last executing test programs: 13m42.991485256s ago: executing program 3 (id=3966): socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20) 13m41.205980784s ago: executing program 3 (id=3971): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000121401"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) 13m40.386669956s ago: executing program 3 (id=3975): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0xe63e, 0x0, 0x0, 0x0) 13m39.001223301s ago: executing program 3 (id=3978): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3, {0x0, 0x1}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) socket$inet6(0xa, 0x3, 0x9) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004000) 13m36.136235746s ago: executing program 3 (id=3981): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"a2e3ad08ed6b52f99cfbf4c087f71e9b3d0963ff7fc6e5539b9b3b0a8b9b441b4552101b080d29558f0e1ac6e7049b3468959b189a242a9b4bf3988f7ef319520700ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 13m34.164653833s ago: executing program 3 (id=3985): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x18800, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000300), 0x3, 0x202e01) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b384d520000019100001070000003830323131000000000000000f0000000000000000"], 0x20}}, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) inotify_rm_watch(r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r6], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)) socket(0x11, 0x800000003, 0x0) 13m18.568648891s ago: executing program 32 (id=3985): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x18800, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000300), 0x3, 0x202e01) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b384d520000019100001070000003830323131000000000000000f0000000000000000"], 0x20}}, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) inotify_rm_watch(r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r6], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)) socket(0x11, 0x800000003, 0x0) 18.436092203s ago: executing program 5 (id=6291): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = socket$inet(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair(0x2b, 0x2, 0x4, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, 0x0) setsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000cc0)={0x1, 0x1, {0x10, @usage=0xef, 0x0, 0x40, 0x0, 0x200, 0x0, 0xfffffffffffffff7, 0x440, @usage=0x8, 0x3, 0x8000, [0x2, 0x4, 0x6, 0x6, 0x7ff, 0x10000]}, {0x101, @usage=0xa010, r6, 0x5, 0xaec7, 0x80000000, 0xfffffffffffff8aa, 0x9, 0x0, @usage=0x7, 0x0, 0xf9, [0x6, 0x3, 0x3, 0x4, 0x4, 0xcb]}, {0xfffffffffffffff7, @usage=0x2, r7, 0x2, 0x8001, 0x8, 0xfffffffffffffff9, 0x0, 0x2, @struct={0x4, 0x99}, 0x6774, 0x2e62, [0x2, 0x10001, 0x52a900000000000, 0xffffffffffffffff, 0x7, 0x4]}, {0x80, 0xa, 0xfffffffffffffd36}}) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="00596ea94e00"/16, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 16.111747109s ago: executing program 2 (id=6296): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0xd8, 0x8}) 16.087042797s ago: executing program 5 (id=6297): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = socket$inet(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair(0x2b, 0x2, 0x4, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 15.268761116s ago: executing program 2 (id=6300): r0 = socket$inet6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000001100)={0xa, 0x4e22, 0x8, @loopback, 0x9}, 0x1c) 14.159603511s ago: executing program 2 (id=6301): socket$kcm(0x29, 0x7, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x115) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) read$msr(r0, &(0x7f0000000400)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000000000000855a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000010140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) 13.29537126s ago: executing program 2 (id=6304): syz_io_uring_setup(0x214b, &(0x7f0000000100)={0x0, 0x800b594, 0x0, 0x1001, 0x2b9}, &(0x7f0000000000), &(0x7f0000000340)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x0, 0x3, 0x4, 0x4}}, 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 12.185200427s ago: executing program 2 (id=6306): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) 11.15145305s ago: executing program 0 (id=6309): lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v3={0x3000000, [{0x4, 0x4e}, {0x7, 0x2}]}, 0x18, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f000000e880)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = fspick(0xffffffffffffff9c, 0x0, 0xf) syz_emit_ethernet(0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1e88a8080081ea4b00001800"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) copy_file_range(r5, &(0x7f0000000380)=0x6a, r3, 0x0, 0x40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2) read(r7, &(0x7f0000001e80)=""/96, 0x60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34343459, 0x2}}) open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000ce0000e2ff71511a6b95b19f5e90bf6614522c34bd042befbdf84d62d654962758", @ANYRES16=r4, @ANYBLOB="010000000000000000000300000014000180100001006574683a62726964"], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f000000ea00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2518000000100030800c000180080001000200000008000300", @ANYRES32=r1, @ANYBLOB="cdcc67de2e102f7a00775d309acaee6aa3326e26d3c89ccaaa3aea8e48088dee9fcf8f4e413bc925c44970cf263b6ad9bee2e36fedd8cab01df15c73f26805f5"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 10.378344799s ago: executing program 0 (id=6310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x10000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x6}, {}]}, [{0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x1, 0x800000}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x8, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {0x0, 0x1fffffc, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {0x0, 0x0, 0x0, 0x4, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x4}, {}, {0x1, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x80}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xb}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x3, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x8327}, {0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x8d}, {0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0xa7}, {}, {}, {0x0, 0x0, 0x52c0, 0x4}, {}, {}, {0x0, 0x0, 0x1000}, {0xfffffffc}, {0x729, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0xffffffff}, {}, {0x4, 0x0, 0x0, 0xb4bb, 0x1}, {}, {0x0, 0x9}, {0x4000}, {0x0, 0x831, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x40000, 0x0, 0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) unshare(0x6020400) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10480, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b000, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x29, 0x7f, 0xfb, 0x40, 0x1871, 0x306, 0x1ad2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x40, 0x0, 0xe, 0x1, 0x0, 0xf, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x65, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfff9, 0x3, 0x46}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x5}]}]}}]}}]}}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r8, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xbb2d, 0x3fd, 0xffffffff, 0x2804a, 0xffffffffffffffff, 0x5, '\x00', r8, r4, 0x2, 0x1, 0x5, 0x6, @value=r5, @void, @void, @value}, 0x50) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, @in6=@mcast1, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x7, 0x6}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46fdd4af5d030000000000000000000600050000004b00000000000000400000000000000033020000000000005ec200000002380002000b0008008a0951e57464090000000700000000000000000000800000000003000000000000000500000000000000ff00000000000000090000000000000004000000ffffff7f0100000000000000090000000000000002000080000000000d080000000000000300000000000000f7ffffffffffffffe5601d1ddaa88bff23cae6467d540932ad3ee2fa46436c55e4128aa5fc51a73902fdf9e4ef47f4766f695d5976fdf8100225a3b977cdcdc039d8e663249a59bd58cdaf9c2914e05bde1265cb8d3ea5fd31f8ed659fcd125271ee44af394ce5d98708c1fa66d0bcc75fbadf277f7198b7407d15de0149f25ac8eaaa3f10f96c486ca88caf8fdd8abf8289d6c018e779b25773e0a556e9a7f10a7ddec3518d1f0d3accf302b22dcadb8feb7f17f86539e6964c2d8d5d764c6379220a7a514514aa6112a6d907486f4a807e28c54e3164a61284dfb79389577c94a55f82b7d56cd6ba51c55bb4b3194b761b3e62d9ecac875163657408f7d194d960a692dea193d729ee3a46f8815573b87a57c7829bc53755f4d21b0a3a60e87bc2069b393f64a604f8d011e18db155d4fe98e8bbe5887d6f6fa52e5f5a36f9ecf0b9a928ff6aacb8cb731e5a0b9cdf83e6a086859790ca09c148788e49b3316424636e983b2262fbc48564a99348ce624d6ede89f3021eed5c0ecc4db1237b4895b38fd3f1eb35a20970f8ac3edc58a47f2a20f53ad34f6a77854bca867401031d8c6c1f79428ef7345a5d90949f2142a7ee8844adfc6e1304d89f2ed0ec99b4d7c853495088baed29474f712cf3a72166120d366004e22063f9bf781208427fff4f58dd423666c2beb2e421dbaf9b22c2c7342d5e3369755ecf2e0283d254b8272ce2e97a7f8c99a16eb95c780ca5d008ac50b728fe4c8dbf71707214ff5127389bcfc542930388b79fdb95ed6a38945371c79481b0883ffbd8342b7b394f4884d38882f6f808ff32f9462d184ef021513576a7a047627a130feef44242d14cf917358ec48f752b26de22201a49d7fb4a6ae0c3a26ecfa0debecca815e92de0edf26b30302c051be640fe14412793e4a6ef298dcb01ee5a45c3e7c579fe15318be34ebb4ff82b1d1a13af60aae2521368e81aabc4767386e49afa2aa3e61010865728d429868477d5ff3f6feb984b5394ff47c4e108c937030749986386bc91bc8b2307a3a9718bac13899d03d28acb56c0684057f58ed9a26309cec8cdb918018618c14d6b6d356861825bcd5e6240373f2547236015d8c72fcc2fa9db86c8da82fd96cbd3605f339879b8e15f80d04ffeea012ae8a587686f3265ec6afedef3d6289d01586ad904578de844c6b06a87e6ad752e7d496b64a7013dffad2850c8e413173a787151b45908704ab5fa4ba4c099d154fce56afd41e85c8102c49a02e6a320274872c871f09f595a6bbd2b79d6ad51b8ad9b75c015a0594a3b14839e4f1828f878babace641ef2625981fcd21268e64c1901ec6692a2f913dc467777d78156cd2772370c49438e7371495e7e65e01bd74874e086a24cf09367e0e10724d339b016abd2a7fcb48775bc2b3cbbdd815ddaf313e911f8dd101104d5a858c2e0e282e5ecc23400f49d6dea0f610789cac6bebc7f710e078f534766133a098a8876cfdd4e3e1f16a1f92350fdecdae8b95e9baef4c358f3118bc023de8020a8db2d3790ab643a4c900e14888dc1a5280387d06bcdc9a9325a10ba997ed89769d027f4bb17ebda1e04794aa47d31fd199b3c16870530c224cb1c709cdd33e77386dc6458849c0ad9d6d6c6ba97180cc97b25d0b0876ea1a61b1a93a9b342ff0258a449c1acce6e0742b8a83a5d66b914f7b9705af2cdc9bd59603533a67a1307a02d76c24527cb88b3bc42ebd891e2579b23c49dc750f6d9f15977a0523750e9951047dc635b2185b68d18264b87d130b19e3b9f71f0958ec22e858bedb71f0a99d05505102efdc05888f263183e91726da559f66cd05d2f2a97837efa96b92f5ef44c423355714d777beb93baa739514f697f9814514669af0480dfe2ba78feef5c070d39a1d6e290145d4bef344089e83322c66a4ec8431b59dbcea18f48beea50f33ea0362a2b8e276f1ddab517bcb0f3880a93df1ba74ead55d06d58b3faaf671076e639c83bddad7bf06c2d31d275b1c409dfec0c3d3ec341c5988bef34667c7d3b898cc62e8e60e143133b28ac788722932d11766f444265d18b254acd2b3231e1aba626d12da415307f4a3badd8f5295b2d4268b3e534bf0785da778578c26c3766394095324bc435cbcc0dfe3a4ebde3512470c1de01c92caae9d7e959a917f5594055b38124870788c0c988f0e6ea56f276c19fb96c6438db8f1512c83acccb2e7819a0bd9e09cddc79fc9a4b363cc123b9f7bd3d0ae2cc74c1cc0c8a007f2a6bbb4efaf025c1ac1b9e97f95bc94f1bf64b99b4f2a11932f447f7206b6b180e889f4ebce08944eb30a8181384a80d72b0af3dba7fd58d8257e3409f3380d0d649b3f5bca071fe53bd47406d594b15043a3f2cdac79ed15a708dd50dffad41706d19399d4b534ccf873eb3f2bc37e74a0432bf203f49fa601baba4f8d46d42397f072f7ae98ee6e202883ee60942b937116ecbf2ee9d40f36466bdc2893c4daef8371c3f8aacee562091a4f2ab4872f4a607df5cb0c5f47877cbce65a3840f6ab2c02cb379873c269363fdcea2c90409c223fdaf14b6572d829cc76ab566a82f7ebeff745cfc573cc9bde7b0368dd8941c24510af9353e5b042d6391aa9313a01c443eae4b56312e5345f17dabc5a0f11b014a102876b0af633ba831cab1cf6049f40bf23ce405317085b964c5c46284dfe6ce795364083f82e9d87707d1ea40c821fdb5366a69472a90349009b219e5288f1ca5c12051e00d36462fca61584fa51121bdef24eac08fb117be402273acbe365d55f72721ed5ecffc9d43af7588802f5e4d47ae66d515336855ec5c77d6189bae7d283e5f533ab583ee4d1ab8a070daaaa9a0698dad20953933734e462c9a04745b03cb7187e10fc60a6f2883fc806d366ebd920908b39f7746ecc5183c7b282f70f5de58c74cdd302901d4abafb0e9f42a532ae6d677be49a05fdfc2d672e671e4a91b04dd1741435f73a3c53ecd5dba8456be6a0a27112c9ee0687665c58d051daf1482db172a2f4a27c2bbf93170b5cb34b07d386f2cc39917b408c2d70a94c55ea01de1c18698829f919090fdf8868c175c31e5b87e8324ad44920efabfde3bc01836dd09f69dbf9089dc84a1768a0dca82cc6d7fa530a1f91a7c4f9a3fc5145f0857de0886d1822a5931fc4c0cf23dde3b13529677e2804550222538beeadd22d531beb856d29bd5bc33c18a0e574eee26911d9b7b23dd39631ef2df9db5714771c4fe3bf6a339e0b5beb446d4a2c0ae4f9af9c5950283415772882f3f8d75b8b8f225b358984cb32eff9744aba219ffdcc15a508ac43a6bba0bbd1e7cdce2c7931d4a3d3581d2ddac8dba0d8e25fc909772246fbb34eea8e6976b45acb96b4a4b36e1d5f676cf23efd32825f1407ea5eb3b163e15f9d1142bcc7e1c2f20c9818cde00d537967900bfe38680d77ef0c2b6dde79ea937ce0f7725acb54f0380c156b836121b102eb7c0e5ae52386d2a91f1468a23fa744985307af785eb86b3837b322fa827d6fa53c97ac643a63101f9653ac863c2eb97478cde10e21a8546a2e67a953c6feeea513091eb47357320488b1c5b4fede6dc4deea25b51a7b4196f40079f53e1abed3e91b2c403015aa496313253b052b5e45b53627ceaa42999e8d03df9c9c1334633b7e0f3b88e8cd5241f8d08581bad84a92b051733f328cb575f30fc10d4781154245a7c97c9257c4c55403ee07768f42023d928bf82e929c8021f543436c5a4162ce318d87c1b77fd5453ea814d3d63953b2c4f505562365dfdb387f36f3ffaa6bfdb7d67115a73f3686355be1ed7f558c296566df2bb270cc693f429e109ab71d4b6f30970d35a3e2b60e0483fb9f0972d26ab3b58561c3e14cc5eb452459b0c402aac683ab6bb6401b3a15c6cc1edae5b8b52d0d76b90a21646fc4efb448a29d81ddb0968a79da3d4cc3313c0939c2fe43f8baa267033387f692652ecac77652a7343d1dbb47e9c3bad86448383a407bbe14d03c916b9adee0f3ad982d5df3d8c50ae89dde107d4fb22d470ac42789755dd18b2a26cafaa55dd465e2bb78341dcec8f268a4217f1e97ccc7733b1b27573163a194c3b6ced10547c3484b049aadfd720fc6143987863fce4e937b907fc89b5125766f1d330f07907421a9af19294d371faf36e61131e580312b8aaaab4b17cf9f944f4210711b3a08b3ff1b4a2e67da4e493ee4cbf7feb03af5dcfb1910940fca0c3db1da5740d36d7bf0fdce06a564b9c7cd6fb087a2a0b74ad245ac6d8bf47db88033847420289d8f3e6c1ad92e20b294fc82e4680fde4a586ca53024f84d32a0de868f35c0adf4e23ee4a5d149291c4185001257f098c21c63532a8df22f82f588f38f9ce6b56ae1a7dd66d828124f334cb0f1ee7b673fdc4191c6c1b9d32c90f2484ee4f905f435e9694a92840244d26c2b43bc7b12c3345070472e4373e36daa4b158f888d0ae2321ef4428371a3b73f1d19e1f6305ceea680c9d0d5cc2c425fb2b68b65cc5a61d7decbfdc7d6da1e43b16f2bef8d223f09f431d97ac066423bec6c1441b68d78ac9ffce0f2e14c21ec04077474f9418f43412d87b0e3c26cebcb74edfd320397502e6de74211878bb3bd971f95f8f841422a4180dbaa7a0ffb334f9bb011e7ab3a8ca1aa155265935fcf7a1aa98c0a7b0e83f8443e84ffde577d4f5da7526c5ae313b28b8428d43fe672794543c521e0813867883bfceea1a348f15f1ddbddf66614173d38c8a33e614f33aad6fc7c26f082c32f9d551fb5fc46d2564e4046f414f43f48af7a69b70acc858ba82a31fd7fac578e8b3eb4bbd59fb34a5ed0418e0bd6d2fe5270919ea5940ed057fcd5331c829aa25753be4512c9ebfae5a3d87a3caa599edbbe5a0a62dd0278b8acc71e89615429cf42f100d94e66bcf0457fdda73e01f0a26d391a73bb0af3e11939c893d3f72e54a4761fd8bae51ccc38418c83ddff1af9b0a9e6a66351a4bc3bd57f27dfe6f9387797f6a8f6bc9eb00a1a91e06b439eb7eb49a0f61c75351be13d6255e5c7c969b4e6b4d570308554b230098648b2502e7cde2ec313753e0dd24849560c24568b5e2511e1c0c9ba28b14122ee5f4f0cfce5c4bc0163d093ffc516b03c1281a321a6813371f5b353c3648baa831b6bf1404ffa1c38d0bee2348898b39955292795d22b384d9a0246399d1c70d2258da0a7a78039bbf7e7a3d320eca4e13664c51de5762a923530e585b2de7d10835ac2c4a696faf614a8676215702a0c037c1362084f4c42a1c1fb7eacd2b087c3f3d83c14255d2c2d0ad1dfb389d05dfe5c457485cae355893a9380ebfb6be788167aa0085ba52cf29ceb5d1926e80d4dbec4d725f309a96cfeb761069dad5df3cdaec00295ebb80812ac1bd24914862234be5f2e3d859d5220b6eb9969ea0242d6caaab5d6d2b8ecf4b58e9631735aa3c06343f0e9b9ea380162701179a877b3e3766812d9e8cf88d05fa310f2834d3fe01aa766f5cfff50ff80b5d770513cddbc97059739e0f2fc006cdfddef8a3e8b6f9a76402e4189882e5634a0e38bc75bd0bd407a0201bab6ef461b6b8d9db939bdb9ad96493382bd57057fb11752c908639d9dc113d769c5d017d201e9df0fe3b2f817d46c8341c86af6a7b919952e4b4c1b9ddbbf5a18c83d7a25b09a525cef428f16e0c00afcdf6759b2114195a720fcbec60624707754599280562f17ee723a7dce5e4d7e7f18fd728f3583538266ec8a83312065e6abd5b7542825270ea21d9cf1c1036f2a2ec512e19baff0529812d72b9838a"], 0x10b0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 10.272668754s ago: executing program 5 (id=6311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000254, 0x0) setrlimit(0x4, &(0x7f00000001c0)={0x101, 0x6}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00'}, 0x18) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r5 = syz_io_uring_setup(0x7b5b, &(0x7f0000000c40)={0x0, 0x40, 0x10100, 0x3, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd, 0x6, {}, 0x5, 0x1, 0x1}) io_uring_enter(r5, 0x92, 0x0, 0x0, 0x0, 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1004008, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000540)}, {&(0x7f0000000680)="35a1e4e0f969962495049b9372344e8b153cc0d21964cecc83fde975ac70faef7b44f8df6e169abbdd47bcec97e39580fd42080ccb18e8cfe507cf405a55b9f4ac6f7f", 0x43}], 0x2, 0x14, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.240905307s ago: executing program 4 (id=6312): socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 9.607604039s ago: executing program 4 (id=6314): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000004aa60000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 9.051356836s ago: executing program 5 (id=6315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) 7.779379757s ago: executing program 5 (id=6317): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0x99) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) 6.064092403s ago: executing program 0 (id=6319): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 5.946690013s ago: executing program 1 (id=6320): lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v3={0x3000000, [{0x4, 0x4e}, {0x7, 0x2}]}, 0x18, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f000000e880)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = fspick(0xffffffffffffff9c, 0x0, 0xf) syz_emit_ethernet(0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1e88a8080081ea4b00001800"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) copy_file_range(r5, &(0x7f0000000380)=0x6a, r3, 0x0, 0x40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2) read(r7, &(0x7f0000001e80)=""/96, 0x60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34343459, 0x2}}) open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000ce0000e2ff71511a6b95b19f5e90bf6614522c34bd042befbdf84d62d654962758", @ANYRES16=r4, @ANYBLOB="010000000000000000000300000014000180100001006574683a62726964"], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f000000ea00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2518000000100030800c000180080001000200000008000300", @ANYRES32=r1, @ANYBLOB="cdcc67de2e102f7a00775d309acaee6aa3326e26d3c89ccaaa3aea8e48088dee9fcf8f4e413bc925c44970cf263b6ad9bee2e36fedd8cab01df15c73f26805f5"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 5.76755636s ago: executing program 2 (id=6321): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = socket$inet(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair(0x2b, 0x2, 0x4, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000010c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 5.676251946s ago: executing program 0 (id=6322): io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x5, 0xfffffdd9, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a202, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) fanotify_init(0x0, 0x80000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = eventfd(0xe0fb064) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c80)={0x1, 0x0, [{0xdddd0000, 0x5a, &(0x7f00000006c0)=""/90}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.604378865s ago: executing program 5 (id=6323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}}, 0x0) 5.548053579s ago: executing program 1 (id=6324): socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 5.431706267s ago: executing program 4 (id=6325): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 3.68635715s ago: executing program 4 (id=6326): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) pipe2(&(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') 3.270586403s ago: executing program 1 (id=6327): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) readv(r2, &(0x7f0000000080), 0x0) 2.507706187s ago: executing program 1 (id=6328): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x18e}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5", 0x7b}, {&(0x7f0000000380)="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", 0x9f3}], 0x3}}], 0x1, 0x0) 2.343205362s ago: executing program 1 (id=6329): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) pipe2(&(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) setreuid(0xee01, 0xee01) syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') 2.249189137s ago: executing program 4 (id=6330): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendto$inet(r1, &(0x7f0000000240)="08b536f1098fbac47281ea39e69ee596d320394f108714ac90a9acd7ff167a6aeb8b6e4a7cce8fa69643885925ce4fe8746c13f5c63d8cd6c93707de623517eec45cc50204599f", 0x47, 0x404c050, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd0}}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) 1.716832164s ago: executing program 0 (id=6331): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) 191.69313ms ago: executing program 0 (id=6332): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 93.090242ms ago: executing program 1 (id=6333): socket$kcm(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x1000000, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=6334): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0x99) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = syz_open_procfs(r2, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) kernel console output (not intermixed with test programs): vice not accepting address 29, error -71 [ 888.525348][ T46] usb usb5-port1: unable to enumerate USB device [ 888.591263][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4979'. [ 889.328475][T19297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.435735][T19324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 892.446112][ T5826] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 894.348259][T19351] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5000'. [ 894.806777][T19357] xt_addrtype: ipv6 does not support BROADCAST matching [ 897.353928][ T5905] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 897.416699][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 897.956892][ T5905] usb 3-1: device descriptor read/64, error -71 [ 898.087761][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 898.110107][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 898.123493][ T9] usb 5-1: config 0 has no interface number 0 [ 898.142002][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 898.258035][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 898.271823][ T5905] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 898.365826][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 898.510232][ T5905] usb 3-1: device descriptor read/64, error -71 [ 898.544952][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 898.594771][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 898.607971][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.707452][ T5905] usb usb3-port1: attempt power cycle [ 898.799055][ T9] usb 5-1: config 0 descriptor?? [ 898.810927][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 899.157320][ T5905] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 899.224330][ T5903] usb 5-1: USB disconnect, device number 30 [ 899.249529][ T46] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 899.281985][ T5905] usb 3-1: device descriptor read/8, error -71 [ 899.290474][ T5903] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 899.520204][ T46] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 899.545504][ T46] usb 2-1: config 0 has no interface number 0 [ 899.559194][ T46] usb 2-1: config 0 interface 11 has no altsetting 0 [ 899.570370][ T46] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 899.586987][ T5905] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 899.590660][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.644463][ T46] usb 2-1: config 0 descriptor?? [ 899.782375][T19416] xt_addrtype: ipv6 does not support BROADCAST matching [ 899.838972][ T5905] usb 3-1: device not accepting address 22, error -71 [ 900.198732][ T5905] usb usb3-port1: unable to enumerate USB device [ 900.429518][ T46] usb 2-1: string descriptor 0 read error: -71 [ 900.452203][ T46] usb 2-1: Found UVC 0.00 device (1871:0306) [ 900.470419][ T46] usb 2-1: No valid video chain found. [ 900.485045][ T46] usb 2-1: USB disconnect, device number 24 [ 903.107691][T19448] input: syz0 as /devices/virtual/input/input38 [ 903.114100][T19448] input: failed to attach handler leds to device input38, error: -6 [ 903.152243][T15614] libceph: connect (1)[c::]:6789 error -101 [ 903.158933][T15614] libceph: mon0 (1)[c::]:6789 connect error [ 903.166871][ T46] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 903.350607][ T46] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 903.361381][ T46] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 903.370701][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 903.379950][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.417085][T15614] libceph: connect (1)[c::]:6789 error -101 [ 903.429561][T15614] libceph: mon0 (1)[c::]:6789 connect error [ 903.607528][ T46] usb 3-1: USB disconnect, device number 23 [ 903.781133][T19448] ceph: No mds server is up or the cluster is laggy [ 904.531346][T19463] xt_addrtype: ipv6 does not support BROADCAST matching [ 905.527216][T15614] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 906.118910][T15614] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 906.127535][T15614] usb 3-1: config 0 has no interface number 0 [ 906.136888][T15614] usb 3-1: config 0 interface 11 has no altsetting 0 [ 906.143628][T15614] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 906.153871][T15614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.169856][T15614] usb 3-1: config 0 descriptor?? [ 906.315930][ T5826] Bluetooth: hci4: unexpected event for opcode 0x0c23 [ 906.714235][T15614] usb 3-1: string descriptor 0 read error: -71 [ 906.918468][T15614] usb 3-1: Found UVC 0.00 device (1871:0306) [ 906.925353][T15614] usb 3-1: No valid video chain found. [ 906.938467][T15614] usb 3-1: USB disconnect, device number 24 [ 908.460679][T19511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.719568][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 911.268277][T19542] xt_addrtype: ipv6 does not support BROADCAST matching [ 911.527067][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 911.976239][ T46] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 912.012785][ T46] usb 2-1: config 0 has no interface number 0 [ 912.048708][ T46] usb 2-1: config 0 interface 11 has no altsetting 0 [ 912.516941][ T46] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 912.542797][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.595961][ T46] usb 2-1: config 0 descriptor?? [ 912.815409][ T46] usb 2-1: string descriptor 0 read error: -71 [ 912.851999][ T46] usb 2-1: Found UVC 0.00 device (1871:0306) [ 912.855985][T19557] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.882577][ T29] audit: type=1800 audit(1740809556.049:5226): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5065" name="file1" dev="tmpfs" ino=1964 res=0 errno=0 [ 912.927114][ T46] usb 2-1: No valid video chain found. [ 912.974626][ T46] usb 2-1: USB disconnect, device number 25 [ 915.055539][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5072'. [ 918.089368][T19606] 9pnet_virtio: no channels available for device 127.0.0.1 [ 918.967559][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5085'. [ 919.079401][ T29] audit: type=1326 audit(1740809562.259:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.296697][ T29] audit: type=1326 audit(1740809562.259:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.479281][ T29] audit: type=1326 audit(1740809562.259:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.501784][ T29] audit: type=1326 audit(1740809562.279:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.572625][ T29] audit: type=1326 audit(1740809562.279:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.604474][ T29] audit: type=1326 audit(1740809562.279:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.743802][ T29] audit: type=1326 audit(1740809562.309:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 919.980139][ T29] audit: type=1326 audit(1740809562.309:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 921.903841][T19643] xt_addrtype: ipv6 does not support BROADCAST matching [ 931.710048][ T29] audit: type=1326 audit(1740809574.889:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 931.777016][ T29] audit: type=1326 audit(1740809574.889:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 931.857917][ T29] audit: type=1326 audit(1740809574.929:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 931.937468][ T29] audit: type=1326 audit(1740809574.929:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 932.044136][ T29] audit: type=1326 audit(1740809574.929:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 932.089547][ T29] audit: type=1326 audit(1740809574.929:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 932.143292][ T29] audit: type=1326 audit(1740809574.929:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 932.307717][ T29] audit: type=1326 audit(1740809574.929:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 932.952885][ T29] audit: type=1326 audit(1740809574.929:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19685 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 934.322063][T19734] 9pnet_fd: Insufficient options for proto=fd [ 934.377642][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5118'. [ 934.521305][T19737] fuse: Unknown parameter 'group_id00000000000000000000' [ 934.807462][ T5903] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 934.937136][ T46] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 935.009323][ T5903] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 935.033505][ T5903] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.050547][ T5903] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.071600][ T5903] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 935.083470][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.105885][ T5903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 935.128505][ T46] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 935.138672][ T46] usb 2-1: config 0 has no interface number 0 [ 935.159722][ T46] usb 2-1: config 0 interface 11 has no altsetting 0 [ 935.166480][ T46] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 935.186673][ T5903] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 935.203794][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.262538][ T46] usb 2-1: config 0 descriptor?? [ 935.348533][ T9] usb 3-1: USB disconnect, device number 25 [ 935.660239][ T46] usb 2-1: string descriptor 0 read error: -71 [ 935.674011][ T46] usb 2-1: Found UVC 0.00 device (1871:0306) [ 935.696863][ T46] usb 2-1: No valid video chain found. [ 935.744619][ T46] usb 2-1: USB disconnect, device number 26 [ 936.576861][T19764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.516707][T19775] xt_addrtype: ipv6 does not support BROADCAST matching [ 938.128322][T19777] fuse: Unknown parameter 'group_id00000000000000000000' [ 938.178458][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5133'. [ 938.659393][T19786] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 939.727557][ T5907] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 939.917117][ T5907] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 939.953953][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.725695][T19802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.874701][ T5907] usb 2-1: Product: syz [ 940.949749][ T5907] usb 2-1: Manufacturer: syz [ 940.968000][ T5907] usb 2-1: SerialNumber: syz [ 941.176749][ T5907] usb 2-1: config 0 descriptor?? [ 941.500350][T19812] xt_addrtype: ipv6 does not support BROADCAST matching [ 942.873920][ T5907] usb 2-1: Firmware version (0.0) predates our first public release. [ 942.883197][ T5907] usb 2-1: Please update to version 0.2 or newer [ 942.929435][ T5907] usb 2-1: USB disconnect, device number 27 [ 943.580382][ T5826] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 945.492209][T19852] 9pnet_fd: Insufficient options for proto=fd [ 947.757086][T19868] input: syz0 as /devices/virtual/input/input43 [ 947.763412][T19868] input: failed to attach handler leds to device input43, error: -6 [ 947.935974][ T9] libceph: connect (1)[c::]:6789 error -101 [ 947.960933][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 948.266852][ T9] libceph: connect (1)[c::]:6789 error -101 [ 948.276277][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 948.440170][T19868] ceph: No mds server is up or the cluster is laggy [ 948.887112][ T5905] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 949.050583][ T5905] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 949.536810][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.556762][ T5905] usb 2-1: Product: syz [ 949.560988][ T5905] usb 2-1: Manufacturer: syz [ 949.565602][ T5905] usb 2-1: SerialNumber: syz [ 949.592687][ T5905] usb 2-1: config 0 descriptor?? [ 950.671428][ T5905] usb 2-1: Firmware version (0.0) predates our first public release. [ 950.686681][ T5905] usb 2-1: Please update to version 0.2 or newer [ 950.753845][ T5905] usb 2-1: USB disconnect, device number 28 [ 951.370395][T19899] 9pnet_fd: Insufficient options for proto=fd [ 952.802391][T19910] xt_addrtype: ipv6 does not support BROADCAST matching [ 954.162915][T19919] input: syz0 as /devices/virtual/input/input45 [ 954.169250][T19919] input: failed to attach handler leds to device input45, error: -6 [ 954.213184][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 954.224998][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 954.508033][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 954.524594][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 954.566421][T19928] 9pnet_virtio: no channels available for device 127.0.0.1 [ 954.850158][T19919] ceph: No mds server is up or the cluster is laggy [ 955.906878][ T5873] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 956.097083][ T5873] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 956.125574][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.136866][ T5873] usb 5-1: Product: syz [ 956.144113][ T5873] usb 5-1: Manufacturer: syz [ 956.151986][T19939] 9pnet_fd: Insufficient options for proto=fd [ 956.155554][ T5873] usb 5-1: SerialNumber: syz [ 956.164907][ T5873] usb 5-1: config 0 descriptor?? [ 957.591791][ T5907] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 957.652032][ T5873] usb 5-1: Firmware version (0.0) predates our first public release. [ 957.660762][ T5873] usb 5-1: Please update to version 0.2 or newer [ 957.746705][ T5873] usb 5-1: USB disconnect, device number 31 [ 958.458339][ T5907] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 958.476716][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 958.513227][ T5907] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.541133][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 958.568888][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.598989][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 958.622641][ T5907] usb 3-1: invalid MIDI out EP 0 [ 958.675574][ T5907] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 958.851115][T19960] input: syz0 as /devices/virtual/input/input46 [ 958.857502][T19960] input: failed to attach handler leds to device input46, error: -6 [ 959.283448][ T5907] usb 3-1: USB disconnect, device number 26 [ 959.296863][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 959.302893][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 959.311064][T19978] 9pnet_virtio: no channels available for device 127.0.0.1 [ 959.372567][T19960] ceph: No mds server is up or the cluster is laggy [ 959.664512][T19981] 9pnet_fd: Insufficient options for proto=fd [ 961.870493][T20007] input: syz0 as /devices/virtual/input/input47 [ 961.876842][T20007] input: failed to attach handler leds to device input47, error: -6 [ 961.900080][T20009] 9pnet_fd: Insufficient options for proto=fd [ 962.114036][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 962.122094][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 962.390497][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 962.487608][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 962.808816][T20007] ceph: No mds server is up or the cluster is laggy [ 963.309482][T20025] xt_bpf: check failed: parse error [ 964.814835][T20031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.618368][T20050] 9pnet_fd: Insufficient options for proto=fd [ 966.090984][T20058] sch_tbf: peakrate 1 is lower than or equals to rate 15225280510952903537 ! [ 966.626756][T20066] xt_bpf: check failed: parse error [ 967.371145][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5221'. [ 967.486757][ T5905] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 967.518430][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 967.656755][ T5905] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 967.817034][ T9] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 967.860249][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.913810][ T9] usb 3-1: config 0 has no interface number 0 [ 967.933064][ T5905] usb 5-1: Product: syz [ 967.938125][ T9] usb 3-1: config 0 interface 11 has no altsetting 0 [ 967.946814][ T5905] usb 5-1: Manufacturer: syz [ 967.964760][ T5905] usb 5-1: SerialNumber: syz [ 967.970743][ T9] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 968.004019][T20083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.225653][ T5905] usb 5-1: config 0 descriptor?? [ 968.236733][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.319367][ T9] usb 3-1: config 0 descriptor?? [ 968.455771][T20089] 9pnet_fd: Insufficient options for proto=fd [ 968.552414][T20093] fuse: Bad value for 'fd' [ 968.552831][ T9] usb 3-1: string descriptor 0 read error: -71 [ 968.581975][ T9] usb 3-1: Found UVC 0.00 device (1871:0306) [ 968.790836][ T9] usb 3-1: No valid video chain found. [ 968.799515][ T9] usb 3-1: USB disconnect, device number 27 [ 968.975996][T20104] xt_addrtype: ipv6 does not support BROADCAST matching [ 969.283909][ T5905] usb 5-1: Firmware version (0.0) predates our first public release. [ 969.333888][ T5905] usb 5-1: Please update to version 0.2 or newer [ 969.397558][ T5905] usb 5-1: USB disconnect, device number 32 [ 969.583526][T20111] fuse: Unknown parameter '0x0000000000000004' [ 969.617081][ T29] audit: type=1800 audit(1740809612.799:5244): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5233" name="file1" dev="tmpfs" ino=2122 res=0 errno=0 [ 971.269168][T20123] 9pnet_virtio: no channels available for device 127.0.0.1 [ 971.980824][T20124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.522090][T20130] fuse: Bad value for 'fd' [ 972.841049][ T5903] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 972.934636][ T29] audit: type=1326 audit(1740809616.079:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.521411][ T29] audit: type=1326 audit(1740809616.089:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.559022][ T29] audit: type=1326 audit(1740809616.089:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.582166][ T29] audit: type=1326 audit(1740809616.099:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.611444][ T29] audit: type=1326 audit(1740809616.099:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.641310][ T29] audit: type=1326 audit(1740809616.099:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.672047][ T5903] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 973.689832][ T5903] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 973.701664][ T5903] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 973.713663][ T29] audit: type=1326 audit(1740809616.099:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.745887][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.803587][ T5903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.815656][ T29] audit: type=1326 audit(1740809616.099:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 973.817767][ T5903] usb 3-1: invalid MIDI out EP 0 [ 973.880540][ T29] audit: type=1326 audit(1740809616.099:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20126 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 974.076236][ T5903] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 974.103775][ T5903] usb 3-1: USB disconnect, device number 28 [ 976.906335][T20170] 9pnet_virtio: no channels available for device 127.0.0.1 [ 979.994577][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 979.994598][ T29] audit: type=1326 audit(1740809623.169:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.169793][ T29] audit: type=1326 audit(1740809623.169:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.196252][ T29] audit: type=1326 audit(1740809623.209:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.228209][ T29] audit: type=1326 audit(1740809623.209:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.257307][ T29] audit: type=1326 audit(1740809623.209:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.368035][ T29] audit: type=1326 audit(1740809623.209:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.471257][ T29] audit: type=1326 audit(1740809623.209:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.590397][ T29] audit: type=1326 audit(1740809623.209:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.673711][ T29] audit: type=1326 audit(1740809623.209:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.735800][ T29] audit: type=1326 audit(1740809623.209:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20192 comm="syz.1.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 980.936442][T20199] netlink: 'syz.1.5257': attribute type 10 has an invalid length. [ 980.990375][T20199] batman_adv: batadv0: Adding interface: wlan0 [ 981.143425][T20199] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.523281][T20204] netlink: 'syz.1.5257': attribute type 1 has an invalid length. [ 981.664878][T20199] batman_adv: batadv0: Interface activated: wlan0 [ 981.842208][T20204] netlink: 'syz.1.5257': attribute type 4 has an invalid length. [ 981.851929][T20204] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.5257'. [ 982.136902][ T46] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 982.184253][T20214] xt_addrtype: ipv6 does not support BROADCAST matching [ 982.341838][ T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 982.484196][ T46] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 982.646510][ T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 982.711660][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.773381][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 982.791124][ T46] usb 5-1: invalid MIDI out EP 0 [ 982.832361][ T46] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 983.071345][ T46] usb 5-1: USB disconnect, device number 33 [ 984.876789][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 984.960158][T20242] fuse: Invalid rootmode [ 985.848873][ T9] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 985.866686][ T9] usb 2-1: config 0 has no interface number 0 [ 985.884509][ T9] usb 2-1: config 0 interface 11 has no altsetting 0 [ 985.891603][ T9] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 985.901830][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.916425][ T9] usb 2-1: config 0 descriptor?? [ 987.178861][ T9] usb 2-1: string descriptor 0 read error: -71 [ 987.200768][ T9] usb 2-1: Found UVC 0.00 device (1871:0306) [ 987.324628][ T9] usb 2-1: No valid video chain found. [ 987.331125][T20261] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 987.344127][ T9] usb 2-1: USB disconnect, device number 29 [ 990.333164][ T5873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 990.975155][T20291] fuse: Invalid rootmode [ 991.218387][ T5873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 991.229895][ T5873] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.241081][ T5873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 991.250323][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.531178][ T5873] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 991.689115][ T5873] usb 3-1: invalid MIDI out EP 0 [ 992.088561][ T5873] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 992.112863][ T5873] usb 3-1: USB disconnect, device number 29 [ 992.306910][ T5903] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 992.811530][ T5903] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 992.833383][ T5903] usb 5-1: config 0 has no interface number 0 [ 992.856738][ T5903] usb 5-1: config 0 interface 11 has no altsetting 0 [ 992.899594][ T5903] usb 5-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 992.926733][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.936903][ T5903] usb 5-1: config 0 descriptor?? [ 993.339208][ T5903] usb 5-1: string descriptor 0 read error: -71 [ 993.438885][ T5903] usb 5-1: Found UVC 0.00 device (1871:0306) [ 993.451297][ T5903] usb 5-1: No valid video chain found. [ 993.505033][ T5903] usb 5-1: USB disconnect, device number 34 [ 994.257718][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5292'. [ 995.574788][T20350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.877052][ T5873] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 996.163373][ T5873] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 996.204284][ T5873] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 996.247986][ T5873] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 996.339461][ T5873] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 996.386753][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.424530][ T5873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 996.790254][T20355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 997.043169][ T5873] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 998.069461][ T5873] usb 5-1: USB disconnect, device number 35 [ 999.873869][T20405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.900825][T20406] No source specified [ 1002.792845][T20424] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1003.229698][T20438] can0: slcan on ttyS3. [ 1003.297575][T20438] can0 (unregistered): slcan off ttyS3. [ 1003.963087][T20453] netlink: 'syz.2.5328': attribute type 10 has an invalid length. [ 1003.981762][T20453] batman_adv: batadv0: Adding interface: wlan0 [ 1003.988271][T20453] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.060900][T20457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1004.214019][T20453] batman_adv: batadv0: Interface activated: wlan0 [ 1004.298991][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 1004.616335][T20453] netlink: 'syz.2.5328': attribute type 1 has an invalid length. [ 1004.625323][T20453] netlink: 'syz.2.5328': attribute type 4 has an invalid length. [ 1004.633358][T20453] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.5328'. [ 1005.379978][T15614] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1006.026829][T15614] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1006.067019][T15614] usb 2-1: config 0 has no interface number 0 [ 1006.074317][T15614] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1006.102047][T15614] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1006.122275][T15614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.148521][T15614] usb 2-1: config 0 descriptor?? [ 1006.411067][T15614] usb 2-1: string descriptor 0 read error: -71 [ 1006.419831][T15614] usb 2-1: Found UVC 0.00 device (1871:0306) [ 1006.436694][T15614] usb 2-1: No valid video chain found. [ 1006.449852][T15614] usb 2-1: USB disconnect, device number 30 [ 1007.178025][T20499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.568607][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1009.503469][T20527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.505250][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1009.505265][ T29] audit: type=1326 audit(1740809652.659:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.594366][ T29] audit: type=1326 audit(1740809652.659:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.654063][ T29] audit: type=1326 audit(1740809652.659:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.759645][ T29] audit: type=1326 audit(1740809652.659:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.804646][ T29] audit: type=1326 audit(1740809652.659:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.836251][ T29] audit: type=1326 audit(1740809652.659:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.871588][ T29] audit: type=1326 audit(1740809652.659:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1009.911834][ T29] audit: type=1326 audit(1740809652.659:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1010.006346][ T29] audit: type=1326 audit(1740809652.659:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1010.065984][ T29] audit: type=1326 audit(1740809652.659:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20508 comm="syz.4.5344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0b98d169 code=0x7ffc0000 [ 1010.283246][T20544] No source specified [ 1010.969777][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1011.894137][T20564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.471145][T20567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5363'. [ 1012.847652][T20577] can0: slcan on ttyS3. [ 1013.189815][T20577] can0 (unregistered): slcan off ttyS3. [ 1013.521654][T20582] xt_addrtype: ipv6 does not support BROADCAST matching [ 1015.145189][T20589] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.5369'. [ 1015.159143][T20594] No source specified [ 1017.186965][T20610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1017.940770][ T5826] Bluetooth: hci4: unexpected event for opcode 0x0c23 [ 1018.252606][T20615] input: syz0 as /devices/virtual/input/input51 [ 1018.259340][T20615] input: failed to attach handler leds to device input51, error: -6 [ 1018.411652][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 1018.455974][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 1018.928923][T20615] ceph: No mds server is up or the cluster is laggy [ 1019.191113][T20626] xt_addrtype: ipv6 does not support BROADCAST matching [ 1019.830390][T20635] can0: slcan on ttyS3. [ 1020.277137][T20635] can0 (unregistered): slcan off ttyS3. [ 1023.844397][T20652] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5386'. [ 1023.844902][T20656] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5385'. [ 1024.521677][T20663] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1025.185422][T20669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.602843][T20673] No source specified [ 1025.916779][ T5905] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1026.073854][T20682] xt_addrtype: ipv6 does not support BROADCAST matching [ 1026.887048][ T5905] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1026.911824][ T5905] usb 5-1: config 0 has no interface number 0 [ 1026.926856][ T5905] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1026.934403][ T5905] usb 5-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1026.964265][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.990283][ T5905] usb 5-1: config 0 descriptor?? [ 1027.577396][T20700] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5400'. [ 1027.805434][ T5905] usb 5-1: string descriptor 0 read error: -71 [ 1027.814451][ T5905] usb 5-1: Found UVC 0.00 device (1871:0306) [ 1028.107039][ T5905] usb 5-1: No valid video chain found. [ 1028.150874][ T5905] usb 5-1: USB disconnect, device number 36 [ 1028.439266][T20707] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.5402'. [ 1029.803719][ T5905] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1030.096735][ T5905] usb 5-1: device descriptor read/64, error -71 [ 1031.056800][ T5905] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1031.350259][T20747] netlink: 'syz.5.5414': attribute type 10 has an invalid length. [ 1031.355380][ T5905] usb 5-1: device descriptor read/64, error -71 [ 1031.434282][T20746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.441947][T20746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.504257][ T5905] usb usb5-port1: attempt power cycle [ 1031.514106][T20750] netlink: 'syz.5.5414': attribute type 1 has an invalid length. [ 1031.523268][T20750] netlink: 'syz.5.5414': attribute type 4 has an invalid length. [ 1031.532203][T20750] netlink: 15363 bytes leftover after parsing attributes in process `syz.5.5414'. [ 1031.926703][ T5905] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1032.126427][ T5905] usb 5-1: device descriptor read/8, error -71 [ 1032.360990][T20746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.382185][T20746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.446714][ T5905] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1032.486749][ T5905] usb 5-1: device descriptor read/8, error -71 [ 1032.630207][ T5905] usb usb5-port1: unable to enumerate USB device [ 1032.758434][T20746] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.797162][T20746] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.849447][T20746] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.866945][T20746] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.021280][T20746] batman_adv: batadv0: Interface deactivated: wlan0 [ 1033.112624][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 1033.524632][T20746] syz_tun: left allmulticast mode [ 1033.551150][T20746] macsec1: left allmulticast mode [ 1036.011708][ T5826] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1038.757194][T20826] input: syz0 as /devices/virtual/input/input54 [ 1038.773780][T20826] input: failed to attach handler leds to device input54, error: -6 [ 1038.838937][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1038.849259][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1038.990020][T20833] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1039.422185][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1039.422223][ T29] audit: type=1326 audit(1740809682.599:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.516212][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1039.547194][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1039.637946][ T29] audit: type=1326 audit(1740809682.639:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.660440][ T29] audit: type=1326 audit(1740809682.659:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.682528][ T29] audit: type=1326 audit(1740809682.809:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.705016][ T29] audit: type=1326 audit(1740809682.819:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.756804][ T29] audit: type=1326 audit(1740809682.819:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.787864][T20826] ceph: No mds server is up or the cluster is laggy [ 1039.810141][ T29] audit: type=1326 audit(1740809682.819:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1039.862785][ T29] audit: type=1326 audit(1740809682.819:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.2.5432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1040.714886][T20840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.722256][T20840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.238596][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.289124][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.264150][T20840] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.277108][T20840] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.296355][T20840] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.316723][T20840] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.373800][T20840] batman_adv: batadv0: Interface deactivated: wlan0 [ 1042.455050][ T46] lo speed is unknown, defaulting to 1000 [ 1042.516012][ T46] lo speed is unknown, defaulting to 1000 [ 1042.976505][T20867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.945330][T20884] input: syz0 as /devices/virtual/input/input55 [ 1045.065676][T20884] input: failed to attach handler leds to device input55, error: -6 [ 1045.109408][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 1045.164793][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 1045.184329][ T29] audit: type=1326 audit(1740809688.359:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1045.727038][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 1045.753474][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 1045.966705][ T29] audit: type=1326 audit(1740809688.359:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.022454][ T29] audit: type=1326 audit(1740809688.389:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.101019][T20888] ceph: No mds server is up or the cluster is laggy [ 1046.117077][ T29] audit: type=1326 audit(1740809688.389:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.171560][ T29] audit: type=1326 audit(1740809688.389:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.252144][ T29] audit: type=1326 audit(1740809688.389:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.278828][T20903] can0: slcan on ttyS3. [ 1046.327347][T20903] can0 (unregistered): slcan off ttyS3. [ 1046.350288][ T29] audit: type=1326 audit(1740809688.389:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.406744][ T29] audit: type=1326 audit(1740809688.389:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.459343][ T29] audit: type=1326 audit(1740809688.389:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1046.550822][ T29] audit: type=1326 audit(1740809688.389:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20879 comm="syz.2.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1047.545310][T20911] netlink: 'syz.4.5454': attribute type 1 has an invalid length. [ 1047.572264][T20911] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1050.741475][T20945] can0: slcan on ttyS3. [ 1050.826819][T20945] can0 (unregistered): slcan off ttyS3. [ 1053.964657][T20980] xt_addrtype: ipv6 does not support BROADCAST matching [ 1054.707602][ T5907] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1054.918591][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1054.940113][ T5907] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1055.217885][ T5907] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1055.457204][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.470054][T20982] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1055.498230][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1055.886175][ T5907] usb 5-1: USB disconnect, device number 41 [ 1057.632797][T21024] xt_addrtype: ipv6 does not support BROADCAST matching [ 1058.874257][T21030] No source specified [ 1061.576924][ T5875] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1061.808581][T21059] xt_addrtype: ipv6 does not support BROADCAST matching [ 1061.809855][ T5875] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.951303][ T5875] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1062.059375][ T5875] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1062.156972][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.287163][T21049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1062.435120][ T5875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1062.903584][ T5875] usb 3-1: USB disconnect, device number 30 [ 1064.034024][T21076] No source specified [ 1064.281267][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 1064.281284][ T29] audit: type=1326 audit(1740809707.449:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1064.337024][ T29] audit: type=1326 audit(1740809707.459:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1065.101839][ T29] audit: type=1326 audit(1740809707.459:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1065.136772][ T29] audit: type=1326 audit(1740809707.459:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1065.166694][ T29] audit: type=1326 audit(1740809707.459:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1065.219963][ T29] audit: type=1326 audit(1740809707.459:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1065.323261][ T29] audit: type=1326 audit(1740809707.459:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1065.423617][ T29] audit: type=1326 audit(1740809707.459:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1066.022288][ T5826] Bluetooth: hci0: unexpected event for opcode 0x040d [ 1066.599567][ T29] audit: type=1326 audit(1740809707.459:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1066.716727][ T29] audit: type=1326 audit(1740809707.459:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1066.747534][T21104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.780236][T21105] can0: slcan on ttyS3. [ 1067.354230][T21105] can0 (unregistered): slcan off ttyS3. [ 1067.743170][ T5875] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1067.917106][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 1067.946424][ T5875] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.978149][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1068.029796][ T5875] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1068.070800][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.071246][ T5875] usb 2-1: config 0 descriptor?? [ 1069.072295][T21127] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1069.996383][ T5875] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 1070.061258][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1070.061274][ T29] audit: type=1326 audit(1740809713.239:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.180927][ T29] audit: type=1326 audit(1740809713.239:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.208939][ T29] audit: type=1326 audit(1740809713.269:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.261955][ T29] audit: type=1326 audit(1740809713.269:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.331115][ T29] audit: type=1326 audit(1740809713.269:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.356456][ T29] audit: type=1326 audit(1740809713.269:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.379129][ T29] audit: type=1326 audit(1740809713.269:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.401557][ T29] audit: type=1326 audit(1740809713.269:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.430262][ T29] audit: type=1326 audit(1740809713.269:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.470634][ T29] audit: type=1326 audit(1740809713.269:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.5.5515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de818d169 code=0x7ffc0000 [ 1070.904508][ T5875] steelseries 0003:1038:12B6.0006: hid_hw_raw_request() failed with -71 [ 1071.006136][ T5875] usb 2-1: USB disconnect, device number 31 [ 1071.270090][T21148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.416769][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 1075.366865][ T5875] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1076.047727][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1076.130870][ T5875] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1076.213137][ T5875] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1076.282461][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1076.321701][ T5875] usb 5-1: config 1 has no interface number 0 [ 1076.362767][ T5875] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1076.410700][ T5875] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1076.453057][T21196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.484137][ T5875] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1076.545951][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.224557][ T5875] usb 5-1: can't set config #1, error -71 [ 1077.267562][ T5875] usb 5-1: USB disconnect, device number 42 [ 1078.147339][ T5826] Bluetooth: hci0: unexpected event for opcode 0x040d [ 1079.367879][T21216] xt_addrtype: ipv6 does not support BROADCAST matching [ 1079.896500][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1080.291783][T21230] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1081.868413][T21246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.727587][T21252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.735112][T21252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.812728][T21252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.827580][T21252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.901581][T21252] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.910715][T21252] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.919767][T21252] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.928784][T21252] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.994317][T21252] batman_adv: batadv0: Interface deactivated: wlan0 [ 1083.558713][T21256] xt_addrtype: ipv6 does not support BROADCAST matching [ 1083.713046][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 1085.847102][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5563'. [ 1087.619411][ T5826] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1089.249383][T21299] xt_addrtype: ipv6 does not support BROADCAST matching [ 1090.250022][ T5903] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1090.457397][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1090.520435][ T5903] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1090.620424][ T5903] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1090.731040][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1090.844777][ T5903] usb 3-1: config 1 has no interface number 0 [ 1090.909996][ T5903] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1091.017190][ T5903] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1091.151666][ T5903] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1091.224932][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.468522][ T5903] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1091.699681][ T5903] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1092.308758][ T5903] usb 3-1: USB disconnect, device number 31 [ 1092.386124][ T5903] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1092.930355][T21324] input: syz0 as /devices/virtual/input/input62 [ 1095.747619][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5575'. [ 1096.074340][T21346] xt_addrtype: ipv6 does not support BROADCAST matching [ 1097.937326][ T5903] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1098.166970][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 1098.222288][ T5903] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.262335][ T5903] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1098.283430][ T5903] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1098.306775][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.348679][ T5903] usb 2-1: config 0 descriptor?? [ 1098.925071][ T5903] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 1100.233194][ T5903] steelseries 0003:1038:12B6.0007: hid_hw_raw_request() failed with -71 [ 1100.244640][ T5903] usb 2-1: USB disconnect, device number 32 [ 1102.777030][ T5903] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1103.037146][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 1103.145556][ T5903] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.299090][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1103.407676][ T5903] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1103.549583][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.755369][ T5903] usb 3-1: config 0 descriptor?? [ 1104.424501][T21413] xt_addrtype: ipv6 does not support BROADCAST matching [ 1104.657151][ T5903] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1105.009929][T21418] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5606'. [ 1105.807482][T21429] No source specified [ 1106.055078][ T5903] steelseries 0003:1038:12B6.0008: hid_hw_raw_request() failed with -71 [ 1106.079808][ T5903] usb 3-1: USB disconnect, device number 32 [ 1107.549255][T21452] fuse: Bad value for 'fd' [ 1109.542340][T21459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1111.056385][T21463] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1111.415497][T21473] No source specified [ 1111.982027][T21488] input: syz0 as /devices/virtual/input/input65 [ 1112.722655][T21492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5630'. [ 1114.652027][T21511] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5636'. [ 1115.726751][ T5907] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1115.888989][ T5907] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1115.904671][ T5907] usb 3-1: config 0 has no interface number 0 [ 1115.911411][ T5907] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1115.928637][ T5907] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1115.938079][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.949535][ T5907] usb 3-1: config 0 descriptor?? [ 1116.049142][T21537] input: syz0 as /devices/virtual/input/input66 [ 1116.850407][ T5907] usb 3-1: string descriptor 0 read error: -71 [ 1116.861254][ T5907] usb 3-1: Found UVC 0.00 device (1871:0306) [ 1116.868303][ T5907] usb 3-1: No valid video chain found. [ 1116.875377][ T5907] usb 3-1: USB disconnect, device number 33 [ 1117.230165][T21552] input: syz0 as /devices/virtual/input/input67 [ 1117.236721][T21552] input: failed to attach handler leds to device input67, error: -6 [ 1117.380823][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1117.846158][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1117.900152][T21553] ceph: No mds server is up or the cluster is laggy [ 1120.389077][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1120.389098][ T29] audit: type=1326 audit(1740809763.449:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1120.432544][ T29] audit: type=1326 audit(1740809763.449:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1120.455199][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.587836][ T29] audit: type=1326 audit(1740809763.449:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1120.609997][ T29] audit: type=1326 audit(1740809763.449:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1120.834495][T21593] xt_addrtype: ipv6 does not support BROADCAST matching [ 1120.930318][ T29] audit: type=1326 audit(1740809763.449:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1121.177573][ T29] audit: type=1326 audit(1740809763.449:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1121.286819][ T29] audit: type=1326 audit(1740809763.449:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1121.308476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.326790][ T29] audit: type=1326 audit(1740809763.449:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1121.362815][ T29] audit: type=1326 audit(1740809763.449:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1121.452907][ T29] audit: type=1326 audit(1740809763.449:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21582 comm="syz.1.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226d38d169 code=0x7ffc0000 [ 1121.474573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.524068][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5663'. [ 1121.559451][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1121.716489][T21615] No source specified [ 1127.346434][T21686] openvswitch: netlink: Message has 8 unknown bytes. [ 1129.191467][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5686'. [ 1129.649366][T21700] can0: slcan on ttyS3. [ 1129.680840][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'. [ 1129.716956][T21700] can0 (unregistered): slcan off ttyS3. [ 1130.131816][T21716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5692'. [ 1130.175955][T21716] bridge0: port 3(batadv1) entered blocking state [ 1130.203233][T21716] bridge0: port 3(batadv1) entered disabled state [ 1130.224412][T21716] batadv1: entered allmulticast mode [ 1130.267984][T21716] batadv1: entered promiscuous mode [ 1130.732924][ T9793] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1130.742349][ T9793] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1131.159025][T21738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5699'. [ 1131.376385][T21742] openvswitch: netlink: Message has 8 unknown bytes. [ 1132.887845][ T5903] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1132.970559][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1132.970577][ T29] audit: type=1326 audit(1740809776.149:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.030723][ T29] audit: type=1326 audit(1740809776.179:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.077889][ T29] audit: type=1326 audit(1740809776.179:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.112980][ T5903] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1133.126726][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.139770][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1133.151898][ T5903] usb 5-1: config 0 descriptor?? [ 1133.157139][ T29] audit: type=1326 audit(1740809776.179:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.180447][ T29] audit: type=1326 audit(1740809776.179:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.181562][ T5903] cp210x 5-1:0.0: cp210x converter detected [ 1133.211781][ T29] audit: type=1326 audit(1740809776.179:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.233991][ T29] audit: type=1326 audit(1740809776.179:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21753 comm="syz.0.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501378d169 code=0x7ffc0000 [ 1133.588629][ T5903] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1133.707575][T21772] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1134.634231][T21782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5713'. [ 1135.421688][T21787] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1135.490924][ T5903] usb 5-1: USB disconnect, device number 43 [ 1135.664318][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1135.850783][ T5903] cp210x 5-1:0.0: device disconnected [ 1136.754353][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1137.067542][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5718'. [ 1138.059408][T21815] xt_addrtype: ipv6 does not support BROADCAST matching [ 1142.482652][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5730'. [ 1142.955206][T21855] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1146.028425][ T5826] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1146.196771][ T5907] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1146.819170][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.848967][ T5907] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1146.896891][ T5907] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1146.906005][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.942152][ T5907] usb 5-1: config 0 descriptor?? [ 1147.264761][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1149.367380][ T5907] usb 5-1: USB disconnect, device number 44 [ 1150.948995][T21918] netfs: Couldn't get user pages (rc=-14) [ 1151.007056][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1151.488920][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5749'. [ 1152.399802][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1154.879381][T19617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1154.925806][T19617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1154.936461][T19617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1154.953569][T19617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1154.964272][T19617] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1154.975876][T19617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1155.735702][T21955] lo speed is unknown, defaulting to 1000 [ 1156.149852][T21966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5765'. [ 1156.897013][ T5907] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1157.030992][ T5826] Bluetooth: hci5: command tx timeout [ 1157.064803][ T5907] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1157.078393][ T5907] usb 2-1: config 0 has no interface number 0 [ 1157.092525][ T5907] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1157.103200][ T5907] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1157.119551][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.132913][ T5907] usb 2-1: config 0 descriptor?? [ 1157.297032][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5767'. [ 1157.541431][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1159.114900][ T5826] Bluetooth: hci5: command tx timeout [ 1159.148843][ T5905] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1159.309343][ T5905] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1159.317799][ T5905] usb 5-1: config 0 has no interface number 0 [ 1159.324201][ T5905] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1159.331582][ T5905] usb 5-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1159.341007][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.370734][ T5905] usb 5-1: config 0 descriptor?? [ 1161.188422][ T5826] Bluetooth: hci5: command tx timeout [ 1161.199221][ T5905] usb 5-1: string descriptor 0 read error: -71 [ 1161.210744][ T5905] usb 5-1: Found UVC 0.00 device (1871:0306) [ 1161.218145][ T5907] usb 2-1: string descriptor 0 read error: -71 [ 1161.226270][ T5907] usb 2-1: Found UVC 0.00 device (1871:0306) [ 1161.236705][ T5905] usb 5-1: No valid video chain found. [ 1161.256714][ T5907] usb 2-1: No valid video chain found. [ 1161.294528][ T5905] usb 5-1: USB disconnect, device number 45 [ 1161.300781][ T5907] usb 2-1: USB disconnect, device number 33 [ 1161.620838][T22009] xt_bpf: check failed: parse error [ 1162.685416][T22019] xt_addrtype: ipv6 does not support BROADCAST matching [ 1163.105910][T21955] chnl_net:caif_netlink_parms(): no params data found [ 1163.305361][T22026] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1163.671597][ T5826] Bluetooth: hci5: command tx timeout [ 1165.116216][T22029] netlink: 'syz.2.5781': attribute type 9 has an invalid length. [ 1165.130014][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 1166.130164][ T9768] bridge_slave_1: left allmulticast mode [ 1166.146740][ T9768] bridge_slave_1: left promiscuous mode [ 1166.225293][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.272430][ T9768] bridge_slave_0: left allmulticast mode [ 1166.300474][ T9768] bridge_slave_0: left promiscuous mode [ 1166.323404][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.562356][ T9768] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1166.610528][ T9768] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1167.275831][T22064] xt_bpf: check failed: parse error [ 1167.531056][ T5826] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1168.930348][T22076] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1169.620441][ T9768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.630860][ T9768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.646099][ T9768] bond0 (unregistering): Released all slaves [ 1170.005723][ T9768] bond1 (unregistering): Released all slaves [ 1170.140025][T21955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.208877][T21955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.233312][T21955] bridge_slave_0: entered allmulticast mode [ 1170.257774][T21955] bridge_slave_0: entered promiscuous mode [ 1170.387387][T21955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.409320][T21955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.472258][T22091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.138215][T21955] bridge_slave_1: entered allmulticast mode [ 1171.166844][T21955] bridge_slave_1: entered promiscuous mode [ 1171.189950][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5797'. [ 1171.275590][T21955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.350388][ T9768] batman_adv: batadv0: Removing interface: wlan0 [ 1171.379146][T21955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.545207][T21955] team0: Port device team_slave_0 added [ 1171.588477][T21955] team0: Port device team_slave_1 added [ 1171.836564][T21955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.928964][T21955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.974616][T21955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.066974][T22110] xt_bpf: check failed: parse error [ 1172.081040][ T9768] hsr_slave_0: left promiscuous mode [ 1172.113935][ T9768] hsr_slave_1: left promiscuous mode [ 1172.153110][ T9768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.223291][ T9768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.412795][ T9768] pimreg (unregistering): left allmulticast mode [ 1172.546980][T22116] input: syz0 as /devices/virtual/input/input72 [ 1172.553632][T22116] input: failed to attach handler leds to device input72, error: -6 [ 1172.683733][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 1172.693735][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 1173.118339][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 1173.125201][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 1173.238751][T22116] ceph: No mds server is up or the cluster is laggy [ 1173.592530][T22126] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1175.966439][ T9768] team0 (unregistering): Port device team_slave_1 removed [ 1176.570881][ T9768] team0 (unregistering): Port device team_slave_0 removed [ 1177.184321][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5808'. [ 1177.757731][ T9810] smc: removing ib device sz1 [ 1177.792939][T21955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.825368][T21955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.896931][T21955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.420909][T21955] hsr_slave_0: entered promiscuous mode [ 1178.503720][T21955] hsr_slave_1: entered promiscuous mode [ 1178.569137][T21955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1178.669306][T21955] Cannot create hsr debugfs directory [ 1179.256996][T22171] xt_bpf: check failed: parse error [ 1180.047159][T22176] Cannot find set identified by id 0 to match [ 1180.733363][T22180] No source specified [ 1182.081561][T22193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1184.500835][T21955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1184.534462][T21955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1184.550265][T21955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1184.581856][T21955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1184.840443][T21955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.871715][T22218] xt_bpf: check failed: parse error [ 1184.917640][T21955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.929471][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.936691][ T9797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.981389][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.988578][ T9797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.384932][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5823'. [ 1185.590046][T21955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.699986][T21955] veth0_vlan: entered promiscuous mode [ 1185.711342][T21955] veth1_vlan: entered promiscuous mode [ 1185.823462][T21955] veth0_macvtap: entered promiscuous mode [ 1185.970232][T22237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.769213][T21955] veth1_macvtap: entered promiscuous mode [ 1187.095842][T21955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1187.138434][T21955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.169119][T21955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.179291][T21955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1187.216969][T21955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.257744][T21955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.578480][T21955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.750954][T21955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.946662][T21955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.986012][T21955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.157591][ T5826] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1188.711165][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1188.943471][ T9806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.953705][ T9806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.179700][T19681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.204276][T19681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.221827][T22264] xt_bpf: check failed: parse error [ 1189.522834][T22271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.153057][T22273] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1190.976954][T22277] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1194.134711][T22313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.548544][T22315] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1195.202601][ T29] audit: type=1326 audit(1740809838.379:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1195.284939][T22327] xt_bpf: check failed: parse error [ 1195.299048][ T29] audit: type=1326 audit(1740809838.379:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1195.374885][ T29] audit: type=1326 audit(1740809838.379:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1195.475089][T22333] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1195.548406][ T29] audit: type=1326 audit(1740809838.379:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1195.577181][ T29] audit: type=1326 audit(1740809838.409:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1195.604883][ T29] audit: type=1326 audit(1740809838.409:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1196.013008][ T29] audit: type=1326 audit(1740809838.409:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1196.124296][ T29] audit: type=1326 audit(1740809838.419:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1196.242713][ T29] audit: type=1326 audit(1740809838.419:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1196.272806][ T29] audit: type=1326 audit(1740809838.419:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22325 comm="syz.2.5858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58d169 code=0x7ffc0000 [ 1199.877962][T22420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1200.794593][T22424] xt_addrtype: ipv6 does not support BROADCAST matching [ 1201.687452][T22441] xt_bpf: check failed: parse error [ 1201.979745][T22445] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1205.979289][T22473] xt_addrtype: ipv6 does not support BROADCAST matching [ 1206.755002][T22484] xt_bpf: check failed: parse error [ 1208.358892][T22494] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1214.538079][T22543] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1216.752666][T22575] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1219.037252][T22586] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1220.259241][T22598] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5927'. [ 1221.319876][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'. [ 1221.328993][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'. [ 1221.339061][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'. [ 1222.406777][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5932'. [ 1222.594660][T22620] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1223.202961][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5932'. [ 1223.276753][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5932'. [ 1223.767676][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1223.776986][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1223.786065][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1225.412466][T22636] input: syz0 as /devices/virtual/input/input77 [ 1226.676926][ T5903] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1226.727197][T22646] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1226.920765][ T5903] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1227.043373][ T5903] usb 2-1: config 0 has no interface number 0 [ 1227.177924][ T5903] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1227.250358][ T5903] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1227.296750][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.335873][ T5903] usb 2-1: config 0 descriptor?? [ 1227.342338][ T5903] usb 2-1: can't set config #0, error -71 [ 1227.380346][ T5903] usb 2-1: USB disconnect, device number 34 [ 1230.907595][T22713] hub 9-0:1.0: USB hub found [ 1230.914497][T22713] hub 9-0:1.0: 1 port detected [ 1233.036093][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1235.406628][T22767] hub 9-0:1.0: USB hub found [ 1235.412727][T22767] hub 9-0:1.0: 1 port detected [ 1237.312943][T22783] xt_addrtype: ipv6 does not support BROADCAST matching [ 1238.460063][T22799] Cannot find set identified by id 0 to match [ 1240.252330][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1240.485452][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5995'. [ 1240.670100][T22828] No source specified [ 1242.060344][T22837] hub 9-0:1.0: USB hub found [ 1242.066069][T22837] hub 9-0:1.0: 1 port detected [ 1244.482296][T22849] hub 9-0:1.0: USB hub found [ 1244.509283][T22849] hub 9-0:1.0: 1 port detected [ 1245.562037][T22869] hub 9-0:1.0: USB hub found [ 1245.567392][T22869] hub 9-0:1.0: 1 port detected [ 1247.131921][T22879] Cannot find set identified by id 0 to match [ 1248.150930][T22894] hub 9-0:1.0: USB hub found [ 1248.315896][T22894] hub 9-0:1.0: 1 port detected [ 1248.404232][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1248.413383][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1248.422725][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1249.431126][T22905] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6019'. [ 1250.099757][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6021'. [ 1250.606905][ T5905] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1251.486885][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 1251.497798][ T5905] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1251.506241][ T5905] usb 3-1: config 0 has no interface number 0 [ 1251.531317][ T5905] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1251.544403][ T5905] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1251.554261][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.589915][ T5905] usb 3-1: Product: syz [ 1251.594233][ T5905] usb 3-1: Manufacturer: syz [ 1251.607196][ T5905] usb 3-1: SerialNumber: syz [ 1251.632105][ T5905] usb 3-1: config 0 descriptor?? [ 1252.600050][ T5905] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 1252.608599][ T5905] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1252.615929][ T5905] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1252.635934][ T5905] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1252.666234][ T5905] usb 3-1: USB disconnect, device number 34 [ 1253.039556][T22949] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1255.148328][T22979] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1256.855642][T22991] can0: slcan on ttyS3. [ 1256.988467][T22991] can0 (unregistered): slcan off ttyS3. [ 1259.186907][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6051'. [ 1259.195921][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6051'. [ 1259.205389][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6051'. [ 1259.712953][ T5826] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1260.450403][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6053'. [ 1260.459533][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6053'. [ 1260.468873][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6053'. [ 1261.897324][T23030] hub 9-0:1.0: USB hub found [ 1261.905117][T23030] hub 9-0:1.0: 1 port detected [ 1262.604982][T23041] can0: slcan on ttyS3. [ 1262.758295][T23041] can0 (unregistered): slcan off ttyS3. [ 1263.030044][T23040] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6057'. [ 1264.024254][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6063'. [ 1264.033625][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6063'. [ 1264.042718][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6063'. [ 1265.080034][T23021] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1266.681657][T23084] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6072'. [ 1268.108132][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1268.117205][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1268.126150][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1269.541312][T23021] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1270.904843][T23131] Cannot find set identified by id 0 to match [ 1271.780147][T23134] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1272.434095][T23021] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1273.280701][T23144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1273.323437][T23144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1273.372807][T23144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1273.392331][T23021] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1273.499866][T23144] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1273.714822][T23144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1273.818435][T23144] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1273.919470][T23144] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1274.149944][T23144] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1274.869850][T23021] Bluetooth: hci0: command 0x0c1a tx timeout [ 1274.989357][T23164] No source specified [ 1275.965242][T23021] Bluetooth: hci3: command 0x0406 tx timeout [ 1275.971386][T23021] Bluetooth: hci4: command 0x0406 tx timeout [ 1275.977469][T23021] Bluetooth: hci5: command 0x0c1a tx timeout [ 1276.590290][T19617] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1276.604393][T23021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1276.624779][T23021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1276.634417][T23021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1276.657521][T23021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1276.666986][T23021] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1276.677309][T23021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1276.820088][ T6158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.839432][T23021] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1277.986875][T19617] Bluetooth: hci3: command 0x0406 tx timeout [ 1277.997820][T23021] Bluetooth: hci5: command 0x0c1a tx timeout [ 1278.353972][ T6158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.583535][T23021] Bluetooth: hci0: command tx timeout [ 1279.747579][T23201] input: syz0 as /devices/virtual/input/input79 [ 1279.768782][ T6158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.327896][T23021] Bluetooth: hci5: command 0x0c1a tx timeout [ 1281.168809][ T6158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.666763][T23021] Bluetooth: hci0: command tx timeout [ 1281.927829][T23223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.231458][T23175] chnl_net:caif_netlink_parms(): no params data found [ 1283.718239][ T6158] batadv1: left allmulticast mode [ 1283.734150][ T6158] batadv1: left promiscuous mode [ 1283.747173][T23021] Bluetooth: hci0: command tx timeout [ 1283.947023][ T6158] bridge0: port 3(batadv1) entered disabled state [ 1283.980305][ T6158] bridge_slave_1: left allmulticast mode [ 1283.986054][ T6158] bridge_slave_1: left promiscuous mode [ 1284.667955][T23247] hub 9-0:1.0: USB hub found [ 1284.669226][T23247] hub 9-0:1.0: 1 port detected [ 1284.944205][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.037506][ T6158] bridge_slave_0: left allmulticast mode [ 1285.043304][ T6158] bridge_slave_0: left promiscuous mode [ 1285.068478][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.461016][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1285.470170][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1285.479428][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1285.826911][T23021] Bluetooth: hci0: command tx timeout [ 1287.105929][T23270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.649638][ T6158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.318621][ T6158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.354286][ T6158] bond0 (unregistering): Released all slaves [ 1290.543872][T23175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.556558][T23175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.565016][T23175] bridge_slave_0: entered allmulticast mode [ 1290.582549][T23175] bridge_slave_0: entered promiscuous mode [ 1290.618637][T23175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.640208][T23175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.647687][T23175] bridge_slave_1: entered allmulticast mode [ 1290.654999][T23175] bridge_slave_1: entered promiscuous mode [ 1290.802803][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6139'. [ 1290.894709][T23175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.001001][ T6158] hsr_slave_0: left promiscuous mode [ 1291.016097][ T6158] hsr_slave_1: left promiscuous mode [ 1291.040078][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.190662][T23302] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1291.386927][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.450816][T23306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.776213][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.801535][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.839034][ T6158] veth1_macvtap: left promiscuous mode [ 1291.977107][T23311] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1292.589745][ T6158] veth0_macvtap: left promiscuous mode [ 1292.595524][ T6158] veth1_vlan: left promiscuous mode [ 1292.600940][ T6158] veth0_vlan: left promiscuous mode [ 1294.545386][T23021] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1295.450130][ T6158] team0 (unregistering): Port device team_slave_1 removed [ 1295.558492][ T6158] team0 (unregistering): Port device team_slave_0 removed [ 1295.951102][T23338] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1296.914601][T23345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.994528][T23175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.103055][T23175] team0: Port device team_slave_0 added [ 1297.129613][T23175] team0: Port device team_slave_1 added [ 1297.181471][T23175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.193360][T23175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.231710][T23175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.265793][T23175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.274491][T23175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.321735][T23175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.486475][T23175] hsr_slave_0: entered promiscuous mode [ 1297.507976][T23175] hsr_slave_1: entered promiscuous mode [ 1298.686790][T23021] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1298.978939][T23376] input: syz0 as /devices/virtual/input/input80 [ 1300.362339][T23370] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1300.400736][T23175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1300.433397][T23175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1300.466471][T23175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1300.522061][T23175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1300.811079][T23175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.829887][T23175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.886705][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1300.895803][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1300.905233][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6165'. [ 1301.191885][T22358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.199105][T22358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.535286][T22351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.542539][T22351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.133253][T23175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1302.205940][T23175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1302.232306][T23397] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1302.693713][T23175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.050793][T23175] veth0_vlan: entered promiscuous mode [ 1303.073489][T23175] veth1_vlan: entered promiscuous mode [ 1303.143802][T23175] veth0_macvtap: entered promiscuous mode [ 1303.154699][T23175] veth1_macvtap: entered promiscuous mode [ 1303.184330][T23175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.201794][T23175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.213230][T23175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.234069][T23175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.252435][T23175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.264774][T23175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.284027][T23175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.299186][T23175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.312269][T23175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.323557][T23175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.592918][T23431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.635732][T22378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.659162][T22378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.807133][ T5903] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1303.824793][T23437] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1304.027736][ T5903] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1304.093574][ T5903] usb 3-1: config 0 has no interface number 0 [ 1304.239936][ T5903] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1304.258175][ T5903] usb 3-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1304.267688][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.293105][ T5903] usb 3-1: config 0 descriptor?? [ 1304.294221][T22358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.328214][T22358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.589679][ T5903] usb 3-1: string descriptor 0 read error: -71 [ 1304.620675][ T5903] usb 3-1: Found UVC 0.00 device (1871:0306) [ 1304.637300][ T5903] usb 3-1: No valid video chain found. [ 1304.639036][ T5903] usb 3-1: USB disconnect, device number 35 [ 1305.843633][T23464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6093'. [ 1306.878533][T23472] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1307.687882][T19617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1307.708688][T19617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1307.724869][T19617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1307.762518][T19617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1307.781557][T19617] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1307.791808][T19617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1308.897232][T23496] No source specified [ 1309.826784][T19617] Bluetooth: hci1: command tx timeout [ 1310.103196][T23513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.548515][T23476] chnl_net:caif_netlink_parms(): no params data found [ 1311.536971][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6201'. [ 1311.545903][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6201'. [ 1311.555219][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6201'. [ 1312.321985][T19617] Bluetooth: hci1: command tx timeout [ 1312.907755][T23476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.921564][T23476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.930685][T23476] bridge_slave_0: entered allmulticast mode [ 1312.944215][T23476] bridge_slave_0: entered promiscuous mode [ 1312.962205][T23476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.985730][T23476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.018399][T23476] bridge_slave_1: entered allmulticast mode [ 1313.025010][T23522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1313.051958][T23476] bridge_slave_1: entered promiscuous mode [ 1313.292105][T23540] xt_addrtype: ipv6 does not support BROADCAST matching [ 1313.292696][T23476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.505158][T23476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.374879][T23476] team0: Port device team_slave_0 added [ 1314.386847][T19617] Bluetooth: hci1: command tx timeout [ 1314.409725][T23476] team0: Port device team_slave_1 added [ 1314.418603][T22347] bridge_slave_1: left allmulticast mode [ 1314.424346][T22347] bridge_slave_1: left promiscuous mode [ 1314.444017][T22347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.472464][T22347] bridge_slave_0: left allmulticast mode [ 1314.514814][T22347] bridge_slave_0: left promiscuous mode [ 1315.833142][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6207'. [ 1315.920575][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6207'. [ 1316.046164][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6207'. [ 1316.466729][T19617] Bluetooth: hci1: command tx timeout [ 1316.688634][T22347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.788406][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1318.798157][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1318.808745][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1320.753318][T22347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.765657][T22347] bond0 (unregistering): Released all slaves [ 1321.203129][T23476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.709761][T23476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.965359][T23476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.018695][T23476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.036770][T23476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.068978][T23476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.299475][T23597] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1322.536402][T22347] batman_adv: batadv0: Removing interface: wlan0 [ 1322.653608][T23603] input: syz0 as /devices/virtual/input/input83 [ 1322.660320][T23603] input: failed to attach handler leds to device input83, error: -6 [ 1322.816491][T22255] libceph: connect (1)[c::]:6789 error -101 [ 1323.026921][T23476] hsr_slave_0: entered promiscuous mode [ 1323.215685][T23603] ceph: No mds server is up or the cluster is laggy [ 1323.258332][T23476] hsr_slave_1: entered promiscuous mode [ 1323.264486][T23476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.268961][T22255] libceph: mon0 (1)[c::]:6789 connect error [ 1323.286721][T23476] Cannot create hsr debugfs directory [ 1323.422597][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6223'. [ 1323.449300][T22347] hsr_slave_0: left promiscuous mode [ 1323.477309][T22347] hsr_slave_1: left promiscuous mode [ 1323.483623][T22347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.541416][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6225'. [ 1323.550371][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6225'. [ 1323.559375][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6225'. [ 1323.653652][T22347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.706526][T22255] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1323.977321][T22255] usb 5-1: device descriptor read/64, error -71 [ 1324.023037][T23614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.337335][T22255] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1324.501146][T22255] usb 5-1: device descriptor read/64, error -71 [ 1324.620155][T22255] usb usb5-port1: attempt power cycle [ 1324.996780][T22255] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1325.017929][T22255] usb 5-1: device descriptor read/8, error -71 [ 1325.195663][T22347] team0 (unregistering): Port device team_slave_1 removed [ 1325.273481][T22255] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1325.291724][T22347] team0 (unregistering): Port device team_slave_0 removed [ 1325.307375][T22255] usb 5-1: device descriptor read/8, error -71 [ 1325.436952][T22255] usb usb5-port1: unable to enumerate USB device [ 1326.536451][T23625] input: syz0 as /devices/virtual/input/input84 [ 1327.222301][T23633] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1329.709924][T23646] slcan: can't register candev [ 1329.714987][T23646] Falling back ldisc for ttyS3. [ 1330.226781][T15614] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1330.396835][T15614] usb 2-1: Using ep0 maxpacket: 32 [ 1330.415081][T15614] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1330.445280][T15614] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1330.485220][T15614] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1330.562097][T15614] usb 2-1: config 1 has no interface number 0 [ 1330.592772][T15614] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1331.238198][T15614] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1331.251453][T15614] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1331.260597][T15614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.310009][T15614] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1331.389674][T23476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1331.429582][T23476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1331.449535][T23476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1331.473500][T23476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1331.522291][T15614] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1331.618861][T23476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.664760][T23476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.681782][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.689119][T19681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.740981][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.748270][T19681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.808067][T15614] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1331.940632][T21438] usb 2-1: USB disconnect, device number 35 [ 1331.949635][T21438] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1331.968307][T15614] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1331.978746][T15614] usb 5-1: config 0 has no interface number 0 [ 1331.985046][T15614] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1331.993348][T15614] usb 5-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2 [ 1332.002800][T15614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.027914][T15614] usb 5-1: config 0 descriptor?? [ 1332.043039][T23476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.087187][T23476] veth0_vlan: entered promiscuous mode [ 1332.105865][T23476] veth1_vlan: entered promiscuous mode [ 1332.133932][T23476] veth0_macvtap: entered promiscuous mode [ 1332.149678][T23476] veth1_macvtap: entered promiscuous mode [ 1332.172146][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.186217][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.196544][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.381514][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.393330][T23476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.404459][T15614] usb 5-1: string descriptor 0 read error: -71 [ 1332.413790][T15614] usb 5-1: Found UVC 0.00 device (1871:0306) [ 1332.414179][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.421347][T15614] usb 5-1: No valid video chain found. [ 1332.423098][T15614] usb 5-1: USB disconnect, device number 50 [ 1332.439184][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.454508][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.465959][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.478884][T23684] input: syz0 as /devices/virtual/input/input86 [ 1332.501175][T23476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.766435][T23476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.778656][T23476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.788231][T23476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.797224][T23476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.960581][T22378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.986415][T22378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.012239][T22378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.022171][T22378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.224744][T23704] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1334.880083][T23705] can0: slcan on ttyS3. [ 1335.591023][T23705] can0 (unregistered): slcan off ttyS3. [ 1336.902268][T23021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1337.079454][T23021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1337.101179][T23021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1337.116478][T23021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1337.149774][T23726] hub 9-0:1.0: USB hub found [ 1337.156987][T23726] hub 9-0:1.0: 1 port detected [ 1337.165773][T23021] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1337.179015][T23021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1337.794679][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1337.803710][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1337.812717][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1338.972385][T23737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.268673][T23021] Bluetooth: hci2: command tx timeout [ 1339.482285][T23722] chnl_net:caif_netlink_parms(): no params data found [ 1339.530177][T23725] input: syz0 as /devices/virtual/input/input87 [ 1339.688965][T23748] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1340.389083][T22378] bridge_slave_1: left allmulticast mode [ 1340.389108][T22378] bridge_slave_1: left promiscuous mode [ 1340.389244][T22378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.415220][T22378] bridge_slave_0: left allmulticast mode [ 1340.415238][T22378] bridge_slave_0: left promiscuous mode [ 1340.415352][T22378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.352512][T23021] Bluetooth: hci2: command tx timeout [ 1341.400709][T22378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.410935][T22378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.455751][T22378] bond0 (unregistering): Released all slaves [ 1341.808334][T23722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.815497][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.863050][T23722] bridge_slave_0: entered allmulticast mode [ 1341.881411][T23722] bridge_slave_0: entered promiscuous mode [ 1341.917672][T23722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.924897][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.934807][T23762] xt_addrtype: ipv6 does not support BROADCAST matching [ 1341.954173][T23722] bridge_slave_1: entered allmulticast mode [ 1341.974578][T23722] bridge_slave_1: entered promiscuous mode [ 1342.060832][T23722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.115335][T22378] batman_adv: batadv0: Removing interface: wlan0 [ 1342.153156][T23722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.288085][T23722] team0: Port device team_slave_0 added [ 1342.345073][T22378] hsr_slave_0: left promiscuous mode [ 1342.572769][T22378] hsr_slave_1: left promiscuous mode [ 1342.581843][T22378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.604166][T22378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.438524][T23021] Bluetooth: hci2: command tx timeout [ 1343.763326][T23777] slcan: can't register candev [ 1343.768398][T23777] Falling back ldisc for ttyS3. [ 1345.506990][T23021] Bluetooth: hci2: command tx timeout [ 1345.664039][T22378] team0 (unregistering): Port device team_slave_1 removed [ 1345.746689][T22378] team0 (unregistering): Port device team_slave_0 removed [ 1346.383375][T23722] team0: Port device team_slave_1 added [ 1347.165558][T23809] input: syz0 as /devices/virtual/input/input89 [ 1347.556148][T23722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.573397][T23722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.600842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.743054][T23722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.841960][T23722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.861727][T23722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.887708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.895465][T23722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.029512][T23722] hsr_slave_0: entered promiscuous mode [ 1348.054788][T23722] hsr_slave_1: entered promiscuous mode [ 1348.069961][T23722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1348.082874][T23722] Cannot create hsr debugfs directory [ 1349.856541][T22378] IPVS: stop unused estimator thread 0... [ 1350.163358][T23827] hub 9-0:1.0: USB hub found [ 1350.169129][T23827] hub 9-0:1.0: 1 port detected [ 1352.111622][T23843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1352.899296][T23847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.308251][T23722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1353.332480][T23722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1354.138932][T23722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1354.193862][T23722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1354.326426][T23864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1355.003211][T23722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.069277][T23722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.261253][T23722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1355.272972][T23722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.286460][T22351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.293652][T22351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.372385][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1355.381802][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1355.391267][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1356.097633][T22351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.104812][T22351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.642391][T23722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.949504][T23722] veth0_vlan: entered promiscuous mode [ 1357.001034][T23722] veth1_vlan: entered promiscuous mode [ 1357.095290][T23722] veth0_macvtap: entered promiscuous mode [ 1357.123255][T23722] veth1_macvtap: entered promiscuous mode [ 1357.184727][T23722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.209064][T23722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.239182][T23722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.366693][T23722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.376817][T23722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.387512][T23722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.403570][T23722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.091468][T23722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.102474][T23722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.113513][T23722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.124955][T23722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.147626][T23722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.201097][T23722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.205255][T23897] No source specified [ 1358.245063][T23722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.268359][T23722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.290656][T23722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.314328][T23722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.335654][T23722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.606321][T22351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.634864][T22351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.727270][T22378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.754794][T22378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.179994][T23906] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1361.427909][T23931] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1362.971778][T23949] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1363.449620][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1363.538563][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1363.677580][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1369.390259][T23993] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1369.971181][T23992] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1371.458556][T23995] non-paged memory [ 1371.463000][T23995] list_del corruption, ffff888033d46fa0->next is LIST_POISON1 (dead000000000100) [ 1371.472861][T23995] ------------[ cut here ]------------ [ 1371.478518][T23995] kernel BUG at lib/list_debug.c:58! [ 1371.483917][T23995] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 1371.491127][T23995] CPU: 0 UID: 0 PID: 23995 Comm: syz.0.6332 Not tainted 6.14.0-rc4-syzkaller-00220-g5c44ddaf7df3 #0 SYZFAIL: failed to recv rpc [ 1371.501979][T23995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1371.512045][T23995] RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190 [ 1371.519174][T23995] Code: a0 1f 80 8c 4c 89 fe e8 3f a1 32 fc 90 0f 0b 48 89 df e8 34 8d 10 fd 48 c7 c7 00 20 80 8c 4c 89 fe 48 89 da e8 22 a1 32 fc 90 <0f> 0b 48 89 df e8 17 8d 10 fd 48 c7 c7 60 20 80 8c 4c 89 fe 48 89 [ 1371.539003][T23995] RSP: 0018:ffffc90003b2f708 EFLAGS: 00010246 [ 1371.545095][T23995] RAX: 000000000000004e RBX: dead000000000100 RCX: 850384bf9d1f6500 [ 1371.553160][T23995] RDX: ffffc900179b2000 RSI: 0000000000008cc8 RDI: 0000000000008cc9 [ 1371.561335][T23995] RBP: ffff888033d46ee0 R08: ffffffff81a114dc R09: fffffbfff1d3a614 [ 1371.569315][T23995] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: dead000000000122 [ 1371.577282][T23995] R13: dffffc0000000000 R14: dead000000000100 R15: ffff888033d46fa0 [ 1371.585442][T23995] FS: 00007fd291b436c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1371.594381][T23995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1371.601308][T23995] CR2: 00007f6cfc33971c CR3: 000000007bd2e000 CR4: 00000000003526f0 [ 1371.609551][T23995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1371.617537][T23995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1371.625718][T23995] Call Trace: [ 1371.628995][T23995] [ 1371.631917][T23995] ? __die_body+0x5f/0xb0 [ 1371.636266][T23995] ? die+0x9e/0xc0 [ 1371.639993][T23995] ? do_trap+0x15a/0x3a0 [ 1371.644237][T23995] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 1371.650653][T23995] ? do_error_trap+0x1dc/0x2c0 [ 1371.655412][T23995] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 1371.661828][T23995] ? __pfx_do_error_trap+0x10/0x10 [ 1371.666947][T23995] ? handle_invalid_op+0x34/0x40 [ 1371.671879][T23995] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 1371.678838][T23995] ? exc_invalid_op+0x38/0x50 [ 1371.683537][T23995] ? asm_exc_invalid_op+0x1a/0x20 [ 1371.688575][T23995] ? __wake_up_klogd+0xcc/0x110 [ 1371.693435][T23995] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 1371.699856][T23995] ? __list_del_entry_valid_or_report+0x10e/0x190 [ 1371.706266][T23995] p9_fd_cancelled+0x99/0x220 [ 1371.710943][T23995] ? __pfx_p9_fd_cancelled+0x10/0x10 [ 1371.716237][T23995] p9_client_flush+0x3c2/0x540 [ 1371.721016][T23995] ? __pfx_p9_client_flush+0x10/0x10 [ 1371.726315][T23995] ? p9_fd_cancel+0x1f0/0x240 [ 1371.731016][T23995] ? schedule+0x90/0x320 [ 1371.735256][T23995] ? schedule+0x155/0x320 [ 1371.739588][T23995] p9_client_rpc+0x8d4/0xac0 [ 1371.744300][T23995] ? __pfx_p9_client_rpc+0x10/0x10 [ 1371.749423][T23995] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1371.755503][T23995] ? __kasan_kmalloc+0x98/0xb0 [ 1371.760281][T23995] ? __kmalloc_cache_noprof+0x243/0x390 [ 1371.765914][T23995] ? p9_client_stat+0xc0/0x280 [ 1371.770859][T23995] p9_client_stat+0x10e/0x280 [ 1371.775707][T23995] ? __pfx_p9_client_stat+0x10/0x10 [ 1371.780912][T23995] ? fold_vm_zone_numa_events+0x300/0x310 [ 1371.786690][T23995] v9fs_inode_from_fid+0x82/0x550 [ 1371.791735][T23995] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 1371.797465][T23995] ? shrinker_register+0x160/0x230 [ 1371.802578][T23995] ? __pfx_v9fs_inode_from_fid+0x10/0x10 [ 1371.808210][T23995] ? sget+0x658/0x6b0 [ 1371.812187][T23995] v9fs_mount+0x6fe/0xa90 [ 1371.816529][T23995] ? __pfx_v9fs_mount+0x10/0x10 [ 1371.821385][T23995] ? __kmalloc_cache_noprof+0x243/0x390 [ 1371.827056][T23995] ? rcu_is_watching+0x15/0xb0 [ 1371.831830][T23995] ? cap_capable+0x139/0x450 [ 1371.836420][T23995] legacy_get_tree+0xee/0x190 [ 1371.841181][T23995] ? __pfx_v9fs_mount+0x10/0x10 [ 1371.846029][T23995] vfs_get_tree+0x90/0x2b0 [ 1371.850449][T23995] do_new_mount+0x2be/0xb40 [ 1371.854978][T23995] ? __pfx_do_new_mount+0x10/0x10 [ 1371.860110][T23995] __se_sys_mount+0x2d6/0x3c0 [ 1371.864868][T23995] ? __pfx___se_sys_mount+0x10/0x10 [ 1371.870695][T23995] ? do_syscall_64+0x100/0x230 [ 1371.875456][T23995] ? __x64_sys_mount+0x20/0xc0 [ 1371.880210][T23995] do_syscall_64+0xf3/0x230 [ 1371.885065][T23995] ? clear_bhb_loop+0x35/0x90 [ 1371.889875][T23995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.895762][T23995] RIP: 0033:0x7fd290d8d169 [ 1371.900253][T23995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.919854][T23995] RSP: 002b:00007fd291b43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1371.928347][T23995] RAX: ffffffffffffffda RBX: 00007fd290fa5fa0 RCX: 00007fd290d8d169 [ 1371.936304][T23995] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 1371.944288][T23995] RBP: 00007fd290e0e2a0 R08: 0000400000000400 R09: 0000000000000000 [ 1371.952633][T23995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.960605][T23995] R13: 0000000000000000 R14: 00007fd290fa5fa0 R15: 00007ffe29140c88 [ 1371.968663][T23995] [ 1371.971669][T23995] Modules linked in: [ 1371.977557][T23995] ---[ end trace 0000000000000000 ]--- [ 1371.984220][T23995] RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190 [ 1371.991435][T23995] Code: a0 1f 80 8c 4c 89 fe e8 3f a1 32 fc 90 0f 0b 48 89 df e8 34 8d 10 fd 48 c7 c7 00 20 80 8c 4c 89 fe 48 89 da e8 22 a1 32 fc 90 <0f> 0b 48 89 df e8 17 8d 10 fd 48 c7 c7 60 20 80 8c 4c 89 fe 48 89 [ 1372.011399][T23995] RSP: 0018:ffffc90003b2f708 EFLAGS: 00010246 [ 1372.017524][T23995] RAX: 000000000000004e RBX: dead000000000100 RCX: 850384bf9d1f6500 [ 1372.025482][T23995] RDX: ffffc900179b2000 RSI: 0000000000008cc8 RDI: 0000000000008cc9 [ 1372.033586][T23995] RBP: ffff888033d46ee0 R08: ffffffff81a114dc R09: fffffbfff1d3a614 [ 1372.041600][T23995] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: dead000000000122 [ 1372.050063][T23995] R13: dffffc0000000000 R14: dead000000000100 R15: ffff888033d46fa0 [ 1372.058438][T23995] FS: 00007fd291b436c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1372.067677][T23995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1372.074447][T23995] CR2: 00007f6cfc33971c CR3: 000000007bd2e000 CR4: 00000000003526f0 [ 1372.082467][T23995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1372.090480][T23995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1372.098608][T23995] Kernel panic - not syncing: Fatal exception [ 1372.104981][T23995] Kernel Offset: disabled [ 1372.109305][T23995] Rebooting in 86400 seconds..