last executing test programs: 4m24.811785626s ago: executing program 0 (id=160): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 4m23.046283084s ago: executing program 0 (id=163): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x8008dc, &(0x7f00000002c0)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,rodir,uni_xlate=0,iocharset=macgaelic,shortname=lower,utf8=1,iocharset=iso8859-13,uni_xlate=1,rodir,shortname=win95,shortname=lower,codepage=874,shortname=lower,utf8=0,shortname=lower,uni_xlate=0,uni_xlate=0,nonumtail=0,short\b\x00\x00\x00\x00\x00\x00\x0095,rodir,uni_xlate=0,rodir,shortname=mixed,sFortname=lower,nnonumtail=1,showexec,\x00', @ANYBLOB="b0baffea7e7ba334f8fde1f7928de8eb76582a", @ANYRES16], 0x6, 0x2e7, &(0x7f0000000780)="$eJzs3T+LHGUYAPBn9mZ3J1rsFVYiOKCFVciltblDLiBeZbgiWuhhEpDbRcjBiVHcpBI7G0s/gSD4QWzsLAVbwc4IgVdmdib7J+PeXWBPNL9fkTw37/vM+7wzc3fT3LMfvjI5vl3G3Ydf/BpFkUVvdxjxKIvt6EXrQSzZ/SYAgP+yRynFH2mmY/iXr9fkFhusCwDYnDN+/zfy+t9b1YwfL682AGAzbt567529g4P9d8uyiBuTr04Ps4io/p+N792Nj2Mcd+JajOJxRP2i0I/6baEKb6SUpnlZ2Y7XJ9PTwypz8sFPzfn3fo+o83diFNv1oSdvGyldiYiD/Z1yZiF/WtXxQrP+bpV/PUbx0pPk+fpvH+xf78iPw0G88dpC/VdjFD9/FJ/EOG7XRczzv9wpy7fSt39+/n5VXpWfTU8Ph/W8ubTVLj695HsEAAAAAAAAAAAAAAAAAAAAAMD/z9Wmd84w6v491aGm/87W4+qLfpSt7eX+PLP8rD3RvD9Q9FJK0xTftf11rpVlmbJZG8F5fh4v501jQQAAAAAAAAAAAAAAAAAAAHjOnXx2//hoPL5z78LBg46hthtAHhF/3Yx4tjMfjXcXjrwa97fWTR42ax6Nx70mXJ6TLx6JrXZOFrG2jGoTVdCe/5kv1NnBladqboLvf+jMqnZ0kkfXUHH2ov3utS4YfNpfc1nap+v4KIvO9GFTfBFFdeNi9cYNonv1fqwcGfxThe2jeL7tDDqHRhe+LIMX62C6Zk5k674v3vxtVvbCLpbmDOqr2pneb4KF9JVno/terARRzNKf/lmR6dYBAAAAAAAAAAAAAAAAAAAbNf/r347Bh9niJ/yv6qXhZmsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMsy//z/8wT5cvI5sgZx7+Tf2hsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPj78DAAD//4uDTs0=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x84000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) fdatasync(r2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x20) ppoll(&(0x7f0000000100), 0x200000a5, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000200)={0x0, 0xfffffffffffffd12, 0x7fffffff}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 4m21.803847822s ago: executing program 0 (id=165): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) shmget$private(0x0, 0x3000, 0x1804, &(0x7f0000001000/0x3000)=nil) 4m19.885883545s ago: executing program 0 (id=167): getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) 4m18.932551695s ago: executing program 0 (id=169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 4m17.626683609s ago: executing program 0 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x888000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 4m16.998722599s ago: executing program 32 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x888000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3m34.301626549s ago: executing program 2 (id=270): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f00000041c0)="12", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m27.907018588s ago: executing program 2 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000e00)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24086100feee22cd12"}}}}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0xf9e, 0x0, @gue={{0x2, 0x1, 0x2, 0x9}, "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"}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0xfffd, 0x4e20, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x0, 0x0, 0x0, 0x1, 0x4}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010101, 0x3506, 0x0, 0x0, 0x21}, {{@in6=@rand_addr=' \x01\x00', 0xbffffffd, 0x3c}, 0xa, @in=@multicast1, 0x3501, 0x3, 0x0, 0x7, 0x7, 0x0, 0xe}]}]}, 0x13c}}, 0x4040000) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x10, 0x5a, 0x1}, 0x10}], 0x1}, 0x0) 3m26.745802928s ago: executing program 2 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x48, 0x200}, &(0x7f0000010080), &(0x7f00000003c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0) 3m25.744336754s ago: executing program 2 (id=282): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x16, 0x196, 0x0}) 3m24.657834316s ago: executing program 2 (id=285): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x6, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x1, 0x820, 0x1, 0x106, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf2b, 0x20001e58, 0xfffffbff, 0x804, 0x3c, 0x8, 0x9, 0x410000, 0xfffffff8]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070007000000fcc46d587aa72baa"], 0x3c}}, 0x0) 3m6.445938889s ago: executing program 33 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070007000000fcc46d587aa72baa"], 0x3c}}, 0x0) 22.585684672s ago: executing program 1 (id=670): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x20080000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x6, 0x1, 0x5, 0x2000067, 0xcc7, 0x8, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x1, 0x820, 0x1, 0x106, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf2b, 0x20001e58, 0xfffffbff, 0x804, 0x3c, 0x8, 0x9, 0x410000, 0xfffffff8]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) acct(0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xffcc) 8.479607233s ago: executing program 1 (id=686): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x80000001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0100001800010029bd7000fddbdf251d0104001e010600010e0300ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bd5ac842345c6a10ff4bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c005c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea000015000400030000a000050000090000000000000001000000c4bd9ddf0307006591739647171b9d98a2e49e7f3740e49bbf7a1208316715406e0a2a395a498424c390452bbdcc69113a665fcc441cd6981bd5fa894b04f0c3d2c05e44125c4ae75c493694e938a17c1b531c7c4591280659083c0f52a6ce958ef72af0582cfb305574cbaa535290983f"], 0x14c}}, 0x4c0c8) tkill(r6, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 8.432903487s ago: executing program 4 (id=687): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 8.233748426s ago: executing program 4 (id=689): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) mlockall(0x7) clock_adjtime(0x0, 0x0) 5.99062388s ago: executing program 3 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) 5.577830929s ago: executing program 4 (id=691): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x14}}}}}, 0x36) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$int_in(r0, 0x5421, &(0x7f0000000580)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8da"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.577616059s ago: executing program 1 (id=692): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000600)='/sys/power/image_size', 0x101240, 0x2c) readv(r0, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4082, 0xff2}], 0x1) 4.839179959s ago: executing program 3 (id=694): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a12003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554", 0xb6) fsopen(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000021c0)={r1, 0x1, 0x4}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0x58000, 0x5, 0xfffffffc, 0xffffffff, 0x0, [{0xfd, 0x64, 0x7f}, {0x6f, 0x6, 0x9, '\x00', 0xc}, {0xa, 0x5, 0x1, '\x00', 0x81}, {0x7, 0x9, 0x3, '\x00', 0x7}, {0xf8, 0x8, 0xa, '\x00', 0xff}, {0x3, 0x40, 0x0, '\x00', 0xc}, {0x40, 0x40, 0x9, '\x00', 0x1}, {0x81, 0x7, 0x2c, '\x00', 0x1}, {0xfa, 0xfa, 0x1, '\x00', 0x5}, {0xfd, 0x3, 0x3f, '\x00', 0x1}, {0x7, 0x4, 0x2e, '\x00', 0x3}, {0xc, 0x1, 0x3}, {0xd, 0x2, 0x8, '\x00', 0xff}, {0xff, 0x7, 0x8d, '\x00', 0x7}, {0x1, 0x6, 0xc, '\x00', 0x5}, {0x8, 0x81, 0x2, '\x00', 0x8}, {0x9, 0x10, 0x40, '\x00', 0x8}, {0x9, 0x0, 0x5, '\x00', 0xb}, {0x4a, 0x75, 0x7, '\x00', 0x7}, {0x0, 0x8, 0x6, '\x00', 0x2}, {0x53, 0x3, 0x9, '\x00', 0x8}, {0x6, 0x5, 0xfb, '\x00', 0x11}, {0x2, 0x9, 0x5, '\x00', 0xe7}, {0xff, 0x5, 0x75, '\x00', 0xa}]}}) 4.697787473s ago: executing program 1 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.839133804s ago: executing program 3 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, 0x0) lseek(r4, 0x2000, 0x0) 3.637920924s ago: executing program 5 (id=699): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)='n', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)="c7", 0x1}], 0x1}}], 0x3, 0x4000000) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 2.72914711s ago: executing program 3 (id=700): fallocate(0xffffffffffffffff, 0x27, 0x2000000f2, 0x4) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x202599ca) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) chdir(0x0) read(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) 2.493264002s ago: executing program 5 (id=701): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setuid(0xee01) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000180)) 2.261864514s ago: executing program 3 (id=702): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x1000040, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r5, 0x0, &(0x7f0000004540)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 2.180530352s ago: executing program 5 (id=703): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d5"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 490.204733ms ago: executing program 3 (id=704): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/66) 277.934563ms ago: executing program 4 (id=705): r0 = socket$inet(0x2, 0x5, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 235.270017ms ago: executing program 5 (id=706): mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa, 0x1a0000}, 0xfffffffffffffe49) 131.154837ms ago: executing program 1 (id=707): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000008dfff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) 81.935122ms ago: executing program 5 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 81.806872ms ago: executing program 4 (id=709): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0xdb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0xffb, 0x0, 0xffff18b6, 0x6, 0x0, 0x80000001, 0xdb}, 0x9c) 5.527729ms ago: executing program 5 (id=710): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x141a82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=711): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$inet_icmp_raw(0x2, 0x3, 0x1) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000040) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 67.824271][ T5752] cgroup: Unknown subsys name 'net' [ 67.958379][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.540785][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.201704][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.230632][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.238450][ T5764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.247359][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.259568][ T5764] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.268195][ T5764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.280710][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.288734][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.343468][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.374836][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.382500][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.389822][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.405586][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.412389][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.444084][ T5764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.452874][ T5764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.460910][ T5764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.470643][ T5764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.480649][ T5764] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.488012][ T5764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.522148][ T5764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.530637][ T5764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.538419][ T5764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.547022][ T5764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.559512][ T5764] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.570903][ T5764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.706475][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 71.843105][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.850279][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.857772][ T5762] bridge_slave_0: entered allmulticast mode [ 71.865889][ T5762] bridge_slave_0: entered promiscuous mode [ 71.877888][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.885108][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.893376][ T5762] bridge_slave_1: entered allmulticast mode [ 71.900337][ T5762] bridge_slave_1: entered promiscuous mode [ 71.952927][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.970194][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.042971][ T5762] team0: Port device team_slave_0 added [ 72.054361][ T5762] team0: Port device team_slave_1 added [ 72.133393][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.141175][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.167500][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.192074][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 72.230778][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.237796][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.263857][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.358248][ T5762] hsr_slave_0: entered promiscuous mode [ 72.365164][ T5762] hsr_slave_1: entered promiscuous mode [ 72.408246][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 72.417869][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 72.512488][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.519753][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.527009][ T5769] bridge_slave_0: entered allmulticast mode [ 72.534854][ T5769] bridge_slave_0: entered promiscuous mode [ 72.546732][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.554013][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.561588][ T5769] bridge_slave_1: entered allmulticast mode [ 72.568456][ T5769] bridge_slave_1: entered promiscuous mode [ 72.659823][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.672055][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.725746][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.733015][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.740144][ T5772] bridge_slave_0: entered allmulticast mode [ 72.748763][ T5772] bridge_slave_0: entered promiscuous mode [ 72.757253][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.764996][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.772413][ T5765] bridge_slave_0: entered allmulticast mode [ 72.779551][ T5765] bridge_slave_0: entered promiscuous mode [ 72.810097][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.817379][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.825192][ T5772] bridge_slave_1: entered allmulticast mode [ 72.832429][ T5772] bridge_slave_1: entered promiscuous mode [ 72.839209][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.846872][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.854366][ T5765] bridge_slave_1: entered allmulticast mode [ 72.861609][ T5765] bridge_slave_1: entered promiscuous mode [ 72.871058][ T5769] team0: Port device team_slave_0 added [ 72.904897][ T5769] team0: Port device team_slave_1 added [ 72.963699][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.973516][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.980887][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.006913][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.021228][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.036961][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.049491][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.074164][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.081335][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.107498][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.149863][ T5772] team0: Port device team_slave_0 added [ 73.182709][ T5772] team0: Port device team_slave_1 added [ 73.191961][ T5765] team0: Port device team_slave_0 added [ 73.200133][ T5765] team0: Port device team_slave_1 added [ 73.249827][ T5769] hsr_slave_0: entered promiscuous mode [ 73.256332][ T5769] hsr_slave_1: entered promiscuous mode [ 73.262992][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.271414][ T5769] Cannot create hsr debugfs directory [ 73.306261][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.313310][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.339376][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.353075][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.360039][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.386216][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.401313][ T5764] Bluetooth: hci0: command tx timeout [ 73.419647][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.426745][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.453113][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.469232][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.476755][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.502865][ T5764] Bluetooth: hci1: command tx timeout [ 73.503366][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.558196][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.565992][ T5764] Bluetooth: hci2: command tx timeout [ 73.575195][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.614518][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.640592][ T5764] Bluetooth: hci3: command tx timeout [ 73.664069][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.698837][ T5765] hsr_slave_0: entered promiscuous mode [ 73.705662][ T5765] hsr_slave_1: entered promiscuous mode [ 73.712563][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.720147][ T5765] Cannot create hsr debugfs directory [ 73.747596][ T5772] hsr_slave_0: entered promiscuous mode [ 73.754384][ T5772] hsr_slave_1: entered promiscuous mode [ 73.760852][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.768444][ T5772] Cannot create hsr debugfs directory [ 74.004582][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.022709][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.037570][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.047194][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.147115][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.159649][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.171781][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.202652][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.252551][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.263424][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.276516][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.292794][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.328704][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.369750][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.392128][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.414565][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.433891][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.441223][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.452254][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.459420][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.478361][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.485492][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.507833][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.514965][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.629980][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.664937][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.706919][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.734345][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.775518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.782705][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.798120][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.805294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.823510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.830669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.875805][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.883010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.008957][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.035113][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.075476][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.125607][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.216992][ T5769] veth0_vlan: entered promiscuous mode [ 75.236746][ T5762] veth0_vlan: entered promiscuous mode [ 75.255727][ T5769] veth1_vlan: entered promiscuous mode [ 75.274205][ T5762] veth1_vlan: entered promiscuous mode [ 75.364975][ T5769] veth0_macvtap: entered promiscuous mode [ 75.396586][ T5769] veth1_macvtap: entered promiscuous mode [ 75.420028][ T5762] veth0_macvtap: entered promiscuous mode [ 75.441603][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.464312][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.473847][ T5762] veth1_macvtap: entered promiscuous mode [ 75.485586][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.493219][ T5764] Bluetooth: hci0: command tx timeout [ 75.516095][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.525173][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.535706][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.544540][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.561618][ T5764] Bluetooth: hci1: command tx timeout [ 75.577019][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.588239][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.602389][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.613568][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.624152][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.635707][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.643185][ T5764] Bluetooth: hci2: command tx timeout [ 75.657564][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.667119][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.676320][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685306][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.720766][ T5764] Bluetooth: hci3: command tx timeout [ 75.738343][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.816578][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.831614][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.905128][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.909626][ T5765] veth0_vlan: entered promiscuous mode [ 75.918560][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.934543][ T5765] veth1_vlan: entered promiscuous mode [ 76.002769][ T5772] veth0_vlan: entered promiscuous mode [ 76.027705][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.038182][ T5772] veth1_vlan: entered promiscuous mode [ 76.048354][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.098599][ T5765] veth0_macvtap: entered promiscuous mode [ 76.133019][ T5772] veth0_macvtap: entered promiscuous mode [ 76.143496][ T5765] veth1_macvtap: entered promiscuous mode [ 76.153417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.164260][ T5772] veth1_macvtap: entered promiscuous mode [ 76.185298][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.213055][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.225282][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.239426][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.250521][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.272452][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.282616][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.299754][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.311956][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.322613][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.333727][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.345927][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.358315][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.386382][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.397841][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.410011][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.427856][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.439313][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.456706][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.466652][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.482312][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.501214][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.543526][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.554472][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.569452][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.580317][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.590792][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.617466][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.653842][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.704860][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.732817][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.769418][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.793391][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.172798][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.529401][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.561053][ T5764] Bluetooth: hci0: command tx timeout [ 77.641673][ T5764] Bluetooth: hci1: command tx timeout [ 77.664139][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.685775][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.721195][ T5764] Bluetooth: hci2: command tx timeout [ 77.795529][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.803971][ T5764] Bluetooth: hci3: command tx timeout [ 77.834201][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.031109][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.206592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.215386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.513417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.522408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.603307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.612095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.616178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.622413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 78.637795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.730628][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.821311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 79.640708][ T5764] Bluetooth: hci0: command tx timeout [ 79.721748][ T5764] Bluetooth: hci1: command tx timeout [ 79.802159][ T5764] Bluetooth: hci2: command tx timeout [ 79.880839][ T5764] Bluetooth: hci3: command tx timeout [ 86.874468][ T9] cfg80211: failed to load regulatory.db [ 99.040263][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.810202][ T5976] Zero length message leads to an empty skb [ 105.665566][ T6010] syz.1.50[6010]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 105.678467][ T6010] loop1: detected capacity change from 0 to 256 [ 105.686353][ T6010] ======================================================= [ 105.686353][ T6010] WARNING: The mand mount option has been deprecated and [ 105.686353][ T6010] and is ignored by this kernel. Remove the mand [ 105.686353][ T6010] option from the mount to silence this warning. [ 105.686353][ T6010] ======================================================= [ 106.028757][ T6016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.687366][ T6035] syz.0.46: attempt to access beyond end of device [ 106.687366][ T6035] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 106.701993][ T6035] syz.0.46: attempt to access beyond end of device [ 106.701993][ T6035] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 106.714920][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 106.727487][ T6035] syz.0.46: attempt to access beyond end of device [ 106.727487][ T6035] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 106.740402][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 106.757471][ T6035] syz.0.46: attempt to access beyond end of device [ 106.757471][ T6035] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 106.771434][ T6035] syz.0.46: attempt to access beyond end of device [ 106.771434][ T6035] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 106.784836][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 106.795427][ T6035] syz.0.46: attempt to access beyond end of device [ 106.795427][ T6035] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 106.808434][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 106.821566][ T6035] syz.0.46: attempt to access beyond end of device [ 106.821566][ T6035] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 106.836052][ T6035] syz.0.46: attempt to access beyond end of device [ 106.836052][ T6035] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 106.849126][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 106.859931][ T6035] syz.0.46: attempt to access beyond end of device [ 106.859931][ T6035] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 106.872908][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 106.885764][ T6035] syz.0.46: attempt to access beyond end of device [ 106.885764][ T6035] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 106.899289][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 106.909532][ T6035] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 106.919199][ T6035] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 108.761923][ T5803] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.960903][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 108.988106][ T5803] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.997926][ T5803] usb 2-1: config 0 has no interface number 0 [ 109.021679][ T5803] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 109.033734][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.045312][ T5803] usb 2-1: Product: syz [ 109.049868][ T5803] usb 2-1: Manufacturer: syz [ 109.055470][ T5803] usb 2-1: SerialNumber: syz [ 109.113551][ T5803] usb 2-1: config 0 descriptor?? [ 109.197560][ T5803] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 111.445848][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.886285][ T5823] IPVS: starting estimator thread 0... [ 112.001212][ T6080] IPVS: using max 18 ests per chain, 43200 per kthread [ 112.884594][ T5803] gspca_spca1528: reg_w err -110 [ 112.889682][ T5803] spca1528: probe of 2-1:0.1 failed with error -110 [ 113.258528][ T5754] usb 2-1: USB disconnect, device number 2 [ 116.151878][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'. [ 116.164889][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 117.480533][ T5754] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.350935][ T5754] usb 3-1: Using ep0 maxpacket: 8 [ 118.358370][ T5754] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 118.378915][ T5754] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 118.397374][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.644497][ T5754] usb 3-1: string descriptor 0 read error: -71 [ 119.362844][ T5754] usb 3-1: USB disconnect, device number 2 [ 119.516646][ T968] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.650544][ T28] audit: type=1326 audit(1766724943.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 119.740559][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 119.746814][ T28] audit: type=1326 audit(1766724943.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 119.787758][ T968] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.798755][ T968] usb 2-1: config 0 has no interface number 0 [ 119.826025][ T968] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.888636][ T28] audit: type=1326 audit(1766724943.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 119.925107][ T28] audit: type=1326 audit(1766724943.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 119.946302][ T968] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.949416][ T28] audit: type=1326 audit(1766724943.010:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 119.979063][ T28] audit: type=1326 audit(1766724943.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 120.035608][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.377300][ T968] usb 2-1: config 0 descriptor?? [ 120.404632][ T28] audit: type=1326 audit(1766724943.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 120.555062][ T968] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 120.634575][ T28] audit: type=1326 audit(1766724943.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 120.698261][ T28] audit: type=1326 audit(1766724943.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 120.726179][ T28] audit: type=1326 audit(1766724943.030:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd58f749 code=0x7ffc0000 [ 120.790749][ T5803] usb 2-1: USB disconnect, device number 3 [ 122.508011][ T968] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.570499][ T5824] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.732208][ T968] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 122.760428][ T968] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 122.773146][ T5824] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 122.790967][ T5824] usb 4-1: config 0 has no interface number 0 [ 122.797463][ T5824] usb 4-1: config 0 interface 114 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 122.818457][ T968] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 122.835522][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.305149][ T968] usb 1-1: Product: syz [ 124.309410][ T968] usb 1-1: Manufacturer: syz [ 124.378598][ T968] usb 1-1: SerialNumber: syz [ 124.454641][ T968] usb 1-1: config 0 descriptor?? [ 124.461803][ T5824] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=28.fd [ 124.491796][ T968] usb 1-1: can't set config #0, error -71 [ 124.497888][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.705294][ T968] usb 1-1: USB disconnect, device number 2 [ 124.720017][ T5824] usb 4-1: config 0 descriptor?? [ 124.743501][ T5824] usb 4-1: can't set config #0, error -71 [ 124.988703][ T5824] usb 4-1: USB disconnect, device number 2 [ 126.495855][ T6201] bridge1: entered promiscuous mode [ 126.501253][ T6201] bridge1: entered allmulticast mode [ 127.530373][ C1] sched: RT throttling activated [ 131.410651][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.662562][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 131.684114][ T5890] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 131.721385][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.755962][ T5890] usb 3-1: config 0 descriptor?? [ 131.771961][ T6219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.986093][ T5890] ath6kl: Failed to submit usb control message: -71 [ 132.000499][ T5890] ath6kl: unable to send the bmi data to the device: -71 [ 132.020389][ T5890] ath6kl: Unable to send get target info: -71 [ 132.031784][ T5890] ath6kl: Failed to init ath6kl core: -71 [ 132.062161][ T5890] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 132.107650][ T5890] usb 3-1: USB disconnect, device number 3 [ 132.861373][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.875301][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.389181][ T6242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 135.858213][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 136.213055][ T6258] loop1: detected capacity change from 0 to 256 [ 138.041233][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.289902][ T5890] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 138.309019][ T5890] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 138.337567][ T5890] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 138.369546][ T5890] usb 3-1: config 220 has no interface number 2 [ 138.390388][ T5890] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0xA has invalid wMaxPacketSize 0 [ 138.415543][ T5890] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 138.470483][ T5890] usb 3-1: config 220 interface 0 has no altsetting 0 [ 138.477313][ T5890] usb 3-1: config 220 interface 76 has no altsetting 0 [ 138.510540][ T5890] usb 3-1: config 220 interface 1 has no altsetting 0 [ 138.529629][ T5890] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 138.554267][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.580532][ T5890] usb 3-1: Product: syz [ 138.584863][ T5890] usb 3-1: Manufacturer: syz [ 138.601813][ T5890] usb 3-1: SerialNumber: syz [ 138.929527][ T6277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 141.057342][ T5890] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 141.094644][ T5890] usb 3-1: No valid video chain found. [ 141.133657][ T5890] usb 3-1: selecting invalid altsetting 0 [ 141.211397][ T5890] usb 3-1: selecting invalid altsetting 0 [ 141.217336][ T5890] usbtest: probe of 3-1:220.1 failed with error -22 [ 141.270612][ T5890] usb 3-1: USB disconnect, device number 4 [ 142.741127][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 142.741144][ T28] audit: type=1326 audit(1766724965.200:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5452f8f749 code=0x7ffc0000 [ 142.779081][ T28] audit: type=1326 audit(1766724965.200:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5452f8f749 code=0x7ffc0000 [ 142.849630][ T28] audit: type=1326 audit(1766724965.220:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 142.896379][ T28] audit: type=1326 audit(1766724965.220:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 142.950017][ T28] audit: type=1326 audit(1766724965.220:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 143.000472][ T28] audit: type=1326 audit(1766724965.220:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 143.037366][ T28] audit: type=1326 audit(1766724965.220:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 143.073900][ T28] audit: type=1326 audit(1766724965.230:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 143.156808][ T28] audit: type=1326 audit(1766724965.230:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 143.269266][ T28] audit: type=1326 audit(1766724965.230:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5452fc2005 code=0x7ffc0000 [ 151.414559][ T6357] block device autoloading is deprecated and will be removed. [ 156.261628][ T6385] loop0: detected capacity change from 0 to 256 [ 159.062149][ T6396] hugetlbfs: syz.0.165 (6396): Using mlock ulimits for SHM_HUGETLB is obsolete [ 162.360092][ T6419] netlink: 'syz.2.175': attribute type 62 has an invalid length. [ 162.780212][ T5766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.796346][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.804633][ T5766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.830487][ T5766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.839617][ T5766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.848774][ T5766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.776805][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 165.180471][ T5766] Bluetooth: hci2: command tx timeout [ 165.203941][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 165.622404][ T6462] vlan0: entered promiscuous mode [ 165.699672][ T6462] team0: Port device vlan0 added [ 165.718965][ T6462] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 165.797751][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.147868][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.319036][ T6432] bridge_slave_0: entered allmulticast mode [ 166.518221][ T6432] bridge_slave_0: entered promiscuous mode [ 166.558811][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.590619][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.620845][ T6432] bridge_slave_1: entered allmulticast mode [ 166.692776][ T6432] bridge_slave_1: entered promiscuous mode [ 167.003525][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.086829][ T6474] capability: warning: `syz.3.189' uses 32-bit capabilities (legacy support in use) [ 167.118826][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.138778][ T39] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.240516][ T51] Bluetooth: hci2: command tx timeout [ 167.371280][ T6432] team0: Port device team_slave_0 added [ 167.419269][ T6432] team0: Port device team_slave_1 added [ 167.662126][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.680460][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.740024][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.755086][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.771044][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.804493][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.884773][ T6432] hsr_slave_0: entered promiscuous mode [ 167.907418][ T6432] hsr_slave_1: entered promiscuous mode [ 167.916557][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.924492][ T6432] Cannot create hsr debugfs directory [ 168.433561][ T6432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.488835][ T6432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.500665][ T6432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.690802][ T6432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.231873][ T5766] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 169.240035][ T51] Bluetooth: hci4: command 0xfc11 tx timeout [ 169.320485][ T5766] Bluetooth: hci2: command tx timeout [ 171.026069][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.062264][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.587160][ T5766] Bluetooth: hci2: command tx timeout [ 172.658729][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.665959][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.741731][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.748921][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.892226][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.920759][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.007321][ T6506] overlayfs: conflicting options: userxattr,verity=on [ 173.544352][ T6515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.153238][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.632670][ T968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 176.773583][ T6432] veth0_vlan: entered promiscuous mode [ 176.800172][ T6432] veth1_vlan: entered promiscuous mode [ 176.834273][ T968] usb 4-1: config 128 has an invalid interface number: 179 but max is 0 [ 176.850434][ T968] usb 4-1: config 128 has no interface number 0 [ 176.861172][ T968] usb 4-1: config 128 interface 179 has no altsetting 0 [ 176.889092][ T968] usb 4-1: New USB device found, idVendor=1bc7, idProduct=10d2, bcdDevice=7f.8a [ 176.909723][ T6432] veth0_macvtap: entered promiscuous mode [ 176.918805][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.941889][ T6432] veth1_macvtap: entered promiscuous mode [ 176.950591][ T5851] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 176.968403][ T968] usb 4-1: Product: syz [ 176.973360][ T968] usb 4-1: Manufacturer: syz [ 176.978079][ T968] usb 4-1: SerialNumber: syz [ 177.003564][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.033162][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.063843][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.084738][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.098521][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.117277][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.130016][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.147982][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.162217][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.179997][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.206768][ T968] option 4-1:128.179: GSM modem (1-port) converter detected [ 177.221142][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.233606][ T5851] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 177.245111][ T5851] usb 2-1: can't read configurations, error -71 [ 177.258368][ T968] usb 4-1: USB disconnect, device number 3 [ 177.260694][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.279410][ T968] option 4-1:128.179: device disconnected [ 177.300477][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.326096][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.338105][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.349331][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.360113][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.370970][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.382776][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.397968][ T6432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.411048][ T6432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.419822][ T6432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.429605][ T6432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.583320][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.614963][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.674928][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.683299][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.516028][ T6539] kvm: kvm [6538]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 179.596007][ T6539] kvm: kvm [6538]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x947 [ 179.676100][ T6539] kvm: kvm [6538]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3184 [ 180.390595][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.606639][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.630475][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.654080][ T9] usb 2-1: Product: syz [ 180.658320][ T9] usb 2-1: Manufacturer: syz [ 180.680518][ T9] usb 2-1: SerialNumber: syz [ 180.711303][ T9] usb 2-1: config 0 descriptor?? [ 181.672213][ T6567] vivid-001: disconnect [ 182.766293][ T6568] vivid-001: reconnect [ 182.779598][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 182.791616][ T9] usb 2-1: Please update to version 0.2 or newer [ 182.968710][ T9] usb 2-1: USB disconnect, device number 6 [ 183.600519][ T5824] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 183.797374][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.806710][ T5824] usb 3-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 183.841680][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.867540][ T5824] usb 3-1: config 0 descriptor?? [ 184.825017][ T5824] usbhid 3-1:0.0: can't add hid device: -71 [ 184.835040][ T5824] usbhid: probe of 3-1:0.0 failed with error -71 [ 184.864685][ T5824] usb 3-1: USB disconnect, device number 5 [ 185.066007][ T6592] process 'syz.1.219' launched '/dev/fd/4' with NULL argv: empty string added [ 185.290616][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 185.470568][ T9] usb 4-1: device descriptor read/64, error -71 [ 185.480489][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.741531][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 185.930078][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 186.002687][ T5824] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 186.078788][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.198200][ T5824] usb 5-1: config 0 has no interface number 0 [ 186.316661][ T5824] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 186.490439][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.507292][ T5824] usb 5-1: Product: syz [ 186.532331][ T5824] usb 5-1: Manufacturer: syz [ 186.548968][ T5824] usb 5-1: SerialNumber: syz [ 186.569139][ T5824] usb 5-1: config 0 descriptor?? [ 186.680692][ T9] usb 4-1: device descriptor read/64, error -71 [ 186.800890][ T9] usb usb4-port1: attempt power cycle [ 186.919460][ T5824] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 186.926750][ T5824] usb 5-1: No valid video chain found. [ 186.934866][ T5824] usb 5-1: USB disconnect, device number 2 [ 187.810431][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 187.857155][ T9] usb 4-1: device descriptor read/8, error -71 [ 188.902846][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 189.749902][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.904829][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.010438][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.036660][ T9] usb 4-1: Product: syz [ 190.056453][ T9] usb 4-1: Manufacturer: syz [ 190.067133][ T9] usb 4-1: SerialNumber: syz [ 190.094996][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.185442][ T5754] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.406526][ T6646] random: crng reseeded on system resumption [ 190.792979][ T5766] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 190.803949][ T5766] CPU: 0 PID: 5766 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 190.811547][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.821734][ T5766] Workqueue: hci0 hci_rx_work [ 190.826513][ T5766] Call Trace: [ 190.829833][ T5766] [ 190.832819][ T5766] dump_stack_lvl+0x16c/0x230 [ 190.837560][ T5766] ? show_regs_print_info+0x20/0x20 [ 190.842813][ T5766] ? load_image+0x3b0/0x3b0 [ 190.847379][ T5766] sysfs_create_dir_ns+0x256/0x280 [ 190.852547][ T5766] ? hci_rx_work+0x43a/0xd80 [ 190.857198][ T5766] ? sysfs_warn_dup+0xa0/0xa0 [ 190.861929][ T5766] ? do_raw_spin_unlock+0x121/0x230 [ 190.867183][ T5766] kobject_add_internal+0x6b8/0xc70 [ 190.872453][ T5766] kobject_add+0x156/0x220 [ 190.876924][ T5766] ? __rwlock_init+0x150/0x150 [ 190.881734][ T5766] ? kobject_init+0x1e0/0x1e0 [ 190.886471][ T5766] ? _raw_spin_unlock+0x28/0x40 [ 190.891366][ T5766] ? get_device_parent+0x366/0x390 [ 190.896528][ T5766] device_add+0x408/0xc20 [ 190.900907][ T5766] hci_conn_add_sysfs+0xd5/0x1e0 [ 190.905889][ T5766] le_conn_complete_evt+0xf36/0x1500 [ 190.911235][ T5766] ? hci_event_packet+0x4a7/0x1210 [ 190.916399][ T5766] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 190.922682][ T5766] ? __copy_skb_header+0xa7/0x550 [ 190.927763][ T5766] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 190.933466][ T5766] ? skb_pull_data+0xfb/0x200 [ 190.938202][ T5766] hci_le_conn_complete_evt+0x187/0x440 [ 190.943793][ T5766] ? hci_remote_host_features_evt+0x160/0x160 [ 190.949937][ T5766] hci_event_packet+0x795/0x1210 [ 190.954937][ T5766] ? bis_list+0x290/0x290 [ 190.959317][ T5766] ? lockdep_hardirqs_on+0x98/0x150 [ 190.964558][ T5766] ? hci_send_to_monitor+0xd7/0x4f0 [ 190.969791][ T5766] hci_rx_work+0x43a/0xd80 [ 190.974290][ T5766] ? process_scheduled_works+0x957/0x15b0 [ 190.980065][ T5766] process_scheduled_works+0xa45/0x15b0 [ 190.985691][ T5766] ? assign_work+0x400/0x400 [ 190.990379][ T5766] ? assign_work+0x39e/0x400 [ 190.995065][ T5766] worker_thread+0xa55/0xfc0 [ 190.999715][ T5766] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 191.005668][ T5766] ? _raw_spin_unlock+0x40/0x40 [ 191.010561][ T5766] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 191.016514][ T5766] kthread+0x2fa/0x390 [ 191.020624][ T5766] ? pr_cont_work+0x560/0x560 [ 191.025349][ T5766] ? kthread_blkcg+0xd0/0xd0 [ 191.029989][ T5766] ret_from_fork+0x48/0x80 [ 191.034458][ T5766] ? kthread_blkcg+0xd0/0xd0 [ 191.039085][ T5766] ret_from_fork_asm+0x11/0x20 [ 191.043991][ T5766] [ 191.047157][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.066493][ T5766] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.092008][ T5766] Bluetooth: hci0: failed to register connection device [ 191.320966][ T5754] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 191.329734][ T5754] ath9k_htc: Failed to initialize the device [ 191.534207][ T9] usb 4-1: USB disconnect, device number 7 [ 191.610552][ T5890] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 191.629768][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 191.843661][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.875654][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.927923][ T5890] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 191.964700][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.994639][ T5890] usb 3-1: config 0 descriptor?? [ 192.822170][ T5890] elan 0003:04F3:0755.0001: bogus close delimiter [ 193.007261][ T5890] elan 0003:04F3:0755.0001: item 0 0 2 10 parsing failed [ 193.026501][ T5890] elan 0003:04F3:0755.0001: Hid Parse failed [ 193.040916][ T5890] elan: probe of 0003:04F3:0755.0001 failed with error -22 [ 193.068575][ T5890] usb 3-1: USB disconnect, device number 6 [ 194.691922][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.698355][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.051985][ T6696] capability: warning: `syz.2.257' uses deprecated v2 capabilities in a way that may be insecure [ 196.990772][ T5080] Bluetooth: hci0: command 0x0406 tx timeout [ 197.000932][ T5080] Bluetooth: hci3: command 0x0406 tx timeout [ 197.007093][ T5080] Bluetooth: hci1: command 0x0406 tx timeout [ 200.725489][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.943804][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.606501][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.894685][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.675495][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 213.675508][ T28] audit: type=1326 audit(1766725037.040:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 214.405169][ T28] audit: type=1326 audit(1766725037.040:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 214.560475][ T28] audit: type=1326 audit(1766725037.040:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 214.582886][ T28] audit: type=1326 audit(1766725037.040:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 214.637084][ T28] audit: type=1326 audit(1766725037.040:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 215.332276][ T28] audit: type=1326 audit(1766725037.040:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 215.356094][ T28] audit: type=1326 audit(1766725037.040:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 217.056495][ T28] audit: type=1326 audit(1766725037.040:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 217.172693][ T28] audit: type=1326 audit(1766725037.040:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2bb3f8f749 code=0x7ffc0000 [ 217.426182][ T28] audit: type=1804 audit(1766725040.790:127): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.273" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 221.660445][ T11] hsr_slave_0: left promiscuous mode [ 221.740513][ T11] hsr_slave_1: left promiscuous mode [ 221.800838][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.808398][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.864260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.880699][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.921911][ T11] bridge_slave_1: left allmulticast mode [ 221.927632][ T11] bridge_slave_1: left promiscuous mode [ 221.948300][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.007986][ T11] bridge_slave_0: left allmulticast mode [ 222.030749][ T11] bridge_slave_0: left promiscuous mode [ 222.036630][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.213829][ T11] veth1_macvtap: left promiscuous mode [ 222.219906][ T11] veth0_macvtap: left promiscuous mode [ 222.250635][ T11] veth1_vlan: left promiscuous mode [ 222.256409][ T11] veth0_vlan: left promiscuous mode [ 225.839347][ T6882] loop6: detected capacity change from 0 to 7 [ 227.673759][ T6882] Dev loop6: unable to read RDB block 7 [ 227.679605][ T6882] loop6: unable to read partition table [ 227.685529][ T6882] loop6: partition table beyond EOD, truncated [ 227.691771][ T6882] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 231.834062][ T11] team0 (unregistering): Port device team_slave_1 removed [ 231.962888][ T5803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 231.971434][ T11] team0 (unregistering): Port device team_slave_0 removed [ 232.100881][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.206450][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.223318][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.250462][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.260280][ T5803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.309187][ T5803] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.324488][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.348959][ T5803] usb 5-1: config 0 descriptor?? [ 232.597773][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 232.782868][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.811209][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.834135][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.866347][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.920504][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.927993][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.960478][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 232.974123][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.000687][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.008182][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.061000][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.068569][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.110370][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.130589][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.164242][ T5803] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 233.191520][ T5803] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 233.241265][ T5803] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 233.298108][ T5803] usb 5-1: USB disconnect, device number 3 [ 235.104706][ T6912] fido_id[6912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 236.880378][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.903024][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.922743][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.944695][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.953228][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.970600][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.553097][ T11] bond0 (unregistering): Released all slaves [ 237.750445][ T5803] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 238.011091][ T5803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.019791][ T5803] usb 5-1: not running at top speed; connect to a high speed hub [ 238.065548][ T5803] usb 5-1: config 5 has an invalid interface number: 44 but max is 1 [ 238.094189][ T5803] usb 5-1: config 5 has no interface number 1 [ 238.115472][ T5803] usb 5-1: config 5 interface 44 has no altsetting 0 [ 238.136718][ T5803] usb 5-1: config 5 interface 0 has no altsetting 0 [ 238.146547][ T5803] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 238.166900][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.190408][ T5803] usb 5-1: Product: syz [ 238.194723][ T5803] usb 5-1: Manufacturer: syz [ 238.199356][ T5803] usb 5-1: SerialNumber: syz [ 238.429192][ T6925] chnl_net:caif_netlink_parms(): no params data found [ 239.047599][ T6960] usb usb8: usbfs: process 6960 (syz.1.326) did not claim interface 0 before use [ 239.095107][ T51] Bluetooth: hci4: command tx timeout [ 239.372097][ T5803] usb 5-1: bad CDC descriptors [ 239.473580][ T5803] usb 5-1: bad CDC descriptors [ 239.519551][ T5803] usb 5-1: USB disconnect, device number 4 [ 239.931179][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.938291][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.425106][ T51] Bluetooth: hci4: command tx timeout [ 241.500264][ T6925] bridge_slave_0: entered allmulticast mode [ 241.507658][ T6925] bridge_slave_0: entered promiscuous mode [ 242.161916][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.169521][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.179466][ T6925] bridge_slave_1: entered allmulticast mode [ 242.194061][ T6925] bridge_slave_1: entered promiscuous mode [ 243.480529][ T5768] Bluetooth: hci4: command tx timeout [ 244.860270][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.920303][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.455957][ T5768] Bluetooth: hci4: command tx timeout [ 246.504430][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.658387][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.869377][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 247.427100][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.635013][ T6925] team0: Port device team_slave_0 added [ 247.687083][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.230052][ T6925] team0: Port device team_slave_1 added [ 249.248897][ T7025] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 249.399819][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.430353][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.500536][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.524353][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.540578][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.620603][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.918042][ T6925] hsr_slave_0: entered promiscuous mode [ 249.931537][ T6925] hsr_slave_1: entered promiscuous mode [ 249.956848][ T6925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.979585][ T6925] Cannot create hsr debugfs directory [ 250.628569][ T7057] usb usb8: usbfs: process 7057 (syz.4.343) did not claim interface 0 before use [ 251.293260][ T7060] loop1: detected capacity change from 0 to 256 [ 253.792988][ T5768] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 253.824850][ T6925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.957303][ T6925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.001545][ T6925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.057178][ T6925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.690700][ T5754] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 254.961345][ T5754] usb 2-1: device descriptor read/64, error -71 [ 256.919219][ T5754] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 256.921666][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.040676][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.243918][ T11] hsr_slave_0: left promiscuous mode [ 257.286257][ T11] hsr_slave_1: left promiscuous mode [ 257.305966][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.325403][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.341563][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.349059][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.226098][ T5768] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 258.237730][ T5768] Bluetooth: hci3: Injecting HCI hardware error event [ 258.246656][ T51] Bluetooth: hci3: hardware error 0x00 [ 258.359675][ T11] bridge_slave_1: left allmulticast mode [ 258.392331][ T11] bridge_slave_1: left promiscuous mode [ 258.398168][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.456278][ T11] bridge_slave_0: left allmulticast mode [ 258.476101][ T11] bridge_slave_0: left promiscuous mode [ 259.064115][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.415369][ T11] veth1_macvtap: left promiscuous mode [ 259.431192][ T11] veth0_macvtap: left promiscuous mode [ 259.437645][ T11] veth1_vlan: left promiscuous mode [ 259.599806][ T7127] loop4: detected capacity change from 0 to 256 [ 261.372903][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 261.821819][ T11] team0 (unregistering): Port device vlan0 removed [ 264.061122][ T11] team0 (unregistering): Port device team_slave_1 removed [ 264.222523][ T11] team0 (unregistering): Port device team_slave_0 removed [ 264.289239][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.932329][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.541898][ T11] bond0 (unregistering): Released all slaves [ 266.732846][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.225246][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.276926][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.284938][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.870611][ T7163] loop6: detected capacity change from 0 to 7 [ 270.468455][ T7163] Dev loop6: unable to read RDB block 7 [ 270.474134][ T7163] loop6: unable to read partition table [ 270.479910][ T7163] loop6: partition table beyond EOD, truncated [ 270.486106][ T7163] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 270.993469][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.000677][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.875781][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.905926][ T11] IPVS: stop unused estimator thread 0... [ 276.046926][ T6925] veth0_vlan: entered promiscuous mode [ 276.083453][ T6925] veth1_vlan: entered promiscuous mode [ 276.173931][ T6925] veth0_macvtap: entered promiscuous mode [ 276.195946][ T6925] veth1_macvtap: entered promiscuous mode [ 276.260246][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.290256][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.320521][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.335531][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.348172][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.378928][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.024666][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.148384][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.164854][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.175907][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.186561][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.197562][ T6925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.208195][ T6925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.225185][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.247190][ T6925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.257599][ T6925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.287155][ T6925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.310399][ T6925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.471918][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.479951][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.559121][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.570448][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.320721][ T5754] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 287.130416][ T5754] usb 4-1: device not accepting address 8, error -71 [ 288.105252][ T7294] ip6tnl1: entered promiscuous mode [ 288.847636][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 291.206866][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 291.216157][ T7319] bridge_slave_1: left allmulticast mode [ 291.221948][ T7319] bridge_slave_1: left promiscuous mode [ 291.227976][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.500695][ T7319] bridge_slave_0: left allmulticast mode [ 291.539976][ T7319] bridge_slave_0: left promiscuous mode [ 291.546044][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.024854][ T7393] loop1: detected capacity change from 0 to 256 [ 299.129391][ T7394] 9pnet_fd: Insufficient options for proto=fd [ 299.458288][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 302.988968][ T7430] loop1: detected capacity change from 0 to 256 [ 303.260427][ T5824] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 303.472957][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 303.489277][ T5824] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 303.501365][ T5824] usb 4-1: config 0 has no interface number 0 [ 303.513629][ T5824] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 303.527050][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.545375][ T5824] usb 4-1: Product: syz [ 303.549596][ T5824] usb 4-1: Manufacturer: syz [ 303.590111][ T5824] usb 4-1: SerialNumber: syz [ 303.612859][ T5824] usb 4-1: config 0 descriptor?? [ 303.626980][ T5824] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 303.654954][ T5824] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 303.824699][ T5824] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 304.046771][ T5824] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 304.859067][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 305.691632][ T5824] usb 4-1: USB disconnect, device number 10 [ 305.698149][ T5824] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 306.057098][ T7464] Illegal XDP return value 4294967294 on prog (id 58) dev N/A, expect packet loss! [ 306.977886][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 307.173018][ T7478] loop1: detected capacity change from 0 to 256 [ 313.248487][ T7522] netlink: 164 bytes leftover after parsing attributes in process `syz.1.446'. [ 314.296591][ T7523] block device autoloading is deprecated and will be removed. [ 314.321832][ T7523] bio_check_eod: 2 callbacks suppressed [ 314.321845][ T7523] syz.3.445: attempt to access beyond end of device [ 314.321845][ T7523] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.600421][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.606762][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.980529][ T5754] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 320.181195][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 320.193220][ T5754] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 320.211387][ T5754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.228246][ T5754] usb 2-1: config 0 descriptor?? [ 320.457416][ T5754] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 320.524163][ T5754] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 320.549628][ T5754] dib0700: firmware download failed at 7 with -22 [ 321.368256][ T7570] syzkaller0: entered promiscuous mode [ 321.374214][ T7570] syzkaller0: entered allmulticast mode [ 321.393345][ T5881] kernel write not supported for file /comedi4 (pid: 5881 comm: kworker/0:5) [ 323.032544][ T5824] usb 2-1: USB disconnect, device number 9 [ 323.171698][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 323.551630][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.857496][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.044632][ T23] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 324.370905][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.488837][ T23] usb 5-1: config 0 descriptor?? [ 324.677209][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 324.760751][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 325.032518][ T23] usb 5-1: USB disconnect, device number 5 [ 327.130343][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 327.330322][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 327.351713][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 327.361041][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.371558][ T23] usb 5-1: config 0 descriptor?? [ 327.621000][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 327.630546][ T5823] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 327.643430][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 327.666355][ T23] dib0700: firmware download failed at 7 with -22 [ 327.815724][ T5823] usb 6-1: no configurations [ 327.820588][ T5823] usb 6-1: can't read configurations, error -22 [ 328.000373][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 328.191646][ T5823] usb 6-1: no configurations [ 328.196327][ T5823] usb 6-1: can't read configurations, error -22 [ 328.213826][ T5823] usb usb6-port1: attempt power cycle [ 328.631749][ T5823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 328.664797][ T5823] usb 6-1: no configurations [ 328.669431][ T5823] usb 6-1: can't read configurations, error -22 [ 328.820444][ T5823] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 328.864811][ T5823] usb 6-1: no configurations [ 328.869502][ T5823] usb 6-1: can't read configurations, error -22 [ 328.876106][ T5823] usb usb6-port1: unable to enumerate USB device [ 329.734195][ T5823] usb 5-1: USB disconnect, device number 6 [ 335.754996][ T5823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 337.130428][ T5823] usb 6-1: device descriptor read/64, error -71 [ 337.938914][ T5881] IPVS: starting estimator thread 0... [ 337.967863][ T5823] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 338.100498][ T7703] IPVS: using max 17 ests per chain, 40800 per kthread [ 338.342043][ T5823] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 338.405728][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.460711][ T5823] usb 6-1: config 0 descriptor?? [ 338.503029][ T5823] gspca_main: spca508-2.14.0 probing 8086:0110 [ 340.485813][ T5823] gspca_spca508: reg_read err -110 [ 340.493830][ T5823] gspca_spca508: reg_read err -71 [ 340.505805][ T5823] gspca_spca508: reg_read err -71 [ 340.512014][ T5823] gspca_spca508: reg_read err -71 [ 340.517561][ T5823] gspca_spca508: reg_read err -71 [ 340.540575][ T5823] gspca_spca508: reg write: error -71 [ 340.548776][ T7714] loop1: detected capacity change from 0 to 256 [ 340.557579][ T5823] spca508: probe of 6-1:0.0 failed with error -71 [ 340.567163][ T5823] usb 6-1: USB disconnect, device number 7 [ 344.391404][ T28] audit: type=1800 audit(1766725167.750:128): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.522" name="bus" dev="overlay" ino=453 res=0 errno=0 [ 344.730466][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 344.792406][ T7757] program syz.3.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.803335][ T7757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 345.214472][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 345.287721][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 345.457524][ T7756] loop4: detected capacity change from 0 to 256 [ 345.493717][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.516419][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.534241][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 345.546107][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 345.556391][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 345.575463][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.596541][ T23] usb 2-1: config 0 descriptor?? [ 345.636418][ T51] Bluetooth: hci0: urb ffff88802e4f5b00 submission failed (90) [ 347.495686][ T23] usb 2-1: USB disconnect, device number 10 [ 347.630364][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 347.872135][ T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 347.890340][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.666377][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 348.690338][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 348.698411][ T8] usb 4-1: Manufacturer: syz [ 348.721389][ T8] usb 4-1: config 0 descriptor?? [ 348.842211][ T8] igorplugusb 4-1:0.0: incorrect number of endpoints [ 348.862298][ T8] usb 4-1: USB disconnect, device number 11 [ 348.914618][ T7779] netlink: 332 bytes leftover after parsing attributes in process `syz.5.532'. [ 348.927140][ T7779] netlink: 'syz.5.532': attribute type 1 has an invalid length. [ 349.050798][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.210171][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 350.230566][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.250369][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.273541][ T23] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 350.285367][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.297959][ T23] usb 2-1: Product: syz [ 350.302218][ T23] usb 2-1: Manufacturer: syz [ 350.306926][ T23] usb 2-1: SerialNumber: syz [ 350.319736][ T23] usb 2-1: config 0 descriptor?? [ 350.334047][ T7777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.813103][ T23] usb 2-1: USB disconnect, device number 11 [ 356.447667][ T7847] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 359.021513][ T5823] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 359.230411][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 359.243947][ T5823] usb 6-1: no configurations [ 359.253843][ T5823] usb 6-1: can't read configurations, error -22 [ 360.823783][ T5768] Bluetooth: hci4: command 0x0406 tx timeout [ 360.891731][ T5823] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 361.168670][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 361.200406][ T5823] usb 6-1: no configurations [ 361.205058][ T5823] usb 6-1: can't read configurations, error -22 [ 361.260529][ T5823] usb usb6-port1: attempt power cycle [ 361.820426][ T5823] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 363.606323][ T5823] usb 6-1: device descriptor read/8, error -71 [ 363.729804][ T28] audit: type=1800 audit(1766725187.090:129): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.572" name="bus" dev="overlay" ino=268 res=0 errno=0 [ 365.993059][ T7928] vivid-000: disconnect [ 366.889170][ T7929] vivid-000: reconnect [ 366.893685][ T5764] Bluetooth: hci4: command 0x0406 tx timeout [ 370.662272][ T5823] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 370.850813][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 370.864539][ T5823] usb 5-1: config 253 has an invalid interface number: 2 but max is 0 [ 370.879327][ T5823] usb 5-1: config 253 has no interface number 0 [ 370.889663][ T5823] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=e8.50 [ 370.899313][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.907542][ T5823] usb 5-1: Product: syz [ 370.913265][ T5823] usb 5-1: Manufacturer: syz [ 370.918061][ T5823] usb 5-1: SerialNumber: syz [ 371.151478][ T5851] usb 5-1: USB disconnect, device number 7 [ 374.573882][ T8012] syz.1.609 uses obsolete (PF_INET,SOCK_PACKET) [ 376.642474][ T5851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 376.847293][ T8042] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.892251][ T5851] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 376.918043][ T5851] usb 5-1: config 0 has no interface number 0 [ 376.938157][ T5851] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 376.951641][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.489898][ T5851] usb 5-1: Product: syz [ 378.510135][ T5851] usb 5-1: Manufacturer: syz [ 378.514946][ T5851] usb 5-1: SerialNumber: syz [ 378.522937][ T5851] usb 5-1: config 0 descriptor?? [ 378.532432][ T5851] as10x_usb: device has been detected [ 378.539596][ T5851] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 378.566014][ T5851] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 378.606605][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.613183][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.633176][ T5851] as10x_usb: error during firmware upload part1 [ 378.650329][ T5851] Registered device PCTV Systems picoStick (74e) [ 378.742800][ T5823] usb 5-1: USB disconnect, device number 8 [ 378.790450][ T5823] Unregistered device PCTV Systems picoStick (74e) [ 378.801510][ T5823] as10x_usb: device has been disconnected [ 379.215765][ T28] audit: type=1326 audit(1766725202.580:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.270419][ T28] audit: type=1326 audit(1766725202.580:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.329865][ T28] audit: type=1326 audit(1766725202.580:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.380333][ T28] audit: type=1326 audit(1766725202.580:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.440363][ T28] audit: type=1326 audit(1766725202.580:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.496201][ T28] audit: type=1326 audit(1766725202.580:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.552412][ T28] audit: type=1326 audit(1766725202.610:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.622797][ T28] audit: type=1326 audit(1766725202.610:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.695336][ T28] audit: type=1326 audit(1766725202.610:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 379.739910][ T28] audit: type=1326 audit(1766725202.620:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.5.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa58bf8f749 code=0x7ffc0000 [ 380.255104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc34000: rx timeout, send abort [ 380.756089][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc35c00: rx timeout, send abort [ 380.764998][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc34000: abort rx timeout. Force session deactivation [ 381.264418][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc35c00: abort rx timeout. Force session deactivation [ 381.710208][ T8088] input: syz1 as /devices/virtual/input/input7 [ 383.151205][ T8104] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 383.171378][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 384.290445][ T5851] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 385.981007][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 385.997872][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.010402][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 386.037007][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.057445][ T5851] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.081108][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.107912][ T5851] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 386.127848][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.148820][ T5851] usb 6-1: config 0 descriptor?? [ 386.369084][ T5851] usb 6-1: USB disconnect, device number 12 [ 386.977521][ T8128] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 387.009915][ T8128] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 387.811262][ T8135] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 387.867573][ T8135] netlink: 'syz.1.649': attribute type 16 has an invalid length. [ 387.901496][ T8135] netlink: 156 bytes leftover after parsing attributes in process `syz.1.649'. [ 388.194037][ T8141] binder_alloc: 8140: binder_alloc_buf size 4294968136 failed, no address space [ 388.457824][ T8141] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 389.070712][ T5824] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 389.260349][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 389.274568][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.295916][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.324333][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 389.351081][ T5824] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 389.371634][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.993734][ T5824] usb 2-1: config 0 descriptor?? [ 391.566281][ T5824] appleir 0003:05AC:8241.0003: unknown main item tag 0x1 [ 391.573726][ T5824] appleir 0003:05AC:8241.0003: unknown main item tag 0x1 [ 391.581647][ T5824] appleir 0003:05AC:8241.0003: item fetching failed at offset 4/5 [ 391.590287][ T5824] appleir 0003:05AC:8241.0003: parse failed [ 391.596302][ T5824] appleir: probe of 0003:05AC:8241.0003 failed with error -22 [ 393.536609][ T5851] usb 2-1: USB disconnect, device number 12 [ 395.910500][ T8194] bridge_slave_0: left allmulticast mode [ 395.916309][ T8194] bridge_slave_0: left promiscuous mode [ 395.927376][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.946513][ T8194] bridge_slave_1: left allmulticast mode [ 395.961037][ T8194] bridge_slave_1: left promiscuous mode [ 395.973228][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.998143][ T8194] bond0: (slave bond_slave_0): Releasing backup interface [ 396.049043][ T8194] bond0: (slave bond_slave_1): Releasing backup interface [ 396.141588][ T8194] team0: Port device team_slave_0 removed [ 396.178119][ T8194] team0: Port device team_slave_1 removed [ 396.199157][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.222685][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.233691][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.267027][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.522620][ T5764] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 398.614543][ T8] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 402.450423][ T8] usb 6-1: device not accepting address 13, error -71 [ 412.449576][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 413.029430][ T8275] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 414.253373][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.693'. [ 417.473412][ T8314] vivid-001: disconnect [ 418.409271][ T8315] vivid-001: reconnect