaulting to 1000 [ 1066.452991][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1066.472456][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1066.474067][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1066.475384][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1066.476267][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1066.751071][T12009] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.176915][ T5158] Bluetooth: hci4: command tx timeout [ 1067.611567][ T5912] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1068.636883][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1068.639300][ T5912] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1068.639326][ T5912] usb 1-1: config 0 has no interface number 0 [ 1068.639394][ T5912] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1068.642586][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1068.642611][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.642628][ T5912] usb 1-1: Product: syz [ 1068.642638][ T5912] usb 1-1: Manufacturer: syz [ 1068.642649][ T5912] usb 1-1: SerialNumber: syz [ 1068.653592][ T5912] usb 1-1: config 0 descriptor?? [ 1068.666154][ T5912] smsc75xx v1.0.0 [ 1068.699487][ T5158] Bluetooth: hci2: command tx timeout [ 1069.330421][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1069.330461][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1069.330477][ T5912] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1069.330794][ T5912] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1069.713338][T12009] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.608248][ T5927] usb 1-1: USB disconnect, device number 60 [ 1070.735208][T14181] lo speed is unknown, defaulting to 1000 [ 1070.777619][ T5158] Bluetooth: hci2: command tx timeout [ 1071.212561][T12009] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.237316][T14124] chnl_net:caif_netlink_parms(): no params data found [ 1072.892223][ T5158] Bluetooth: hci2: command tx timeout [ 1074.291657][T12009] bridge_slave_1: left allmulticast mode [ 1074.300327][T12009] bridge_slave_1: left promiscuous mode [ 1074.300669][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.390453][T12009] bridge_slave_0: left allmulticast mode [ 1074.390475][T12009] bridge_slave_0: left promiscuous mode [ 1074.390662][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.447081][ T5926] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1074.596871][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 1074.601384][ T5926] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1074.601410][ T5926] usb 8-1: config 0 has no interface number 0 [ 1074.601459][ T5926] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1074.604671][ T5926] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1074.604699][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.604717][ T5926] usb 8-1: Product: syz [ 1074.604730][ T5926] usb 8-1: Manufacturer: syz [ 1074.604743][ T5926] usb 8-1: SerialNumber: syz [ 1074.723120][ T5926] usb 8-1: config 0 descriptor?? [ 1074.797060][ T5926] smsc75xx v1.0.0 [ 1074.937517][ T5158] Bluetooth: hci2: command tx timeout [ 1075.230373][ T5926] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1075.230403][ T5926] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1075.230421][ T5926] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1075.230740][ T5926] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 1077.171153][ T1830] usb 8-1: USB disconnect, device number 40 [ 1085.986852][ T5852] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1086.137077][ T5852] usb 6-1: Using ep0 maxpacket: 32 [ 1086.139419][ T5852] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1086.139444][ T5852] usb 6-1: config 0 has no interface number 0 [ 1086.139496][ T5852] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1086.144460][ T5852] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1086.144487][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.144505][ T5852] usb 6-1: Product: syz [ 1086.144517][ T5852] usb 6-1: Manufacturer: syz [ 1086.144531][ T5852] usb 6-1: SerialNumber: syz [ 1086.179080][ T5852] usb 6-1: config 0 descriptor?? [ 1086.220543][ T5852] smsc75xx v1.0.0 [ 1086.589855][ T5852] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1086.589894][ T5852] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1086.589911][ T5852] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1086.592880][ T5852] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1087.174069][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.248818][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.278214][T12009] bond0 (unregistering): Released all slaves [ 1087.524172][T12009] tipc: Left network mode [ 1087.726545][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.727676][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.727926][T14124] bridge_slave_0: entered allmulticast mode [ 1087.730953][T14124] bridge_slave_0: entered promiscuous mode [ 1087.734574][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.734792][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.735109][T14124] bridge_slave_1: entered allmulticast mode [ 1087.741875][T14124] bridge_slave_1: entered promiscuous mode [ 1088.066897][ T1830] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1088.096874][ T5852] usb 6-1: USB disconnect, device number 45 [ 1088.200368][ T1830] usb 1-1: device descriptor read/64, error -71 [ 1088.476840][ T1830] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1088.516940][ T5927] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1088.558151][T14181] chnl_net:caif_netlink_parms(): no params data found [ 1088.607020][ T1830] usb 1-1: device descriptor read/64, error -71 [ 1088.688241][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.690718][ T5927] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1088.690746][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.717420][ T1830] usb usb1-port1: attempt power cycle [ 1088.736492][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.768042][ T5927] usb 8-1: config 0 descriptor?? [ 1088.986104][ T5927] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1089.078612][ T1830] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1089.099504][ T1830] usb 1-1: device descriptor read/8, error -71 [ 1089.206647][ T5927] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1089.206892][ T5927] [drm] Initialized udl on minor 2 [ 1089.392669][ T5927] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1089.393062][ T5927] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1089.418235][ T5912] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1089.420740][ T5912] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1089.420918][ T5912] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1089.495160][ T5927] usb 8-1: USB disconnect, device number 41 [ 1089.616858][ T1830] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1089.629999][T14340] afs: Unknown parameter 'dynkaller' [ 1089.658826][ T1830] usb 1-1: device descriptor read/8, error -71 [ 1089.769052][ T1830] usb usb1-port1: unable to enumerate USB device [ 1091.065745][T14124] team0: Port device team_slave_0 added [ 1091.104106][T14124] team0: Port device team_slave_1 added [ 1091.627000][T11286] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1091.987438][T11286] usb 8-1: Using ep0 maxpacket: 32 [ 1092.132954][T11286] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1092.132980][T11286] usb 8-1: config 0 has no interface number 0 [ 1092.133028][T11286] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1092.136065][T11286] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1092.136091][T11286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.136109][T11286] usb 8-1: Product: syz [ 1092.136122][T11286] usb 8-1: Manufacturer: syz [ 1092.136135][T11286] usb 8-1: SerialNumber: syz [ 1092.143405][T11286] usb 8-1: config 0 descriptor?? [ 1092.158756][T11286] smsc75xx v1.0.0 [ 1092.574451][T11286] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1092.574481][T11286] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1092.574498][T11286] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1092.574797][T11286] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 1092.651259][T12009] hsr_slave_0: left promiscuous mode [ 1092.709617][T12009] hsr_slave_1: left promiscuous mode [ 1092.710719][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.710747][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.758455][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.758488][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.963228][T12009] veth1_macvtap: left promiscuous mode [ 1092.963361][T12009] veth0_macvtap: left promiscuous mode [ 1092.963666][T12009] veth1_vlan: left promiscuous mode [ 1092.963876][T12009] veth0_vlan: left promiscuous mode [ 1094.249682][ T5852] usb 8-1: USB disconnect, device number 42 [ 1099.377872][T12009] team0 (unregistering): Port device team_slave_1 removed [ 1099.629543][T12009] team0 (unregistering): Port device team_slave_0 removed [ 1103.649216][T14417] tipc: Enabled bearer , priority 0 [ 1103.650002][T14418] syzkaller0: entered promiscuous mode [ 1103.650029][T14418] syzkaller0: entered allmulticast mode [ 1103.668073][T14424] tipc: Resetting bearer [ 1103.781542][ T37] audit: type=1326 audit(1756740074.838:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.782704][ T37] audit: type=1326 audit(1756740074.848:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.782750][ T37] audit: type=1326 audit(1756740074.848:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.782789][ T37] audit: type=1326 audit(1756740074.848:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.782826][ T37] audit: type=1326 audit(1756740074.848:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.782866][ T37] audit: type=1326 audit(1756740074.848:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.786209][ T37] audit: type=1326 audit(1756740074.848:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.786254][ T37] audit: type=1326 audit(1756740074.848:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.788097][ T37] audit: type=1326 audit(1756740074.858:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1103.805942][ T37] audit: type=1326 audit(1756740074.858:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14433 comm="syz.7.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1104.094154][T14434] netlink: 'syz.7.2405': attribute type 21 has an invalid length. [ 1104.651008][ T6648] tipc: Node number set to 2698064229 [ 1104.705937][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.705949][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.705963][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.797265][T14415] tipc: Resetting bearer [ 1105.004026][T14415] tipc: Disabling bearer [ 1105.188196][T14434] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2405'. [ 1105.188244][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2405'. [ 1105.220916][ T6648] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1105.307450][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.307467][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.307491][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.313841][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.325269][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.325541][T14181] bridge_slave_0: entered allmulticast mode [ 1105.341598][T14181] bridge_slave_0: entered promiscuous mode [ 1105.383950][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.384087][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.384322][T14181] bridge_slave_1: entered allmulticast mode [ 1105.386085][ T6648] usb 1-1: Using ep0 maxpacket: 32 [ 1105.388644][ T6648] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.388666][ T6648] usb 1-1: config 0 has no interfaces? [ 1105.392359][T14181] bridge_slave_1: entered promiscuous mode [ 1105.438528][ T6648] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1105.438557][ T6648] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1105.438575][ T6648] usb 1-1: Product: syz [ 1105.438588][ T6648] usb 1-1: Manufacturer: syz [ 1105.438600][ T6648] usb 1-1: SerialNumber: syz [ 1105.455523][ T6648] usb 1-1: config 0 descriptor?? [ 1105.941543][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.124777][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.224666][T14124] hsr_slave_0: entered promiscuous mode [ 1106.226012][T14124] hsr_slave_1: entered promiscuous mode [ 1106.238975][T14124] debugfs: 'hsr0' already exists in 'hsr' [ 1106.239002][T14124] Cannot create hsr debugfs directory [ 1106.475736][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2415'. [ 1107.037642][T14181] team0: Port device team_slave_0 added [ 1107.121274][T14181] team0: Port device team_slave_1 added [ 1107.122913][T14490] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2421'. [ 1107.287458][T14490] loop9: detected capacity change from 0 to 7 [ 1107.304123][T14490] Dev loop9: unable to read RDB block 7 [ 1107.304167][T14490] loop9: AHDI p1 p2 p3 [ 1107.304198][T14490] loop9: partition table partially beyond EOD, truncated [ 1107.304459][T14490] loop9: p1 start 1601398130 is beyond EOD, truncated [ 1107.304476][T14490] loop9: p2 start 1702059890 is beyond EOD, truncated [ 1107.451079][T12009] IPVS: stop unused estimator thread 0... [ 1107.618097][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.618114][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.618140][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.618821][T14502] tipc: Started in network mode [ 1107.618846][T14502] tipc: Node identity ca097ee13a6d, cluster identity 4711 [ 1107.620168][T14502] tipc: Enabled bearer , priority 0 [ 1107.641653][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.641669][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.641693][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.661848][T14500] syzkaller0: entered promiscuous mode [ 1107.661883][T14500] syzkaller0: entered allmulticast mode [ 1107.813863][T14502] tipc: Resetting bearer [ 1107.897141][T14499] tipc: Resetting bearer [ 1107.899298][ T5852] usb 1-1: USB disconnect, device number 65 [ 1108.417060][T14511] netlink: 404 bytes leftover after parsing attributes in process `syz.5.2425'. [ 1109.026091][ T5912] tipc: Node number set to 4033117921 [ 1109.313761][T14499] tipc: Disabling bearer [ 1110.406860][ T5852] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1110.577616][T14534] NILFS (loop5): device size too small [ 1110.726838][ T5852] usb 8-1: Using ep0 maxpacket: 32 [ 1110.737202][ T5852] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.737229][ T5852] usb 8-1: config 0 has no interfaces? [ 1110.744881][ T5852] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1110.744910][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1110.744929][ T5852] usb 8-1: Product: syz [ 1110.744941][ T5852] usb 8-1: Manufacturer: syz [ 1110.744953][ T5852] usb 8-1: SerialNumber: syz [ 1110.772789][ T5852] usb 8-1: config 0 descriptor?? [ 1111.224650][T14181] hsr_slave_0: entered promiscuous mode [ 1111.225949][T14181] hsr_slave_1: entered promiscuous mode [ 1111.246802][T14181] debugfs: 'hsr0' already exists in 'hsr' [ 1111.246833][T14181] Cannot create hsr debugfs directory [ 1112.676958][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1112.708229][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1112.712033][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1112.718678][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1112.729720][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1113.087697][T11286] usb 8-1: USB disconnect, device number 43 [ 1113.721958][T14581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2453'. [ 1113.807736][T14581] IPv6: sit1: Disabled Multicast RS [ 1113.812319][T14581] sit1: entered allmulticast mode [ 1114.099876][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1114.099893][ T37] audit: type=1326 audit(1756740085.168:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.100318][ T37] audit: type=1326 audit(1756740085.168:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.165979][ T37] audit: type=1326 audit(1756740085.228:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.166453][ T37] audit: type=1326 audit(1756740085.228:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.213495][ T37] audit: type=1326 audit(1756740085.228:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.216628][ T37] audit: type=1326 audit(1756740085.278:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.245019][ T37] audit: type=1326 audit(1756740085.308:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.245073][ T37] audit: type=1326 audit(1756740085.308:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.310808][ T37] audit: type=1326 audit(1756740085.338:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.351832][ T37] audit: type=1326 audit(1756740085.418:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.5.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1114.776997][ T5158] Bluetooth: hci3: command tx timeout [ 1116.155667][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.155741][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.857211][ T5158] Bluetooth: hci3: command tx timeout [ 1117.036005][T14557] lo speed is unknown, defaulting to 1000 [ 1118.939950][ T5158] Bluetooth: hci3: command tx timeout [ 1121.016875][ T5158] Bluetooth: hci3: command tx timeout [ 1122.060295][T12009] bridge_slave_1: left allmulticast mode [ 1122.060338][T12009] bridge_slave_1: left promiscuous mode [ 1122.060821][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.228375][T12009] bridge_slave_0: left allmulticast mode [ 1122.228408][T12009] bridge_slave_0: left promiscuous mode [ 1122.228682][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.027933][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1124.027949][ T37] audit: type=1326 audit(1756740095.098:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.029855][ T37] audit: type=1326 audit(1756740095.098:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.029903][ T37] audit: type=1326 audit(1756740095.098:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.029942][ T37] audit: type=1326 audit(1756740095.098:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.029982][ T37] audit: type=1326 audit(1756740095.098:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.030354][ T37] audit: type=1326 audit(1756740095.098:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.030606][ T37] audit: type=1326 audit(1756740095.098:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.031340][ T37] audit: type=1326 audit(1756740095.098:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14688 comm="syz.7.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1124.749422][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1124.822738][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1124.834842][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1124.850930][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1124.898852][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.658737][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.743566][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.782848][T12009] bond0 (unregistering): Released all slaves [ 1127.026915][ T5158] Bluetooth: hci4: command tx timeout [ 1127.217139][T14643] tipc: Enabled bearer , priority 0 [ 1127.223710][T14654] tipc: Resetting bearer [ 1127.377718][T14672] syzkaller0: entered promiscuous mode [ 1127.377752][T14672] syzkaller0: entered allmulticast mode [ 1127.470288][T14639] tipc: Disabling bearer [ 1129.097093][ T5158] Bluetooth: hci4: command tx timeout [ 1129.099606][T14557] chnl_net:caif_netlink_parms(): no params data found [ 1129.294860][ T37] audit: type=1326 audit(1756740100.358:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.295350][ T37] audit: type=1326 audit(1756740100.358:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.295483][ T37] audit: type=1326 audit(1756740100.358:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.295815][ T37] audit: type=1326 audit(1756740100.358:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.296085][ T37] audit: type=1326 audit(1756740100.358:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.296335][ T37] audit: type=1326 audit(1756740100.358:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.296635][ T37] audit: type=1326 audit(1756740100.358:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.328017][ T37] audit: type=1326 audit(1756740100.398:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.328069][ T37] audit: type=1326 audit(1756740100.398:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.331401][ T37] audit: type=1326 audit(1756740100.398:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14734 comm="syz.5.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1129.837519][T12009] hsr_slave_0: left promiscuous mode [ 1129.879645][T12009] hsr_slave_1: left promiscuous mode [ 1129.880621][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.710350][ T31] IPVS: starting estimator thread 0... [ 1130.726960][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.796934][T14744] IPVS: using max 9 ests per chain, 21600 per kthread [ 1131.191146][ T5158] Bluetooth: hci4: command tx timeout [ 1133.419533][ T5158] Bluetooth: hci4: command tx timeout [ 1134.867856][T14786] hub 2-0:1.0: USB hub found [ 1134.870436][T14786] hub 2-0:1.0: 1 port detected [ 1135.679655][T14794] vivid-001: kernel_thread() failed [ 1138.628802][T12009] team0 (unregistering): Port device team_slave_1 removed [ 1138.757030][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 1138.757050][ T37] audit: type=1326 audit(1756740109.808:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14831 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1138.757098][ T37] audit: type=1326 audit(1756740109.808:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14831 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1138.757138][ T37] audit: type=1326 audit(1756740109.818:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14831 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1138.757182][ T37] audit: type=1326 audit(1756740109.818:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14831 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1138.757222][ T37] audit: type=1326 audit(1756740109.818:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14831 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1140.331413][T12009] team0 (unregistering): Port device team_slave_0 removed [ 1142.449055][ T37] audit: type=1326 audit(1756740113.518:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14870 comm="syz.5.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1142.449778][ T37] audit: type=1326 audit(1756740113.518:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14870 comm="syz.5.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1142.450037][ T37] audit: type=1326 audit(1756740113.518:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14870 comm="syz.5.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1142.450459][ T37] audit: type=1326 audit(1756740113.518:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14870 comm="syz.5.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1142.450918][ T37] audit: type=1326 audit(1756740113.518:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14870 comm="syz.5.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.567545][T14877] fuse: Unknown parameter 'fd0x0000000000000003' [ 1143.605613][ T31] Process accounting resumed [ 1143.926954][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1143.926972][ T37] audit: type=1326 audit(1756740114.988:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.927726][ T37] audit: type=1326 audit(1756740114.998:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.934611][ T37] audit: type=1326 audit(1756740114.998:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.934662][ T37] audit: type=1326 audit(1756740114.998:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.934703][ T37] audit: type=1326 audit(1756740114.998:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.934743][ T37] audit: type=1326 audit(1756740114.998:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.934783][ T37] audit: type=1326 audit(1756740114.998:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.935896][ T37] audit: type=1326 audit(1756740114.998:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.935941][ T37] audit: type=1326 audit(1756740114.998:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1143.935981][ T37] audit: type=1326 audit(1756740114.998:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14882 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1145.676880][ T5912] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1145.806785][ T5912] usb 8-1: device descriptor read/64, error -71 [ 1146.046931][ T5912] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1146.193655][ T5912] usb 8-1: device descriptor read/64, error -71 [ 1146.983818][ T5912] usb usb8-port1: attempt power cycle [ 1147.316794][ T5912] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1147.337620][ T5912] usb 8-1: device descriptor read/8, error -71 [ 1147.613248][ T5912] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1147.627802][ T5912] usb 8-1: device descriptor read/8, error -71 [ 1147.739683][ T5912] usb usb8-port1: unable to enumerate USB device [ 1152.533917][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 1152.533934][ T37] audit: type=1326 audit(1756740123.598:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.534036][ T37] audit: type=1326 audit(1756740123.598:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.534575][ T37] audit: type=1326 audit(1756740123.598:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.536907][ T37] audit: type=1326 audit(1756740123.598:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.536956][ T37] audit: type=1326 audit(1756740123.598:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.536997][ T37] audit: type=1326 audit(1756740123.598:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.537032][ T37] audit: type=1326 audit(1756740123.598:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.537075][ T37] audit: type=1326 audit(1756740123.598:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.537118][ T37] audit: type=1326 audit(1756740123.598:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1152.537157][ T37] audit: type=1326 audit(1756740123.598:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14959 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1154.353362][T14698] lo speed is unknown, defaulting to 1000 [ 1156.359229][T14557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.359384][T14557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.359654][T14557] bridge_slave_0: entered allmulticast mode [ 1156.362687][T14557] bridge_slave_0: entered promiscuous mode [ 1159.335299][ T37] kauditd_printk_skb: 68 callbacks suppressed [ 1159.335315][ T37] audit: type=1326 audit(1756740130.188:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14981 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1159.335360][ T37] audit: type=1326 audit(1756740130.188:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14981 comm="syz.0.2566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1159.669057][T14557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.669216][T14557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.669470][T14557] bridge_slave_1: entered allmulticast mode [ 1160.044051][T14557] bridge_slave_1: entered promiscuous mode [ 1160.060398][T14997] capability: warning: `syz.5.2569' uses 32-bit capabilities (legacy support in use) [ 1161.369873][T14557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.411079][T14557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.164335][T14557] team0: Port device team_slave_0 added [ 1163.126186][T14557] team0: Port device team_slave_1 added [ 1163.425917][T15042] fuse: Unknown parameter 'fd0x0000000000000003' [ 1163.429624][ T6455] Process accounting resumed [ 1163.464763][ T37] audit: type=1326 audit(1756740134.528:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.464813][ T37] audit: type=1326 audit(1756740134.528:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.465551][ T37] audit: type=1326 audit(1756740134.528:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.465593][ T37] audit: type=1326 audit(1756740134.528:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.465633][ T37] audit: type=1326 audit(1756740134.528:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.467135][ T37] audit: type=1326 audit(1756740134.528:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.467182][ T37] audit: type=1326 audit(1756740134.528:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1163.467220][ T37] audit: type=1326 audit(1756740134.528:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1164.565793][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1164.565813][ T37] audit: type=1326 audit(1756740135.618:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1164.565863][ T37] audit: type=1326 audit(1756740135.618:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15039 comm="syz.7.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff703d9ebe9 code=0x7ffc0000 [ 1168.014512][T14557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.014527][T14557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.014552][T14557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.218929][T14557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.218944][T14557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.218969][T14557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.045638][T15090] fuse: Unknown parameter 'fd0x0000000000000003' [ 1169.055135][ T5912] Process accounting resumed [ 1169.348430][ T5912] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1169.503076][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 1169.505399][ T5912] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1169.505421][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.505438][ T5912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.542670][ T5912] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1169.542699][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.542716][ T5912] usb 6-1: Product: syz [ 1169.542728][ T5912] usb 6-1: Manufacturer: syz [ 1169.542739][ T5912] usb 6-1: SerialNumber: syz [ 1170.009142][ T5912] usb 6-1: 0:2 : does not exist [ 1170.213597][T14557] hsr_slave_0: entered promiscuous mode [ 1170.225263][T14557] hsr_slave_1: entered promiscuous mode [ 1170.240724][T14557] debugfs: 'hsr0' already exists in 'hsr' [ 1170.240948][T14557] Cannot create hsr debugfs directory [ 1170.244098][T14698] chnl_net:caif_netlink_parms(): no params data found [ 1171.026010][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1171.066905][ T5912] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1171.126030][ T5912] usb 6-1: USB disconnect, device number 46 [ 1171.193016][T15113] udevd[15113]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1171.730635][ T37] audit: type=1326 audit(1756740142.798:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15118 comm="syz.5.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1171.733361][ T37] audit: type=1326 audit(1756740142.798:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15118 comm="syz.5.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1171.733497][ T37] audit: type=1326 audit(1756740142.798:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15118 comm="syz.5.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1171.733639][ T37] audit: type=1326 audit(1756740142.798:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15118 comm="syz.5.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1172.141017][ T37] audit: type=1326 audit(1756740143.208:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1172.142135][ T37] audit: type=1326 audit(1756740143.208:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1172.149239][ T37] audit: type=1326 audit(1756740143.208:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1172.149294][ T37] audit: type=1326 audit(1756740143.218:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1172.150092][ T37] audit: type=1326 audit(1756740143.218:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1172.150346][ T37] audit: type=1326 audit(1756740143.218:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1172.164149][T15125] sd 0:0:1:0: device reset [ 1174.346180][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1174.384498][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1174.410432][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1174.447893][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1174.485312][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.191400][T14698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.191668][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.191925][T14698] bridge_slave_0: entered allmulticast mode [ 1175.194967][T14698] bridge_slave_0: entered promiscuous mode [ 1175.419289][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.419431][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.420201][T14698] bridge_slave_1: entered allmulticast mode [ 1175.451441][T14698] bridge_slave_1: entered promiscuous mode [ 1176.053236][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1177.149337][ T5847] Bluetooth: hci2: command tx timeout [ 1177.817706][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.817777][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.034566][T14698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.035201][T12009] bridge_slave_1: left allmulticast mode [ 1178.035245][T12009] bridge_slave_1: left promiscuous mode [ 1178.035509][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.128743][T12009] bridge_slave_0: left allmulticast mode [ 1178.128777][T12009] bridge_slave_0: left promiscuous mode [ 1178.129075][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.202807][T12009] bridge_slave_1: left allmulticast mode [ 1178.202841][T12009] bridge_slave_1: left promiscuous mode [ 1178.203095][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.278198][T12009] bridge_slave_0: left allmulticast mode [ 1178.278237][T12009] bridge_slave_0: left promiscuous mode [ 1178.278537][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.627118][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 1178.921926][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.987523][ T31] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1179.034648][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.091887][T12009] bond0 (unregistering): Released all slaves [ 1179.139917][ T31] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1179.139946][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.153370][ T31] usb 1-1: config 0 descriptor?? [ 1179.178134][ T5847] Bluetooth: hci2: command tx timeout [ 1179.498384][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.586561][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.650417][T12009] bond0 (unregistering): Released all slaves [ 1179.713128][T14698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.783330][ T31] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1179.783621][ T31] asix 1-1:0.0: probe with driver asix failed with error -61 [ 1180.588591][T15137] lo speed is unknown, defaulting to 1000 [ 1180.982302][T14698] team0: Port device team_slave_0 added [ 1181.043876][T14698] team0: Port device team_slave_1 added [ 1181.260982][ T5847] Bluetooth: hci2: command tx timeout [ 1181.927034][ T1830] usb 1-1: USB disconnect, device number 66 [ 1182.075523][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1182.075540][ T37] audit: type=1326 audit(1756740153.138:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.075880][ T37] audit: type=1326 audit(1756740153.138:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.075999][ T37] audit: type=1326 audit(1756740153.138:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.076373][ T37] audit: type=1326 audit(1756740153.138:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.116970][ T37] audit: type=1326 audit(1756740153.138:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.117037][ T37] audit: type=1326 audit(1756740153.148:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.117076][ T37] audit: type=1326 audit(1756740153.148:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.117114][ T37] audit: type=1326 audit(1756740153.148:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.117151][ T37] audit: type=1326 audit(1756740153.158:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.117198][ T37] audit: type=1326 audit(1756740153.158:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1182.303413][T12009] hsr_slave_0: left promiscuous mode [ 1182.344793][T12009] hsr_slave_1: left promiscuous mode [ 1182.345722][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.490669][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2632'. [ 1182.671977][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.426871][ T5847] Bluetooth: hci2: command tx timeout [ 1184.796966][T12009] hsr_slave_0: left promiscuous mode [ 1184.836886][T12009] hsr_slave_1: left promiscuous mode [ 1184.838135][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.889583][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.618867][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1185.647009][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1185.663901][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1185.686883][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1185.688070][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1187.497759][T15246] vivid-001: kernel_thread() failed [ 1187.827046][ T5847] Bluetooth: hci3: command tx timeout [ 1189.896893][ T5847] Bluetooth: hci3: command tx timeout [ 1190.147593][T12009] team0 (unregistering): Port device team_slave_1 removed [ 1190.931792][T12009] team0 (unregistering): Port device team_slave_0 removed [ 1192.054783][ T5847] Bluetooth: hci3: command tx timeout [ 1192.229434][T15275] vivid-000: kernel_thread() failed [ 1194.137716][ T5847] Bluetooth: hci3: command tx timeout [ 1195.056943][ T31] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1195.236947][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1195.238070][ T31] usb 8-1: no configurations [ 1195.238086][ T31] usb 8-1: can't read configurations, error -22 [ 1195.417230][ T31] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1195.566863][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1195.567736][ T31] usb 8-1: no configurations [ 1195.567751][ T31] usb 8-1: can't read configurations, error -22 [ 1195.570287][ T31] usb usb8-port1: attempt power cycle [ 1195.854120][T12009] team0 (unregistering): Port device team_slave_1 removed [ 1195.926986][ T31] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1195.947666][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1195.948508][ T31] usb 8-1: no configurations [ 1195.948523][ T31] usb 8-1: can't read configurations, error -22 [ 1196.064624][T12009] team0 (unregistering): Port device team_slave_0 removed [ 1196.077121][ T31] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1196.114060][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1196.114898][ T31] usb 8-1: no configurations [ 1196.114925][ T31] usb 8-1: can't read configurations, error -22 [ 1196.115316][ T31] usb usb8-port1: unable to enumerate USB device [ 1197.724038][T15237] lo speed is unknown, defaulting to 1000 [ 1198.157011][T11286] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1198.579141][T11286] usb 6-1: Using ep0 maxpacket: 16 [ 1199.059594][T15309] vivid-000: kernel_thread() failed [ 1199.081317][T11286] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1199.081343][T11286] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.081361][T11286] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1199.086214][T11286] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1199.086242][T11286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.086260][T11286] usb 6-1: Product: syz [ 1199.086272][T11286] usb 6-1: Manufacturer: syz [ 1199.086285][T11286] usb 6-1: SerialNumber: syz [ 1199.775090][T11286] usb 6-1: 0:2 : does not exist [ 1199.884250][T15320] netlink: 404 bytes leftover after parsing attributes in process `syz.7.2662'. [ 1201.331281][T11286] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1201.489314][T11286] usb 6-1: USB disconnect, device number 47 [ 1201.547235][T15113] udevd[15113]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1201.795421][T15344] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2665'. [ 1203.521239][T15137] chnl_net:caif_netlink_parms(): no params data found [ 1204.107302][T11286] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1204.726433][T15363] vivid-000: kernel_thread() failed [ 1205.086871][T11286] usb 1-1: Using ep0 maxpacket: 32 [ 1205.087860][T11286] usb 1-1: no configurations [ 1205.087876][T11286] usb 1-1: can't read configurations, error -22 [ 1205.239656][T11286] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1205.247291][T15237] chnl_net:caif_netlink_parms(): no params data found [ 1205.398083][T11286] usb 1-1: Using ep0 maxpacket: 32 [ 1205.431560][T11286] usb 1-1: no configurations [ 1205.431578][T11286] usb 1-1: can't read configurations, error -22 [ 1205.468255][T11286] usb usb1-port1: attempt power cycle [ 1205.927098][T11286] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1205.957929][T11286] usb 1-1: Using ep0 maxpacket: 32 [ 1205.958923][T11286] usb 1-1: no configurations [ 1205.958936][T11286] usb 1-1: can't read configurations, error -22 [ 1206.106844][T11286] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1206.127531][T11286] usb 1-1: Using ep0 maxpacket: 32 [ 1206.128360][T11286] usb 1-1: no configurations [ 1206.128374][T11286] usb 1-1: can't read configurations, error -22 [ 1206.128780][T11286] usb usb1-port1: unable to enumerate USB device [ 1206.552872][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.552985][T15137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.553174][T15137] bridge_slave_0: entered allmulticast mode [ 1206.565272][T15137] bridge_slave_0: entered promiscuous mode [ 1206.711272][T15137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.711497][T15137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.711733][T15137] bridge_slave_1: entered allmulticast mode [ 1206.725799][T15137] bridge_slave_1: entered promiscuous mode [ 1206.826991][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 1206.922663][T15386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.922698][T15386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.967598][T15386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.967632][T15386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.552285][T15137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.501068][T15400] vivid-001: kernel_thread() failed [ 1208.832387][T15137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.228325][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.228455][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.228843][T15237] bridge_slave_0: entered allmulticast mode [ 1209.231639][T15237] bridge_slave_0: entered promiscuous mode [ 1209.468515][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.468660][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.468903][T15237] bridge_slave_1: entered allmulticast mode [ 1209.497486][T15237] bridge_slave_1: entered promiscuous mode [ 1209.969214][T12009] bridge_slave_1: left allmulticast mode [ 1209.969249][T12009] bridge_slave_1: left promiscuous mode [ 1209.969507][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.854683][T12009] bridge_slave_0: left allmulticast mode [ 1212.854723][T12009] bridge_slave_0: left promiscuous mode [ 1212.854998][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.958934][T12009] bridge_slave_1: left allmulticast mode [ 1212.958968][T12009] bridge_slave_1: left promiscuous mode [ 1212.959249][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.090918][T12009] bridge_slave_0: left allmulticast mode [ 1213.090951][T12009] bridge_slave_0: left promiscuous mode [ 1213.091281][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.477409][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.567899][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.643040][T12009] bond0 (unregistering): Released all slaves [ 1214.019189][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.108203][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.203822][T12009] bond0 (unregistering): Released all slaves [ 1214.253212][T15137] team0: Port device team_slave_0 added [ 1214.497196][T15137] team0: Port device team_slave_1 added [ 1214.555780][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.636516][T15444] vivid-001: kernel_thread() failed [ 1216.167135][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.287906][T15456] syz.0.2694 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1216.288938][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 1216.587416][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2696'. [ 1216.595597][T15137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.595610][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.595631][T15137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.047770][T15137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.047788][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.047814][T15137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.058004][T15237] team0: Port device team_slave_0 added [ 1217.134797][T15237] team0: Port device team_slave_1 added [ 1217.186921][T12009] hsr_slave_0: left promiscuous mode [ 1217.235530][T12009] hsr_slave_1: left promiscuous mode [ 1217.237088][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.288572][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.577263][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 1220.086608][T12009] team0 (unregistering): Port device team_slave_1 removed [ 1220.668916][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669040][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669143][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669244][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669347][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669448][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669550][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669652][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669794][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.669904][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670145][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670248][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670348][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670452][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670555][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670655][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670755][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670856][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.670957][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671114][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671220][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671320][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671422][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671523][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671624][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671724][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671823][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.671929][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.672043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.672144][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.672243][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.672717][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.672832][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.672936][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673039][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673169][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673270][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673375][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673479][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673582][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673695][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673848][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.673954][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674113][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674232][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674348][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674463][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674577][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674691][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674804][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.674919][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675032][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675153][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675267][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675381][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675521][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675635][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675748][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675856][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.675967][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676086][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676197][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676308][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676419][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676528][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676683][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676796][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.676937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677048][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677168][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677278][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677388][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677497][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677607][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677717][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677824][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.677934][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678159][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678300][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678410][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678520][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678647][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678756][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678863][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.678973][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679090][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679199][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679307][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679417][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679525][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679774][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679881][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1220.679991][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1221.430339][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058013800: rx timeout, send abort [ 1221.849945][T12009] team0 (unregistering): Port device team_slave_0 removed [ 1222.099303][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058013800: abort rx timeout. Force session deactivation [ 1224.497597][T12009] team0 (unregistering): Port device team_slave_1 removed [ 1224.797886][T12009] team0 (unregistering): Port device team_slave_0 removed [ 1226.774797][T15478] tipc: Enabled bearer , priority 0 [ 1226.775676][T15479] syzkaller0: entered promiscuous mode [ 1226.775705][T15479] syzkaller0: entered allmulticast mode [ 1226.818188][T15489] tipc: Resetting bearer [ 1227.292799][T15474] tipc: Resetting bearer [ 1228.607767][T15474] tipc: Disabling bearer [ 1228.638900][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 1228.638918][ T37] audit: type=1326 audit(1756740199.708:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1228.638959][ T37] audit: type=1326 audit(1756740199.708:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1228.638997][ T37] audit: type=1326 audit(1756740199.708:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1228.639626][ T37] audit: type=1326 audit(1756740199.708:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1228.761513][ T37] audit: type=1326 audit(1756740199.828:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1228.761632][ T37] audit: type=1326 audit(1756740199.828:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067e56ebe9 code=0x7ffc0000 [ 1229.117433][ T37] audit: type=1326 audit(1756740200.168:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15565 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1229.117492][ T37] audit: type=1326 audit(1756740200.168:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15565 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1229.117547][ T37] audit: type=1326 audit(1756740200.178:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15565 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1229.117585][ T37] audit: type=1326 audit(1756740200.178:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15565 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1229.119692][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.119706][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.119732][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.411041][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2717'. [ 1230.690451][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.690471][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.690495][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.773176][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.773221][T15572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.990776][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.990814][T15572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.865859][T15137] hsr_slave_0: entered promiscuous mode [ 1232.894535][T15137] hsr_slave_1: entered promiscuous mode [ 1232.905651][T15137] debugfs: 'hsr0' already exists in 'hsr' [ 1232.905678][T15137] Cannot create hsr debugfs directory [ 1233.027014][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1233.288578][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1233.320134][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1233.322886][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1233.358731][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1233.359486][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1233.778101][T15237] hsr_slave_0: entered promiscuous mode [ 1233.779552][T15237] hsr_slave_1: entered promiscuous mode [ 1233.794311][T15237] debugfs: 'hsr0' already exists in 'hsr' [ 1233.794340][T15237] Cannot create hsr debugfs directory [ 1234.041694][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 1234.041713][ T37] audit: type=1326 audit(1756740205.108:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.042019][ T37] audit: type=1326 audit(1756740205.108:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.042493][ T37] audit: type=1326 audit(1756740205.108:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.042903][ T37] audit: type=1326 audit(1756740205.108:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.043192][ T37] audit: type=1326 audit(1756740205.108:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.043885][ T37] audit: type=1326 audit(1756740205.108:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.044132][ T37] audit: type=1326 audit(1756740205.108:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.044504][ T37] audit: type=1326 audit(1756740205.108:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.274321][ T37] audit: type=1326 audit(1756740205.338:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1234.274639][ T37] audit: type=1326 audit(1756740205.338:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15610 comm="syz.5.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b16cebe9 code=0x7ffc0000 [ 1235.517716][ T5158] Bluetooth: hci4: command tx timeout [ 1236.727299][T15638] tipc: Enabled bearer , priority 0 [ 1236.728084][T15599] lo speed is unknown, defaulting to 1000 [ 1236.731822][T15640] syzkaller0: entered promiscuous mode [ 1236.731854][T15640] syzkaller0: entered allmulticast mode [ 1236.749614][T15652] tipc: Resetting bearer [ 1236.778710][T15632] tipc: Resetting bearer [ 1237.048747][T15632] tipc: Disabling bearer [ 1237.598388][ T5158] Bluetooth: hci4: command tx timeout [ 1237.923993][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'. [ 1239.023755][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.023830][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.112020][T15683] tipc: Enabled bearer , priority 0 [ 1239.214800][T15679] syzkaller0: entered promiscuous mode [ 1239.214830][T15679] syzkaller0: entered allmulticast mode [ 1239.247744][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 1239.594079][T15682] tipc: Resetting bearer [ 1239.656981][ T5158] Bluetooth: hci4: command tx timeout [ 1239.715078][T15678] tipc: Resetting bearer [ 1241.631131][T15678] tipc: Disabling bearer [ 1241.742307][ T5158] Bluetooth: hci4: command tx timeout [ 1243.212085][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2746'. [ 1244.196848][ T6455] IPVS: starting estimator thread 0... [ 1244.298110][T15721] IPVS: using max 8 ests per chain, 19200 per kthread [ 1245.031039][T12009] bridge_slave_1: left allmulticast mode [ 1245.031088][T12009] bridge_slave_1: left promiscuous mode [ 1245.031371][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.219009][T12009] bridge_slave_0: left allmulticast mode [ 1245.219043][T12009] bridge_slave_0: left promiscuous mode [ 1245.219352][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.883053][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2762'. [ 1246.081012][T12009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.207767][T12009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.312544][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1246.339781][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1246.345653][T12009] bond0 (unregistering): Released all slaves [ 1246.360085][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1246.394646][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1246.396334][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1247.677900][T15778] NILFS (loop7): device size too small [ 1248.159033][ C0] ------------[ cut here ]------------ [ 1248.159057][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 1248.159107][ C0] Modules linked in: [ 1248.159129][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1248.159154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1248.159167][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 1248.159190][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 1248.159208][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 1248.159226][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 1248.159242][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1248.159256][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 1248.159269][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 1248.159285][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803a401468 [ 1248.159299][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 1248.159317][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1248.159331][ C0] CR2: 00007f067c7acf98 CR3: 00000000332b2000 CR4: 00000000003526f0 [ 1248.159349][ C0] Call Trace: [ 1248.159359][ C0] [ 1248.159385][ C0] ? __pfx_est_timer+0x10/0x10 [ 1248.159421][ C0] call_timer_fn+0x17b/0x5f0 [ 1248.159448][ C0] ? __pfx_est_timer+0x10/0x10 [ 1248.159469][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1248.159499][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1248.159536][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1248.159564][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.159586][ C0] ? __pfx_est_timer+0x10/0x10 [ 1248.159611][ C0] __run_timer_base+0x648/0x970 [ 1248.159653][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1248.159701][ C0] run_timer_softirq+0xb7/0x180 [ 1248.159726][ C0] handle_softirqs+0x22c/0x710 [ 1248.159763][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1248.159800][ C0] run_ktimerd+0xcf/0x190 [ 1248.159912][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1248.159954][ C0] ? schedule+0x91/0x360 [ 1248.159989][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1248.160014][ C0] smpboot_thread_fn+0x542/0xa60 [ 1248.160042][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1248.160078][ C0] kthread+0x711/0x8a0 [ 1248.160113][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1248.160139][ C0] ? __pfx_kthread+0x10/0x10 [ 1248.160177][ C0] ? __pfx_kthread+0x10/0x10 [ 1248.160209][ C0] ret_from_fork+0x3f9/0x770 [ 1248.160242][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1248.160277][ C0] ? __switch_to_asm+0x39/0x70 [ 1248.160298][ C0] ? __switch_to_asm+0x33/0x70 [ 1248.160318][ C0] ? __pfx_kthread+0x10/0x10 [ 1248.160350][ C0] ret_from_fork_asm+0x1a/0x30 [ 1248.160392][ C0] [ 1248.160404][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1248.160422][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1248.160448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1248.160462][ C0] Call Trace: [ 1248.160471][ C0] [ 1248.160481][ C0] dump_stack_lvl+0x99/0x250 [ 1248.160513][ C0] ? __asan_memcpy+0x40/0x70 [ 1248.160538][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1248.160565][ C0] ? __pfx__printk+0x10/0x10 [ 1248.160606][ C0] vpanic+0x281/0x750 [ 1248.160636][ C0] ? __pfx__printk+0x10/0x10 [ 1248.160660][ C0] ? __pfx_vpanic+0x10/0x10 [ 1248.160689][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1248.160732][ C0] panic+0xb9/0xc0 [ 1248.160762][ C0] ? __pfx_panic+0x10/0x10 [ 1248.160817][ C0] __warn+0x31b/0x4b0 [ 1248.160845][ C0] ? est_timer+0x6dc/0x9f0 [ 1248.160873][ C0] ? est_timer+0x6dc/0x9f0 [ 1248.160896][ C0] report_bug+0x2be/0x4f0 [ 1248.160923][ C0] ? est_timer+0x6dc/0x9f0 [ 1248.160946][ C0] ? est_timer+0x6dc/0x9f0 [ 1248.160966][ C0] ? est_timer+0x6de/0x9f0 [ 1248.160988][ C0] handle_bug+0x84/0x160 [ 1248.161019][ C0] exc_invalid_op+0x1a/0x50 [ 1248.161048][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1248.161068][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 1248.161093][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 1248.161112][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 1248.161131][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 1248.161147][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1248.161161][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 1248.161176][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000005 [ 1248.161191][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803a401468 [ 1248.161215][ C0] ? est_timer+0x6db/0x9f0 [ 1248.161261][ C0] ? __pfx_est_timer+0x10/0x10 [ 1248.161298][ C0] call_timer_fn+0x17b/0x5f0 [ 1248.161325][ C0] ? __pfx_est_timer+0x10/0x10 [ 1248.161347][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1248.161374][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1248.161411][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1248.161438][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.161462][ C0] ? __pfx_est_timer+0x10/0x10 [ 1248.161487][ C0] __run_timer_base+0x648/0x970 [ 1248.161530][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1248.161574][ C0] run_timer_softirq+0xb7/0x180 [ 1248.161601][ C0] handle_softirqs+0x22c/0x710 [ 1248.161640][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1248.161678][ C0] run_ktimerd+0xcf/0x190 [ 1248.161706][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1248.161731][ C0] ? schedule+0x91/0x360 [ 1248.161765][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1248.161798][ C0] smpboot_thread_fn+0x542/0xa60 [ 1248.161825][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1248.161862][ C0] kthread+0x711/0x8a0 [ 1248.161895][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1248.161921][ C0] ? __pfx_kthread+0x10/0x10 [ 1248.161966][ C0] ? __pfx_kthread+0x10/0x10 [ 1248.161998][ C0] ret_from_fork+0x3f9/0x770 [ 1248.162028][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1248.162066][ C0] ? __switch_to_asm+0x39/0x70 [ 1248.162085][ C0] ? __switch_to_asm+0x33/0x70 [ 1248.162103][ C0] ? __pfx_kthread+0x10/0x10 [ 1248.162134][ C0] ret_from_fork_asm+0x1a/0x30 [ 1248.162173][ C0] [ 1248.162621][ C0] Kernel Offset: disabled