last executing test programs: 15m43.112285445s ago: executing program 4 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 15m42.164029635s ago: executing program 4 (id=11): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 15m41.038101463s ago: executing program 4 (id=13): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 15m40.666430757s ago: executing program 4 (id=15): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 15m38.359669731s ago: executing program 4 (id=20): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) mmap$xdp(&(0x7f0000677000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 15m36.766372832s ago: executing program 4 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 15m21.607135924s ago: executing program 32 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 13m57.284328154s ago: executing program 2 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000001ac0)=ANY=[@ANYBLOB="05000000000000007111b7000000000085100000020000008559adfe0000003800000095000000000000009500a5050086cf01da2f383f6d2409cdd9bdcb9b812805b8e4a50113844be7e25f3e1bb4e27550e2a5616d0b43d8ec98516c424d33fd75307b239d2efe46d77261e60fc54f1ccda7085a5171024743dbbc038c512f1ef46518eb48ea8628fbc8bd866894f85b6c70b08d3e874e0f1de8c18ef52f8fdd94589f20922a55bf7cd90b9a26b0575664023dfc65a13f2a3ba4bb59e1be5a5ff4cd0f5a6c69768a559e915511ce315cdf279bcaa8e08f45b6f249ac07d726ed0085e5d9b436b38e003b853972ab9a6d"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000017c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000001a80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c011}, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000002000000000a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000680)=""/84, 0x54}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/55, 0x37}, {&(0x7f0000001840)=""/76, 0x4c}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x4, 0x2002, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x60, 0x1dc, @vifc_lcl_ifindex, @broadcast}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000002f00094902bd7000000000000400000045001180e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fef8a725f9f473"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 13m53.171472723s ago: executing program 2 (id=268): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 13m52.064741738s ago: executing program 2 (id=272): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 13m51.03951136s ago: executing program 2 (id=277): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x4054) 13m49.800637631s ago: executing program 2 (id=278): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 13m46.762612722s ago: executing program 2 (id=290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 13m31.064406063s ago: executing program 33 (id=290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m6.057952564s ago: executing program 0 (id=1278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x200400, 0x187) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000170900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000007071901021f3a9980f94536ce1de48d4c88519d875729d4022aea4e2e297ad9432e4113094f21267b72cf66428778a74ba9a0e53ab533c5c6d811c6dba57740f289a9140f662162f91c07f41c5a8c86d"], 0x70}}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40c5) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='-:myeve', 0x7) 7m4.784641036s ago: executing program 0 (id=1281): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 7m3.379558736s ago: executing program 0 (id=1283): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x200400, 0x187) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000170900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000007071901021f3a9980f94536ce1de48d4c88519d875729d4022aea4e2e297ad9432e4113094f21267b72cf66428778a74ba9a0e53ab533c5c6d811c6dba57740f289a9140f662162f91c07f41c5a8c86d"], 0x70}}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40c5) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) 7m0.694504399s ago: executing program 0 (id=1287): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$inet(0x2, 0x4, 0x580d4139) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008045}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xc}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 6m52.917645903s ago: executing program 0 (id=1294): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0xb0d, 0x2148, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c002}, 0x880) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 6m43.632422922s ago: executing program 0 (id=1303): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$inet(0x2, 0x4, 0x580d4139) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008045}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xc}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 6m26.911194121s ago: executing program 34 (id=1303): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$inet(0x2, 0x4, 0x580d4139) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008045}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xc}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 8.969251845s ago: executing program 1 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x7}}}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1}) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffcfc}, {0x4, @none, "40fef9efea518310c08b43e129089545c3e0aa1efb7d8b596ca666fcc6708b522b3c9119a043e367cc516feeb5111c81ed0ec0d07a09fa4a87c8864243feafdda0b1cc5a90c30c418c6efba5a292260168aed3433e5d6ab31ea56a25d4128d6d5f655c1cfd6eb54de914bda77d156fdcc5af2ea3aba9931216ff400a2413fe2fecb6705a038be6cdb6b05fb299a8616745294ce08982b15dc949d9665a4dda0a1ab9d0a9c2b723682bfa0c4f45d91aab4187fa00169f3289dc02a678a1ab6ae10b3240209aa5fc1706f8d7963e878950f20ad175cae28a0081b981924902ac89ced3d6493f0bac5f5a20b640fd2e09d1368a9b37cf451e1f"}}}, 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 8.870330777s ago: executing program 3 (id=1924): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.801597303s ago: executing program 1 (id=1925): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) 7.404393795s ago: executing program 3 (id=1926): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() shutdown(0xffffffffffffffff, 0x32ce970513f32900) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x123) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 6.693802077s ago: executing program 1 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r3}, 0x38) 5.960651419s ago: executing program 3 (id=1929): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0xc0, 0x11b, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r4 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) close(r0) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 5.72817781s ago: executing program 5 (id=1930): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 4.557153142s ago: executing program 5 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x80}}, 0x0) 3.561275341s ago: executing program 3 (id=1932): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) 3.409236446s ago: executing program 5 (id=1933): pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) eventfd(0x7) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 3.393340943s ago: executing program 3 (id=1934): fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000240000000080800034000000002080002400000008408000140000000000900020073797a3200004da8e3d1000011000100000000000000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x18, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0xfffffffe, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x8, 0x0, 0x0, 0x1}, {0x2712, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x3, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@can_delroute={0x1c, 0x19, 0x100, 0x70bd26, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x5c, 0xff, 0xd1, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x7, 0x9, 0x7}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000680)="1498a3", 0x3}, {&(0x7f0000000800)="d74dff4d65c3cf406f8a087dc783139e3d2d73d8e6217f6e767c61df334972cb28648eb6a41cf2d6798ca7fee2353e229d3df13d70525ebbe1a4834617d4c90125e7bbbf0ae5bf1b20d1b1f6b914ba34fb22b237c6b0da2adbc96421ba12c8b493b1a0d84e7a57a91f1c20085577fbc7ddbbe1388c5958eda5457971d580635e758856d98ae0980ab0f3745a18058564098ccf07052b2aef6a3c917a0804a50665bf0357d4", 0xa5}, {&(0x7f00000008c0)="098d70208c1d156b37b6aa77f85a7fe1c356fcd35b8e58dea44b220fb046a10cc55d39fcad117f38d50dc1c8e896b0099611a013ebc5b762f9e3b8cf64591416220744b29675ebd512ce34fed2e4eac5530780aee2e64d47d60906fac68276ea8f9929fea7036cfc91b548a6128633e86a82c7bdb212d35971108e28d4d599a3cda4e8f9c89039806b190a360bcd5465422a7f30bcb2c557d169239afee8cc8c4831ddec58a19cfde2630566d0815ec46935e058c94e01db90776cda01c22beec9abf9c70446b7d28aa4ec3514e0bb2a9104b73b824ea4199685e0d37b71f839ab956b", 0xe3}, {&(0x7f00000009c0)="54a0d2f3808d12a1f865f9f0299fb7ea50b29eaa24356c971277198fab55fffca58ffc128e963b676e1405a4515c8f69a3568796d9b55e69851b3fb0d77786ecdca80e6a64578177e1590db2f2ebd173cf31746bdfbe3443be1bef2463f92b04f56a7963d659b0c54dd483ac9e8ff9ea9142fabdc7d0b781", 0x78}, {&(0x7f0000000a40)="508652f75d71e69cb3a55f2e2bfb32e51428e127dd00d0f64430874fece7970abf02e5e5608ecc3b4249b8d70351e6a0eb65ee98ab5fa0ee3ab281f5c358d5f2854e0828c342b2e2dcb2482985fc1d905dca811b8046734be1b06a299fc1cd4f72b3a7dbdcec3f09045052fb8131a26b2a8a2d117612df37185b915207b634b639039a70c171415787c25125d92cdade2fdc8396107a7a888eb38b72d1bc1937aae6e3b4721f4cd451e1ebe646c2ee407eb16567c8b038419ceadc11", 0xbc}], 0x5) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r5 = eventfd2(0x4, 0x801) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000003c0)={0x7, 0x8080000, 0x1, r5, 0xa}) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x1, 0xffffffff, 0xadf, 0x10, r6, r7, 0x2000, '\x00', 0x6, 0x17d, 0xffffffffffffffff, 0x5f2, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000e}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB="9fcf"], 0x0) 2.457504393s ago: executing program 1 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 2.392630634s ago: executing program 5 (id=1936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$packet(0x11, 0x3, 0x300) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) 2.008577975s ago: executing program 5 (id=1937): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() shutdown(0xffffffffffffffff, 0x32ce970513f32900) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x123) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 966.859341ms ago: executing program 1 (id=1938): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x4000) setresgid(0xee00, 0xee01, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x44}}, 0x0) 886.409731ms ago: executing program 5 (id=1939): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1, 0x6, 0xff, 0x610, 0xffffffffffffffff, 0x619, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffffb, 0x2, 0xe}, 0x50) syz_open_dev$radio(&(0x7f0000000640), 0x1, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, 0x0, 0x0, 0xf0ffff}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="4900000001000000020000000300000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdb1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6f}, @generic={0x4, 0xc, 0xb, 0xfff, 0xd56a}, @ldst={0x1, 0x2, 0x3, 0x1, 0x9, 0x80}, @func, @call={0x85, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x0, 0xb, 0x1, 0x139d4b4b1ed21168}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbc8b}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000180)='syzkaller\x00', 0xec, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='stm32g0-typec 0x35', 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='stm32g0-typec 0x35', 0x12) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e03"]}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x7, 0x5}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) 298.244896ms ago: executing program 1 (id=1940): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 0s ago: executing program 3 (id=1941): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000ffff0800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000080), 0x5005) setgroups(0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, 0x44841}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) kernel console output (not intermixed with test programs): ional PCI endpoint [ 424.534576][ T9340] overlayfs: failed to resolve './file1': -2 [ 429.098655][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.100060][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.100338][ T9169] bridge_slave_0: entered allmulticast mode [ 429.117634][ T9169] bridge_slave_0: entered promiscuous mode [ 429.135834][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.136025][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.136300][ T9169] bridge_slave_1: entered allmulticast mode [ 429.143048][ T9169] bridge_slave_1: entered promiscuous mode [ 430.001805][ T9386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.327729][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.346336][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.424650][ T9169] team0: Port device team_slave_0 added [ 430.427928][ T9169] team0: Port device team_slave_1 added [ 432.844770][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.844786][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.844810][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.909187][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.909203][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.909227][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.515156][ T9432] Config c/1 of g1 needs at least one function. [ 434.515292][ T9432] udc usbip-vudc.0: failed to start g1: -22 [ 434.515314][ T9432] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 434.590414][ T9432] UDC core: g1: couldn't find an available UDC or it's busy [ 435.808494][ T9169] hsr_slave_0: entered promiscuous mode [ 435.817962][ T9169] hsr_slave_1: entered promiscuous mode [ 435.818952][ T9169] debugfs: 'hsr0' already exists in 'hsr' [ 435.818974][ T9169] Cannot create hsr debugfs directory [ 439.209695][ T163] bridge_slave_1: left allmulticast mode [ 439.209731][ T163] bridge_slave_1: left promiscuous mode [ 439.210033][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.094812][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.094877][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.216967][ T163] bridge_slave_0: left allmulticast mode [ 440.216999][ T163] bridge_slave_0: left promiscuous mode [ 440.217220][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.404469][ T9529] overlayfs: failed to resolve './file2': -2 [ 446.652338][ T9534] netlink: 'syz.3.959': attribute type 2 has an invalid length. [ 446.652360][ T9534] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 446.652373][ T9534] netlink: 108 bytes leftover after parsing attributes in process `syz.3.959'. [ 446.680610][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.262742][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.929013][ T163] bond0 (unregistering): Released all slaves [ 449.489073][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 449.803307][ T9557] input: syz1 as /devices/virtual/input/input12 [ 450.923020][ T9565] overlayfs: failed to resolve './file2': -2 [ 452.009543][ T163] hsr_slave_0: left promiscuous mode [ 452.171849][ T163] hsr_slave_1: left promiscuous mode [ 452.172839][ T163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.235213][ T163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.580301][ T9602] Line length is too long: Should be less than 4094 [ 455.798406][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.984'. [ 457.451864][ T163] team0 (unregistering): Port device team_slave_1 removed [ 458.312110][ T163] team0 (unregistering): Port device team_slave_0 removed [ 462.806363][ T9646] syzkaller1: entered promiscuous mode [ 462.806391][ T9646] syzkaller1: entered allmulticast mode [ 465.449934][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 465.959686][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 466.874019][ T9666] syzkaller1: entered promiscuous mode [ 466.874045][ T9666] syzkaller1: entered allmulticast mode [ 467.310405][ T9701] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 468.325989][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 468.352745][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 468.364878][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 468.365988][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 468.367672][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.794601][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 470.637841][ T5600] Bluetooth: hci5: command tx timeout [ 472.649538][ T5600] Bluetooth: hci5: command tx timeout [ 474.747167][ T5600] Bluetooth: hci5: command tx timeout [ 476.900694][ T9776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.053532][ T5600] Bluetooth: hci5: command tx timeout [ 477.972155][ T9788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1023'. [ 479.751935][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 481.071654][ T9852] netlink: 'syz.1.1034': attribute type 2 has an invalid length. [ 481.071674][ T9852] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 481.071686][ T9852] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1034'. [ 481.530124][ T7687] bridge_slave_1: left allmulticast mode [ 481.530161][ T7687] bridge_slave_1: left promiscuous mode [ 481.530425][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.651057][ T7687] bridge_slave_0: left allmulticast mode [ 481.651090][ T7687] bridge_slave_0: left promiscuous mode [ 481.651319][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.252909][ T9886] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 487.870821][ T7687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.077324][ T7687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.526877][ T7687] bond0 (unregistering): Released all slaves [ 489.011509][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.011721][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.011895][ T9707] bridge_slave_0: entered allmulticast mode [ 489.014374][ T9707] bridge_slave_0: entered promiscuous mode [ 489.018119][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.018332][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.018495][ T9707] bridge_slave_1: entered allmulticast mode [ 489.051920][ T9904] overlayfs: missing 'workdir' [ 489.085343][ T9707] bridge_slave_1: entered promiscuous mode [ 489.170151][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.227864][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.623097][ T9919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.591667][ T7687] hsr_slave_0: left promiscuous mode [ 492.214231][ T7687] hsr_slave_1: left promiscuous mode [ 492.286222][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.340620][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.939979][ T9931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.495051][ T7687] team0 (unregistering): Port device team_slave_1 removed [ 497.164747][ T7687] team0 (unregistering): Port device team_slave_0 removed [ 497.320884][ T9964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.695222][ T9707] team0: Port device team_slave_0 added [ 500.490845][ T9707] team0: Port device team_slave_1 added [ 501.542401][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.542470][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.547876][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1072'. [ 501.599564][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1072'. [ 501.612533][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.612544][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.612557][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.614144][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1072'. [ 501.618231][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.618245][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.619929][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.837542][ T9995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.982611][ T9707] hsr_slave_0: entered promiscuous mode [ 501.988578][ T9707] hsr_slave_1: entered promiscuous mode [ 502.007892][ T9707] debugfs: 'hsr0' already exists in 'hsr' [ 502.007920][ T9707] Cannot create hsr debugfs directory [ 502.222970][ T9998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.282494][T10001] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 503.284738][T10004] overlayfs: missing 'lowerdir' [ 505.286376][T10017] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 505.286431][T10017] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 505.307673][T10017] Device name cannot be null; rc = [-22] [ 508.819093][T10035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.963816][T10046] overlayfs: missing 'lowerdir' [ 511.057834][ T9707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 511.123430][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.128817][ T9707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.140408][T10051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.237486][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.240545][ T9707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 511.961526][T10043] 9pnet: Found fid 0 not clunked [ 512.120901][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 512.176456][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.187573][ T9707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.257726][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.306789][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 512.306819][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.306834][ T10] usb 4-1: Product: syz [ 512.306848][ T10] usb 4-1: Manufacturer: syz [ 512.306865][ T10] usb 4-1: SerialNumber: syz [ 512.439217][ T10] usb 4-1: config 0 descriptor?? [ 512.663039][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 512.723995][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.202458][ T9707] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.637740][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.651250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.427696][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 515.478225][ T9707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.478248][ T9707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.513787][ T10] usb 4-1: USB disconnect, device number 3 [ 515.564730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.564874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.749727][T10095] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 517.749787][T10095] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 520.336119][T10121] netlink: 'syz.5.1107': attribute type 2 has an invalid length. [ 520.336134][T10121] netlink: 'syz.5.1107': attribute type 1 has an invalid length. [ 520.351678][T10121] Device name cannot be null; rc = [-22] [ 521.227443][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.306465][ T9707] veth0_vlan: entered promiscuous mode [ 523.385059][ T9707] veth1_vlan: entered promiscuous mode [ 523.439593][ T9707] veth0_macvtap: entered promiscuous mode [ 523.444856][ T9707] veth1_macvtap: entered promiscuous mode [ 523.481308][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.486353][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.589723][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.590138][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.590527][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.590998][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.969682][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 527.215938][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 527.215986][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.216035][ T31] usb 2-1: Product: syz [ 527.216084][ T31] usb 2-1: Manufacturer: syz [ 527.216133][ T31] usb 2-1: SerialNumber: syz [ 527.997044][ T31] usb 2-1: config 0 descriptor?? [ 529.762423][ T31] usb 2-1: can't set config #0, error -71 [ 529.841984][ T31] usb 2-1: USB disconnect, device number 3 [ 531.814315][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.867289][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.876908][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.878221][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.899939][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.916594][T10207] bond2: entered promiscuous mode [ 531.917163][T10207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.014497][T10210] vlan2: entered allmulticast mode [ 532.014519][T10210] bond2: entered allmulticast mode [ 532.086545][T10214] bridge2: entered promiscuous mode [ 532.086776][T10214] bridge2: entered allmulticast mode [ 532.121405][T10214] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 533.835307][T10240] Line length is too long: Should be less than 4094 [ 534.017886][ T5600] Bluetooth: hci3: command tx timeout [ 535.595118][T10256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.249641][ T5600] Bluetooth: hci3: command tx timeout [ 537.164613][T10267] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 537.867198][T10276] Config c/1 of g1 needs at least one function. [ 537.867282][T10276] udc usbip-vudc.0: failed to start g1: -22 [ 537.867294][T10276] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 538.338850][ T5600] Bluetooth: hci3: command tx timeout [ 538.915574][T10276] UDC core: g1: couldn't find an available UDC or it's busy [ 540.408067][ T5600] Bluetooth: hci3: command tx timeout [ 541.880948][T10307] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 541.906311][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.843986][T10325] input: syz1 as /devices/virtual/input/input13 [ 545.243924][T10337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.907595][T10373] Line length is too long: Should be less than 4094 [ 550.036210][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.292402][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.292610][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.292779][T10211] bridge_slave_0: entered allmulticast mode [ 550.297019][T10211] bridge_slave_0: entered promiscuous mode [ 550.300507][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.300720][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.300892][T10211] bridge_slave_1: entered allmulticast mode [ 550.303671][T10211] bridge_slave_1: entered promiscuous mode [ 550.984416][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.071314][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.152960][T10211] team0: Port device team_slave_0 added [ 551.156683][T10211] team0: Port device team_slave_1 added [ 551.906587][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.906599][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.906612][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.039549][ T5603] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 552.425733][ T5603] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.425761][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.425778][ T5603] usb 4-1: Product: syz [ 552.425791][ T5603] usb 4-1: Manufacturer: syz [ 552.425804][ T5603] usb 4-1: SerialNumber: syz [ 553.139684][ T5603] usb 4-1: config 0 descriptor?? [ 554.435158][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.386214][ T5603] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 555.386314][ T5603] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 555.462632][ T5603] usb 4-1: USB disconnect, device number 4 [ 555.517786][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.517802][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.517828][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.658076][T10211] hsr_slave_0: entered promiscuous mode [ 555.665348][T10211] hsr_slave_1: entered promiscuous mode [ 555.666367][T10211] debugfs: 'hsr0' already exists in 'hsr' [ 555.666390][T10211] Cannot create hsr debugfs directory [ 557.222942][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.188936][T10463] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 563.353683][T10465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.588398][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.588461][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.269981][T10482] input: syz1 as /devices/virtual/input/input14 [ 569.527153][T10495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.279524][T10515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.059625][ T56] bridge_slave_1: left allmulticast mode [ 572.059661][ T56] bridge_slave_1: left promiscuous mode [ 572.153925][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.510350][ T56] bridge_slave_0: left allmulticast mode [ 575.510373][ T56] bridge_slave_0: left promiscuous mode [ 575.510543][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.974291][T10554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.175110][T10552] input: syz1 as /devices/virtual/input/input15 [ 577.175367][T10552] input: failed to attach handler leds to device input15, error: -6 [ 578.251402][T10564] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 581.521796][T10583] input: syz1 as /devices/virtual/input/input16 [ 581.522059][T10583] input: failed to attach handler leds to device input16, error: -6 [ 583.118217][T10590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.110277][T10594] 9p: Bad value for 'rfdno' [ 584.236010][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.171129][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.222473][ T56] bond0 (unregistering): Released all slaves [ 585.401616][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 589.434527][T10628] 9p: Bad value for 'rfdno' [ 594.154132][T10644] input: syz1 as /devices/virtual/input/input17 [ 594.154157][T10644] input: failed to attach handler leds to device input17, error: -6 [ 594.265468][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.484489][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.489499][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.508049][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.516497][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.591353][ T56] hsr_slave_0: left promiscuous mode [ 595.642113][T10667] netlink: 'syz.3.1252': attribute type 2 has an invalid length. [ 595.642126][T10667] netlink: 'syz.3.1252': attribute type 1 has an invalid length. [ 595.642513][T10667] Device name cannot be null; rc = [-22] [ 595.683274][ T56] hsr_slave_1: left promiscuous mode [ 595.684164][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.684187][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.732199][T10670] 9p: Bad value for 'rfdno' [ 595.807103][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.807120][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.275514][T10679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.252316][ T56] veth1_macvtap: left promiscuous mode [ 597.252420][ T56] veth0_macvtap: left promiscuous mode [ 597.279660][ T5614] Bluetooth: hci5: command tx timeout [ 597.356316][ T56] veth1_vlan: left promiscuous mode [ 597.356538][ T56] veth0_vlan: left promiscuous mode [ 597.415756][T10685] overlayfs: missing 'lowerdir' [ 599.381227][ T5614] Bluetooth: hci5: command tx timeout [ 600.375407][T10703] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 600.711175][T10707] 9p: Bad value for 'rfdno' [ 601.411730][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'. [ 601.441403][ T5614] Bluetooth: hci5: command tx timeout [ 603.548785][ T5614] Bluetooth: hci5: command tx timeout [ 603.666299][T10718] netlink: 'syz.0.1266': attribute type 2 has an invalid length. [ 603.667252][T10718] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 603.676404][T10718] Device name cannot be null; rc = [-22] [ 604.399167][T10728] overlayfs: missing 'workdir' [ 604.520345][ T56] team0 (unregistering): Port device team_slave_1 removed [ 604.580329][ T56] team0 (unregistering): Port device team_slave_0 removed [ 604.976189][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 605.285024][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1273'. [ 605.505504][T10750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.733993][T10757] 9p: Bad value for 'rfdno' [ 609.259820][T10774] netlink: 'syz.0.1278': attribute type 2 has an invalid length. [ 609.259834][T10774] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 609.262985][T10774] Device name cannot be null; rc = [-22] [ 610.307707][T10778] overlayfs: missing 'workdir' [ 612.068663][T10796] netlink: 'syz.0.1283': attribute type 2 has an invalid length. [ 612.068685][T10796] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 612.106936][T10796] Device name cannot be null; rc = [-22] [ 613.056684][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1286'. [ 613.613283][T10808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.665897][T10836] netlink: 'syz.5.1290': attribute type 2 has an invalid length. [ 621.665961][T10836] netlink: 'syz.5.1290': attribute type 1 has an invalid length. [ 621.672127][T10836] Device name cannot be null; rc = [-22] [ 622.060237][T10839] overlayfs: missing 'workdir' [ 622.628839][T10857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.684760][T10865] input: syz1 as /devices/virtual/input/input18 [ 624.674923][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.674965][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.091948][T10889] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1300'. [ 629.114714][T10889] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1300'. [ 629.116524][T10889] netlink: 'syz.5.1300': attribute type 29 has an invalid length. [ 629.116544][T10889] netlink: 772 bytes leftover after parsing attributes in process `syz.5.1300'. [ 629.236946][T10892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.337033][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.337973][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.339077][T10647] bridge_slave_0: entered allmulticast mode [ 630.371948][T10647] bridge_slave_0: entered promiscuous mode [ 630.397632][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.397832][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.398019][T10647] bridge_slave_1: entered allmulticast mode [ 630.440308][T10647] bridge_slave_1: entered promiscuous mode [ 630.598619][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.623800][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.989070][T10647] team0: Port device team_slave_0 added [ 631.010888][T10647] team0: Port device team_slave_1 added [ 631.458392][T10903] overlayfs: failed to resolve './file1': -2 [ 631.547739][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.547755][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.547780][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.597307][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.597323][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.597348][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.820250][T10647] hsr_slave_0: entered promiscuous mode [ 631.823144][T10647] hsr_slave_1: entered promiscuous mode [ 631.825607][T10647] debugfs: 'hsr0' already exists in 'hsr' [ 631.825630][T10647] Cannot create hsr debugfs directory [ 638.836201][T10934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.480355][ T3197] bridge_slave_1: left allmulticast mode [ 642.480389][ T3197] bridge_slave_1: left promiscuous mode [ 642.480634][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.445973][ T3197] bridge_slave_0: left allmulticast mode [ 643.446348][ T3197] bridge_slave_0: left promiscuous mode [ 643.560856][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.430324][T10964] overlayfs: failed to resolve './file1': -2 [ 644.843034][T10972] input: syz1 as /devices/virtual/input/input19 [ 646.160450][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.240394][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.709838][ T3197] bond0 (unregistering): Released all slaves [ 649.185370][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.225981][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.239109][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.358237][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.375616][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.689715][ T3197] hsr_slave_0: left promiscuous mode [ 649.729997][ T3197] hsr_slave_1: left promiscuous mode [ 649.731016][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.782406][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.243920][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 650.280616][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 650.432891][T11009] overlayfs: failed to resolve './file1': -2 [ 651.599634][ T5614] Bluetooth: hci3: command tx timeout [ 652.379279][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.971654][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.002533][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.003680][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.004411][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.712871][ T5614] Bluetooth: hci3: command tx timeout [ 655.296670][ T5614] Bluetooth: hci0: command tx timeout [ 655.759514][ T5614] Bluetooth: hci3: command tx timeout [ 657.367053][ T5614] Bluetooth: hci0: command tx timeout [ 657.840736][ T5614] Bluetooth: hci3: command tx timeout [ 659.439754][ T5614] Bluetooth: hci0: command tx timeout [ 661.520303][ T5614] Bluetooth: hci0: command tx timeout [ 663.860390][T11095] input: syz1 as /devices/virtual/input/input20 [ 666.297763][T11109] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 667.761704][T11120] netlink: 'syz.1.1351': attribute type 2 has an invalid length. [ 667.761718][T11120] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 668.073671][ T3197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.097079][T11123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.597426][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.597596][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.598233][T10993] bridge_slave_0: entered allmulticast mode [ 668.622461][T10993] bridge_slave_0: entered promiscuous mode [ 668.626188][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.626387][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.626987][T10993] bridge_slave_1: entered allmulticast mode [ 668.670471][T10993] bridge_slave_1: entered promiscuous mode [ 669.186249][ T3197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.303434][T10993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.363875][T10993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.495870][T10993] team0: Port device team_slave_0 added [ 670.528113][T10993] team0: Port device team_slave_1 added [ 671.106260][ T3197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.684525][T10993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.684536][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.684549][T10993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.686145][T10993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.686153][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.686172][T10993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.010876][ T3197] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.359494][ T5741] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 674.386460][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.387393][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.387694][T11018] bridge_slave_0: entered allmulticast mode [ 674.410869][T11018] bridge_slave_0: entered promiscuous mode [ 674.422789][T10993] hsr_slave_0: entered promiscuous mode [ 674.423952][T10993] hsr_slave_1: entered promiscuous mode [ 674.424872][T10993] debugfs: 'hsr0' already exists in 'hsr' [ 674.424894][T10993] Cannot create hsr debugfs directory [ 674.426095][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.426267][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.426752][T11018] bridge_slave_1: entered allmulticast mode [ 674.443880][T11018] bridge_slave_1: entered promiscuous mode [ 674.548112][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 674.548851][ T5741] usb 6-1: not running at top speed; connect to a high speed hub [ 674.552666][ T5741] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 674.552692][ T5741] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 674.552710][ T5741] usb 6-1: Manufacturer: syz [ 674.552723][ T5741] usb 6-1: SerialNumber: syz [ 674.802540][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.941821][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.978350][T11177] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 675.905979][ T5741] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 675.932728][ T5741] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 676.087854][ T5741] usb 6-1: USB disconnect, device number 2 [ 679.802796][T11018] team0: Port device team_slave_0 added [ 681.160231][T11018] team0: Port device team_slave_1 added [ 685.228073][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.228087][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.228105][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.826992][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.827049][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.827105][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.427346][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.610868][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.259589][ T822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 688.369775][ T3197] bridge_slave_1: left allmulticast mode [ 688.369799][ T3197] bridge_slave_1: left promiscuous mode [ 688.369969][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.280335][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 689.289960][ T822] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 689.289988][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.290006][ T822] usb 4-1: Product: syz [ 689.290020][ T822] usb 4-1: Manufacturer: syz [ 689.290033][ T822] usb 4-1: SerialNumber: syz [ 689.391310][ T822] usb 4-1: config 0 descriptor?? [ 689.425319][ T3197] bridge_slave_0: left allmulticast mode [ 689.425353][ T3197] bridge_slave_0: left promiscuous mode [ 689.425609][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.606293][ T822] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 689.606314][ T822] 00 00 00 00 00 00 00 00 [ 689.607780][ T822] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 690.184429][ T822] usb 4-1: USB disconnect, device number 5 [ 690.201978][ T3197] bridge_slave_1: left allmulticast mode [ 690.202011][ T3197] bridge_slave_1: left promiscuous mode [ 690.202255][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.350575][ T3197] bridge_slave_0: left allmulticast mode [ 690.350598][ T3197] bridge_slave_0: left promiscuous mode [ 690.350746][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.384721][ T3197] pimreg3: left allmulticast mode [ 693.104654][T11255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1384'. [ 695.240592][T11264] input: syz1 as /devices/virtual/input/input21 [ 699.803642][T11278] input: syz1 as /devices/virtual/input/input22 [ 701.021000][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.251665][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.148837][ T3197] bond0 (unregistering): Released all slaves [ 703.773575][T11297] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 704.807344][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.513555][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.543681][ T3197] bond0 (unregistering): Released all slaves [ 706.565343][ T3197] bond1 (unregistering): Released all slaves [ 706.579635][ T3197] bond2 (unregistering): Released all slaves [ 706.609599][ T5603] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 706.660184][ T3197] bond3 (unregistering): Released all slaves [ 706.779554][ T5603] usb 6-1: Using ep0 maxpacket: 32 [ 706.802971][ T5603] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 706.803001][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.803020][ T5603] usb 6-1: Product: syz [ 706.803033][ T5603] usb 6-1: Manufacturer: syz [ 706.803046][ T5603] usb 6-1: SerialNumber: syz [ 706.894222][ T5603] usb 6-1: config 0 descriptor?? [ 707.131541][T11018] hsr_slave_0: entered promiscuous mode [ 707.150213][T11018] hsr_slave_1: entered promiscuous mode [ 707.151626][T11018] debugfs: 'hsr0' already exists in 'hsr' [ 707.151648][T11018] Cannot create hsr debugfs directory [ 707.176967][ T5603] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 707.176986][ T5603] 00 00 00 00 00 00 00 00 [ 707.177068][ T5603] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 707.428790][ T5707] usb 6-1: USB disconnect, device number 3 [ 710.253379][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.353857][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.385096][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.416281][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.494688][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.092939][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1408'. [ 712.107278][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1408'. [ 712.701240][ T5614] Bluetooth: hci5: command tx timeout [ 714.488233][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 714.665318][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 714.673036][T11375] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1411'. [ 714.708911][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 714.719011][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 714.720996][ T5600] Bluetooth: hci5: command tx timeout [ 714.732173][T11377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 714.733136][T11377] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 715.129552][ T5707] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 715.162813][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 715.298147][ T5707] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 715.298176][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.298200][ T5707] usb 6-1: Product: syz [ 715.298213][ T5707] usb 6-1: Manufacturer: syz [ 715.298227][ T5707] usb 6-1: SerialNumber: syz [ 715.757824][ T5707] usb 6-1: config 0 descriptor?? [ 715.989847][ T5707] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 716.590810][T11403] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 716.821474][ T5614] Bluetooth: hci5: command tx timeout [ 716.936807][ T5614] Bluetooth: hci6: command tx timeout [ 717.141478][ T5707] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 717.196084][ T5707] usb 6-1: USB disconnect, device number 4 [ 719.027666][ T5614] Bluetooth: hci5: command tx timeout [ 719.027792][ T5614] Bluetooth: hci6: command tx timeout [ 719.127155][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 721.039467][T11377] Bluetooth: hci6: command tx timeout [ 721.039562][ T5707] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 721.212618][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 721.214413][ T5707] usb 4-1: not running at top speed; connect to a high speed hub [ 721.239574][ T5707] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 721.239603][ T5707] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 721.239621][ T5707] usb 4-1: Manufacturer: syz [ 721.239635][ T5707] usb 4-1: SerialNumber: syz [ 721.643821][ T5707] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 721.907311][ T5707] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 721.982849][T11462] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 721.982900][T11462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 722.056292][ T5707] usb 4-1: USB disconnect, device number 6 [ 722.174152][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 722.482303][T11464] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 723.616586][T11377] Bluetooth: hci6: command tx timeout [ 723.950753][T11480] netlink: 'syz.5.1428': attribute type 2 has an invalid length. [ 723.950835][T11480] netlink: 'syz.5.1428': attribute type 1 has an invalid length. [ 723.984084][T11480] Device name cannot be null; rc = [-22] [ 728.423714][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 730.645052][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.645263][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.645505][T11339] bridge_slave_0: entered allmulticast mode [ 730.675701][T11339] bridge_slave_0: entered promiscuous mode [ 730.807792][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.807909][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.808145][T11339] bridge_slave_1: entered allmulticast mode [ 730.811018][T11339] bridge_slave_1: entered promiscuous mode [ 730.954274][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.190573][T11537] overlayfs: missing 'lowerdir' [ 731.266326][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.527948][T11339] team0: Port device team_slave_0 added [ 731.557791][T11339] team0: Port device team_slave_1 added [ 731.619565][ T5603] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 731.626231][ T3197] hsr_slave_0: left promiscuous mode [ 731.669560][ T3197] hsr_slave_1: left promiscuous mode [ 731.670197][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.720116][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.263991][ T5603] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 732.264021][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.264039][ T5603] usb 2-1: Product: syz [ 732.264053][ T5603] usb 2-1: Manufacturer: syz [ 732.264066][ T5603] usb 2-1: SerialNumber: syz [ 732.322692][ T5603] usb 2-1: config 0 descriptor?? [ 732.470696][ T3197] hsr_slave_0: left promiscuous mode [ 732.511031][ T3197] hsr_slave_1: left promiscuous mode [ 732.512549][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.516032][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.543149][ T5603] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 732.582631][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.582661][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.861407][ T3197] veth1_macvtap: left promiscuous mode [ 732.871736][ T3197] veth0_macvtap: left promiscuous mode [ 732.872287][ T3197] veth1_vlan: left promiscuous mode [ 732.885075][ T3197] veth0_vlan: left promiscuous mode [ 733.472444][T11559] syz.5.1445 (11559) used greatest stack depth: 18976 bytes left [ 733.556480][ T5603] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 733.593952][ T5603] usb 2-1: USB disconnect, device number 4 [ 733.851805][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 735.076969][T11574] input: syz1 as /devices/virtual/input/input23 [ 735.103047][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 737.626235][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 737.741029][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 738.462253][T11607] overlayfs: missing 'workdir' [ 739.912695][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.912710][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.912732][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.913776][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.913960][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.914199][T11369] bridge_slave_0: entered allmulticast mode [ 739.918613][T11369] bridge_slave_0: entered promiscuous mode [ 739.923210][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.923224][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.923246][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.087477][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.087610][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.087783][T11369] bridge_slave_1: entered allmulticast mode [ 740.090616][T11369] bridge_slave_1: entered promiscuous mode [ 740.233282][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.311904][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.465551][T11339] hsr_slave_0: entered promiscuous mode [ 740.466955][T11339] hsr_slave_1: entered promiscuous mode [ 740.539003][T11369] team0: Port device team_slave_0 added [ 740.564983][T11369] team0: Port device team_slave_1 added [ 744.070660][T11642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.877378][T11646] overlayfs: missing 'lowerdir' [ 744.901873][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.901889][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.901914][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.961447][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.961464][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.961491][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.302515][T11369] hsr_slave_0: entered promiscuous mode [ 745.303688][T11369] hsr_slave_1: entered promiscuous mode [ 745.304481][T11369] debugfs: 'hsr0' already exists in 'hsr' [ 745.304502][T11369] Cannot create hsr debugfs directory [ 747.063440][T11672] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 747.287932][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.288132][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.009516][ T199] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 748.167420][ T199] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 748.167450][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.167469][ T199] usb 4-1: Product: syz [ 748.167482][ T199] usb 4-1: Manufacturer: syz [ 748.167496][ T199] usb 4-1: SerialNumber: syz [ 748.211653][ T199] usb 4-1: config 0 descriptor?? [ 748.439279][ T199] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 749.066196][ T199] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 749.139565][ T199] usb 4-1: USB disconnect, device number 7 [ 749.538386][T11691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.995271][T11723] netlink: 'syz.3.1485': attribute type 2 has an invalid length. [ 753.995311][T11723] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 754.004756][T11723] Device name cannot be null; rc = [-22] [ 755.662689][T11730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.569552][ T5707] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 756.854335][ T5707] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 756.854380][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.854399][ T5707] usb 4-1: Product: syz [ 756.854425][ T5707] usb 4-1: Manufacturer: syz [ 756.854439][ T5707] usb 4-1: SerialNumber: syz [ 757.043602][ T5707] usb 4-1: config 0 descriptor?? [ 757.274815][ T5707] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 758.084067][ T5707] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 758.121713][ T5707] usb 4-1: USB disconnect, device number 8 [ 759.626788][ T3197] bridge_slave_1: left allmulticast mode [ 759.626822][ T3197] bridge_slave_1: left promiscuous mode [ 759.627067][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.782755][ T3197] bridge_slave_0: left allmulticast mode [ 759.782788][ T3197] bridge_slave_0: left promiscuous mode [ 759.783373][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.162050][ T3197] bridge_slave_1: left allmulticast mode [ 761.162085][ T3197] bridge_slave_1: left promiscuous mode [ 761.162322][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.191711][T11783] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 761.339633][T11785] netlink: 'syz.3.1495': attribute type 2 has an invalid length. [ 761.339692][T11785] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 761.347405][T11785] Device name cannot be null; rc = [-22] [ 761.645113][ T3197] bridge_slave_0: left allmulticast mode [ 761.645158][ T3197] bridge_slave_0: left promiscuous mode [ 761.646012][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.268480][T11796] input: syz1 as /devices/virtual/input/input26 [ 764.628531][T11739] udevd[11739]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 764.788451][T11739] udevd[11739]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 768.493501][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 768.722236][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.680433][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.859917][ T3197] bond0 (unregistering): Released all slaves [ 772.954128][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.023531][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.025327][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.026333][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.027256][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 773.160121][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.280191][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.340904][ T3197] bond0 (unregistering): Released all slaves [ 774.919535][ T3197] hsr_slave_0: left promiscuous mode [ 775.120607][ T3197] hsr_slave_1: left promiscuous mode [ 775.121569][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.125100][T11377] Bluetooth: hci0: command tx timeout [ 777.115557][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.135422][ T5614] Bluetooth: hci0: command tx timeout [ 778.255785][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 778.310797][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 778.340169][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 778.341343][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 778.342092][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 778.836499][T11876] input: syz1 as /devices/virtual/input/input29 [ 780.159651][T11377] Bluetooth: hci0: command tx timeout [ 780.479525][T11377] Bluetooth: hci3: command tx timeout [ 780.613519][ T3197] hsr_slave_0: left promiscuous mode [ 780.652066][ T3197] hsr_slave_1: left promiscuous mode [ 780.652808][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.704796][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.239502][T11377] Bluetooth: hci0: command tx timeout [ 782.559551][T11377] Bluetooth: hci3: command tx timeout [ 782.791011][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 782.900110][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 784.652100][T11377] Bluetooth: hci3: command tx timeout [ 786.092568][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 786.370878][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 787.202731][T11377] Bluetooth: hci3: command tx timeout [ 787.319848][T11923] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1525'. [ 787.439539][T11925] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 788.927658][T11947] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 793.139490][ T822] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 793.478348][ T822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 793.478379][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.478407][ T822] usb 2-1: Product: syz [ 793.478421][ T822] usb 2-1: Manufacturer: syz [ 793.478435][ T822] usb 2-1: SerialNumber: syz [ 794.137612][ T822] usb 2-1: config 0 descriptor?? [ 794.385983][ T822] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 796.877201][T11838] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.877366][T11838] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.877562][T11838] bridge_slave_0: entered allmulticast mode [ 796.880805][T11838] bridge_slave_0: entered promiscuous mode [ 797.848591][T11838] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.848735][T11838] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.848910][T11838] bridge_slave_1: entered allmulticast mode [ 797.851752][T11838] bridge_slave_1: entered promiscuous mode [ 799.949198][ T822] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 800.370988][ T822] usb 2-1: USB disconnect, device number 5 [ 800.596782][T12009] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 800.684422][T11838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.177638][T11838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.188729][T11857] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.188797][T11857] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.188969][T11857] bridge_slave_0: entered allmulticast mode [ 801.262380][T11857] bridge_slave_0: entered promiscuous mode [ 802.133087][T11857] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.133547][T11857] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.134322][T11857] bridge_slave_1: entered allmulticast mode [ 802.180210][T11857] bridge_slave_1: entered promiscuous mode [ 804.538425][T11838] team0: Port device team_slave_0 added [ 804.573268][T11838] team0: Port device team_slave_1 added [ 804.590676][T11857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.675079][T11857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.808403][T11838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.808420][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.808447][T11838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.881899][T11838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.881916][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.881944][T11838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.887411][T11857] team0: Port device team_slave_0 added [ 806.103595][T11857] team0: Port device team_slave_1 added [ 806.328299][ T5723] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 806.968745][T11857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.968756][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.968770][T11857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.059477][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 807.063732][ T5723] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 807.063748][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.063758][ T5723] usb 6-1: Product: syz [ 807.063766][ T5723] usb 6-1: Manufacturer: syz [ 807.063773][ T5723] usb 6-1: SerialNumber: syz [ 807.077425][T11857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.077440][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.077466][T11857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.092008][ T5723] usb 6-1: config 0 descriptor?? [ 807.118784][T11838] hsr_slave_0: entered promiscuous mode [ 807.130765][T11838] hsr_slave_1: entered promiscuous mode [ 807.131676][T11838] debugfs: 'hsr0' already exists in 'hsr' [ 807.131824][T11838] Cannot create hsr debugfs directory [ 807.320866][ T5723] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 807.320887][ T5723] 00 00 00 00 00 00 00 00 [ 807.320959][ T5723] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 807.331823][T12051] Line length is too long: Should be less than 4094 [ 807.743391][ T5723] usb 6-1: USB disconnect, device number 5 [ 808.722731][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.722794][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.766823][T11857] hsr_slave_0: entered promiscuous mode [ 808.768163][T11857] hsr_slave_1: entered promiscuous mode [ 808.769141][T11857] debugfs: 'hsr0' already exists in 'hsr' [ 808.769163][T11857] Cannot create hsr debugfs directory [ 812.223585][T12074] input: syz1 as /devices/virtual/input/input30 [ 813.479295][T11377] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 815.058539][T12089] input: syz1 as /devices/virtual/input/input31 [ 815.058701][T12089] input: failed to attach handler leds to device input31, error: -6 [ 817.534042][T11377] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 817.539280][T11377] Bluetooth: hci4: Injecting HCI hardware error event [ 817.564350][T11377] Bluetooth: hci4: hardware error 0x00 [ 818.444116][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 818.709002][ T5741] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 819.471107][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 819.473179][ T5741] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 819.473211][ T5741] usb 4-1: config 0 has no interface number 0 [ 819.473254][ T5741] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.473276][ T5741] usb 4-1: config 0 interface 89 has no altsetting 0 [ 819.537474][ T5741] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 819.537506][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.537526][ T5741] usb 4-1: Product: syz [ 819.537539][ T5741] usb 4-1: Manufacturer: syz [ 819.537553][ T5741] usb 4-1: SerialNumber: syz [ 819.600483][ T5741] usb 4-1: config 0 descriptor?? [ 819.627772][ T5741] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 819.627878][ T5741] em28xx 4-1:0.89: Video interface 89 found: [ 820.745788][T11377] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 821.019740][ T3197] bridge_slave_1: left allmulticast mode [ 821.019865][ T3197] bridge_slave_1: left promiscuous mode [ 821.020353][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.129141][ T5741] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 822.320896][ T3197] bridge_slave_0: left allmulticast mode [ 822.320930][ T3197] bridge_slave_0: left promiscuous mode [ 822.321184][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.921459][T12129] input: syz1 as /devices/virtual/input/input32 [ 822.921599][T12129] input: failed to attach handler leds to device input32, error: -6 [ 823.654483][ T5741] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 823.654514][ T5741] em28xx 4-1:0.89: board has no eeprom [ 823.999542][ T5741] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 823.999710][ T5741] em28xx 4-1:0.89: analog set to bulk mode. [ 824.002270][ T10] em28xx 4-1:0.89: Registering V4L2 extension [ 824.049172][ T5741] usb 4-1: USB disconnect, device number 9 [ 824.146542][ T5741] em28xx 4-1:0.89: Disconnecting em28xx [ 825.754655][ T10] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 825.754681][ T10] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 825.754695][ T10] em28xx 4-1:0.89: No AC97 audio processor [ 825.810551][ T10] usb 4-1: Decoder not found [ 825.810570][ T10] em28xx 4-1:0.89: failed to create media graph [ 825.810632][ T10] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 825.846863][T12143] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1582'. [ 825.958162][ T10] em28xx 4-1:0.89: Registering snapshot button... [ 826.080946][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input33 [ 826.387123][ T10] em28xx 4-1:0.89: Remote control support is not available for this card. [ 826.387373][ T5741] em28xx 4-1:0.89: Closing input extension [ 826.387481][ T5741] em28xx 4-1:0.89: Deregistering snapshot button [ 827.121930][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.171232][ T5741] em28xx 4-1:0.89: Freeing device [ 827.316486][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.155282][ T3197] bond0 (unregistering): Released all slaves [ 831.258477][T12176] syz.1.1590 uses obsolete (PF_INET,SOCK_PACKET) [ 832.633005][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 832.695850][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 832.697704][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 832.716543][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 832.722649][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 832.748728][ T3197] hsr_slave_0: left promiscuous mode [ 832.820902][ T3197] hsr_slave_1: left promiscuous mode [ 832.821578][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.867173][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.259547][ T5603] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 833.361292][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 833.410162][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 833.433881][ T5603] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 833.433911][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.433929][ T5603] usb 4-1: Product: syz [ 833.433939][ T5603] usb 4-1: Manufacturer: syz [ 833.433946][ T5603] usb 4-1: SerialNumber: syz [ 833.493450][ T5603] usb 4-1: config 0 descriptor?? [ 833.707744][ T5603] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 834.046047][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 834.807755][ T5614] Bluetooth: hci5: command tx timeout [ 834.875112][ T5603] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 834.888766][ T5603] usb 4-1: USB disconnect, device number 10 [ 835.063303][T12080] udevd[12080]: setting owner of /dev/bus/usb/004/010 to uid=0, gid=0 failed: No such file or directory [ 836.469876][ T37] audit: type=1800 audit(1785591134.078:2): pid=12234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1596" name="pnp_string" dev="configfs" ino=31357 res=0 errno=0 [ 836.524586][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 836.672286][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 836.674795][ T10] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 836.674820][ T10] usb 6-1: config 0 has no interface number 0 [ 836.674862][ T10] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.674883][ T10] usb 6-1: config 0 interface 89 has no altsetting 0 [ 836.725393][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 836.725422][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.725441][ T10] usb 6-1: Product: syz [ 836.725456][ T10] usb 6-1: Manufacturer: syz [ 836.725469][ T10] usb 6-1: SerialNumber: syz [ 836.799587][ T10] usb 6-1: config 0 descriptor?? [ 836.817145][ T10] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 836.817180][ T10] em28xx 6-1:0.89: Video interface 89 found: [ 836.839597][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14 [ 836.880778][ T5614] Bluetooth: hci5: command tx timeout [ 837.162817][T11377] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 837.193704][T11377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 837.194995][T11377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 837.199299][T11377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 837.201639][T11377] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 838.079848][ T10] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 838.969544][ T5614] Bluetooth: hci5: command tx timeout [ 839.839495][ T5614] Bluetooth: hci6: command tx timeout [ 839.942427][ T10] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 839.942459][ T10] em28xx 6-1:0.89: board has no eeprom [ 840.098182][ T10] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 840.098210][ T10] em28xx 6-1:0.89: analog set to bulk mode. [ 840.125843][ T5603] em28xx 6-1:0.89: Registering V4L2 extension [ 840.144475][ T10] usb 6-1: USB disconnect, device number 6 [ 840.163755][ T10] em28xx 6-1:0.89: Disconnecting em28xx [ 840.286715][T12268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.109984][ T5603] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 841.110009][ T5603] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 841.110022][ T5603] em28xx 6-1:0.89: No AC97 audio processor [ 841.114344][ T5614] Bluetooth: hci5: command tx timeout [ 841.256792][ T5603] usb 6-1: Decoder not found [ 841.256812][ T5603] em28xx 6-1:0.89: failed to create media graph [ 841.256842][ T5603] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 841.280959][ T5603] em28xx 6-1:0.89: Registering snapshot button... [ 841.283486][ T5603] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input34 [ 841.309777][ T5603] em28xx 6-1:0.89: Remote control support is not available for this card. [ 841.309871][ T10] em28xx 6-1:0.89: Closing input extension [ 841.309909][ T10] em28xx 6-1:0.89: Deregistering snapshot button [ 841.975470][ T5614] Bluetooth: hci6: command tx timeout [ 842.474129][T12277] netlink: 'syz.1.1602': attribute type 2 has an invalid length. [ 842.474144][T12277] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 842.474539][T12277] Device name cannot be null; rc = [-22] [ 842.918267][ T3197] bridge_slave_1: left allmulticast mode [ 842.918303][ T3197] bridge_slave_1: left promiscuous mode [ 843.576410][ T10] em28xx 6-1:0.89: Freeing device [ 843.718863][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.883653][ T3197] bridge_slave_0: left allmulticast mode [ 843.883687][ T3197] bridge_slave_0: left promiscuous mode [ 843.904757][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.111775][ T5614] Bluetooth: hci6: command tx timeout [ 845.554112][T12310] netlink: 'syz.5.1612': attribute type 1 has an invalid length. [ 845.812544][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.910083][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.991297][ T3197] bond0 (unregistering): Released all slaves [ 846.169559][ T5614] Bluetooth: hci6: command tx timeout [ 846.448031][T12310] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 848.265960][T12333] netlink: 'syz.3.1616': attribute type 2 has an invalid length. [ 848.265976][T12333] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 848.269343][T12333] Device name cannot be null; rc = [-22] [ 848.760032][ T3197] hsr_slave_0: left promiscuous mode [ 848.799853][ T3197] hsr_slave_1: left promiscuous mode [ 848.819706][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.860573][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.252916][T12366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 851.253055][T12366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 851.290706][T12366] vhci_hcd vhci_hcd.0: Device attached [ 851.452901][T12367] vhci_hcd: connection closed [ 851.863350][ T4821] vhci_hcd vhci_hcd.3: stop threads [ 851.864354][ T4821] vhci_hcd vhci_hcd.3: release socket [ 851.864574][ T4821] vhci_hcd vhci_hcd.3: disconnect device [ 852.345044][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 852.643914][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 853.206971][T12385] netlink: 'syz.5.1630': attribute type 2 has an invalid length. [ 853.206985][T12385] netlink: 'syz.5.1630': attribute type 1 has an invalid length. [ 853.210174][T12385] Device name cannot be null; rc = [-22] [ 854.960054][T12397] input: syz1 as /devices/virtual/input/input35 [ 856.060627][T12420] netlink: 'syz.3.1640': attribute type 2 has an invalid length. [ 856.060641][T12420] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 856.061110][T12420] Device name cannot be null; rc = [-22] [ 856.749556][ T5724] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 856.757355][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.757552][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.757729][T12185] bridge_slave_0: entered allmulticast mode [ 856.760375][T12185] bridge_slave_0: entered promiscuous mode [ 856.843787][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.843931][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.844137][T12185] bridge_slave_1: entered allmulticast mode [ 856.846698][T12185] bridge_slave_1: entered promiscuous mode [ 856.969467][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 856.974376][ T5724] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 856.974401][ T5724] usb 2-1: config 0 has no interface number 0 [ 856.974445][ T5724] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.974467][ T5724] usb 2-1: config 0 interface 89 has no altsetting 0 [ 856.976893][ T5724] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 856.976920][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.976939][ T5724] usb 2-1: Product: syz [ 856.976952][ T5724] usb 2-1: Manufacturer: syz [ 856.976966][ T5724] usb 2-1: SerialNumber: syz [ 857.113490][ T5724] usb 2-1: config 0 descriptor?? [ 857.180411][ T5724] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 857.180446][ T5724] em28xx 2-1:0.89: Video interface 89 found: [ 857.334426][T12423] syzkaller1: entered promiscuous mode [ 857.334451][T12423] syzkaller1: entered allmulticast mode [ 857.771387][ T5724] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 857.800606][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.847673][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.985435][T12185] team0: Port device team_slave_0 added [ 858.071098][T12185] team0: Port device team_slave_1 added [ 858.719724][ T3197] bridge_slave_1: left allmulticast mode [ 858.719761][ T3197] bridge_slave_1: left promiscuous mode [ 858.719983][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.354638][ T3197] bridge_slave_0: left allmulticast mode [ 859.354669][ T3197] bridge_slave_0: left promiscuous mode [ 859.354871][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.375906][ T5724] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 859.375935][ T5724] em28xx 2-1:0.89: board has no eeprom [ 859.429656][ T5724] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 859.429685][ T5724] em28xx 2-1:0.89: analog set to bulk mode. [ 859.430124][ T5707] em28xx 2-1:0.89: Registering V4L2 extension [ 859.493441][ T5724] usb 2-1: USB disconnect, device number 6 [ 859.568637][ T5724] em28xx 2-1:0.89: Disconnecting em28xx [ 859.578533][ T5707] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 859.578554][ T5707] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 859.578566][ T5707] em28xx 2-1:0.89: No AC97 audio processor [ 859.600673][ T5707] usb 2-1: Decoder not found [ 859.600691][ T5707] em28xx 2-1:0.89: failed to create media graph [ 859.600717][ T5707] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 859.766463][ T5707] em28xx 2-1:0.89: Registering snapshot button... [ 859.770141][ T5707] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input36 [ 859.776235][ T5707] em28xx 2-1:0.89: Remote control support is not available for this card. [ 859.776322][ T5724] em28xx 2-1:0.89: Closing input extension [ 859.776343][ T5724] em28xx 2-1:0.89: Deregistering snapshot button [ 860.919336][ T5724] em28xx 2-1:0.89: Freeing device [ 862.310360][T12474] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 862.560489][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.680218][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.761001][ T3197] bond0 (unregistering): Released all slaves [ 863.039222][T12474] bond3: entered promiscuous mode [ 863.058212][T12474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 863.105203][T12476] bond3: (slave bridge3): making interface the new active one [ 863.105229][T12476] bridge3: entered promiscuous mode [ 863.106186][T12476] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 863.298754][T12499] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 863.298767][T12499] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 863.299932][T12499] Device name cannot be null; rc = [-22] [ 863.326946][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.326958][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.326973][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.379556][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.379631][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.379658][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.622082][ T3197] hsr_slave_0: left promiscuous mode [ 863.668314][ T3197] hsr_slave_1: left promiscuous mode [ 863.669272][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.726174][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.904430][T12517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1667'. [ 867.035713][T12545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1672'. [ 869.735793][T12558] input: syz1 as /devices/virtual/input/input37 [ 869.981604][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 870.060417][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 870.165217][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.165275][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.344799][T12185] hsr_slave_0: entered promiscuous mode [ 873.347831][T12185] hsr_slave_1: entered promiscuous mode [ 873.485326][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 873.651543][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 873.651573][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.719690][ T10] usb 2-1: config 0 descriptor?? [ 875.205610][ T10] usb 2-1: Cannot set autoneg [ 875.206039][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 875.242494][ T10] usb 2-1: USB disconnect, device number 7 [ 876.583672][T12622] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 877.034041][T12631] netlink: 'syz.5.1687': attribute type 1 has an invalid length. [ 877.186553][T12631] bond2: entered promiscuous mode [ 877.187170][T12631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 878.311465][ T3197] bridge_slave_1: left allmulticast mode [ 878.311501][ T3197] bridge_slave_1: left promiscuous mode [ 878.311762][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.452642][ T3197] bridge_slave_0: left allmulticast mode [ 878.452675][ T3197] bridge_slave_0: left promiscuous mode [ 878.452931][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.930045][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.050405][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.116662][ T3197] bond0 (unregistering): Released all slaves [ 879.282951][T12637] bond2: (slave bridge2): making interface the new active one [ 879.282977][T12637] bridge2: entered promiscuous mode [ 879.306447][T12637] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 879.396210][T12244] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.396328][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.396545][T12244] bridge_slave_0: entered allmulticast mode [ 879.427910][T12244] bridge_slave_0: entered promiscuous mode [ 879.526314][T12244] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.526435][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.526622][T12244] bridge_slave_1: entered allmulticast mode [ 879.534316][T12244] bridge_slave_1: entered promiscuous mode [ 883.440111][T12659] netlink: 'syz.5.1693': attribute type 1 has an invalid length. [ 883.565388][ T3197] hsr_slave_0: left promiscuous mode [ 883.601451][ T3197] hsr_slave_1: left promiscuous mode [ 883.602415][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.640378][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.893484][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 884.932423][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 885.119273][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.121116][T12659] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 885.390037][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.740979][ T5740] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 886.864568][ T5740] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 886.864597][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.868112][ T5740] usb 6-1: config 0 descriptor?? [ 888.597262][T12244] team0: Port device team_slave_0 added [ 888.649326][T12244] team0: Port device team_slave_1 added [ 888.788617][ T5740] usb 6-1: Cannot set autoneg [ 888.788883][ T5740] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 888.951508][ T5740] usb 6-1: USB disconnect, device number 7 [ 889.430698][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.430716][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.430742][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.438881][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.438898][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.438923][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.826477][T12697] input: syz1 as /devices/virtual/input/input38 [ 890.832511][T12244] hsr_slave_0: entered promiscuous mode [ 890.833265][T12244] hsr_slave_1: entered promiscuous mode [ 890.833769][T12244] debugfs: 'hsr0' already exists in 'hsr' [ 890.833793][T12244] Cannot create hsr debugfs directory [ 890.833993][T12185] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 890.915694][T12185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.786948][T12244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 893.065573][T12721] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 894.317340][T12244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.336595][T12244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 894.412381][T11377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.443117][T11377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.446425][T11377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 894.456284][T11377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 894.457332][T11377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 894.598562][T12244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.609819][T12244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 894.633059][T12727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1708'. [ 894.657618][T12244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.659221][T12244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 894.662575][T12727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1708'. [ 894.745342][T12244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.746145][T12729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1708'. [ 896.100771][T12244] kthread_run failed with err -4 [ 896.559534][T11377] Bluetooth: hci0: command tx timeout [ 897.262787][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 897.291088][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 897.314215][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 897.345959][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 897.347083][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 897.366215][T12754] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 897.373493][ T5707] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 897.571839][ T5707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 897.572292][ T5707] usb 2-1: not running at top speed; connect to a high speed hub [ 897.573177][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.573190][ T5707] usb 2-1: config 0 has no interfaces? [ 897.575276][ T5707] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 897.575292][ T5707] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 897.575302][ T5707] usb 2-1: Manufacturer: syz [ 897.575313][ T5707] usb 2-1: SerialNumber: syz [ 897.603646][ T5707] usb 2-1: config 0 descriptor?? [ 897.974381][ T5723] usb 2-1: USB disconnect, device number 8 [ 898.649528][ T5614] Bluetooth: hci0: command tx timeout [ 898.904203][T12773] input: syz1 as /devices/virtual/input/input39 [ 899.599640][ T5614] Bluetooth: hci3: command tx timeout [ 900.962844][ T5614] Bluetooth: hci0: command tx timeout [ 901.133108][ T5741] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 901.414456][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 901.415185][ T5741] usb 6-1: not running at top speed; connect to a high speed hub [ 901.438499][ T5741] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 901.438525][ T5741] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 901.470127][ T5741] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 901.470156][ T5741] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 901.470175][ T5741] usb 6-1: Manufacturer: syz [ 901.470189][ T5741] usb 6-1: SerialNumber: syz [ 902.090518][ T5614] Bluetooth: hci3: command tx timeout [ 902.346554][ T5741] usb 6-1: USB disconnect, device number 8 [ 902.511452][T12799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 902.560989][T12801] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 902.722454][T12802] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 902.766925][T12801] bond3: entered promiscuous mode [ 902.767260][T12801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.805571][T12805] bond3: (slave bridge3): making interface the new active one [ 902.805595][T12805] bridge3: entered promiscuous mode [ 902.806527][T12805] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 902.839146][T12804] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 903.039542][ T5614] Bluetooth: hci0: command tx timeout [ 903.041331][T12723] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.041581][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.041772][T12723] bridge_slave_0: entered allmulticast mode [ 903.044292][T12723] bridge_slave_0: entered promiscuous mode [ 903.057844][T12723] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.058043][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.058222][T12723] bridge_slave_1: entered allmulticast mode [ 903.062130][T12723] bridge_slave_1: entered promiscuous mode [ 903.844413][T12822] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 904.300827][ T5614] Bluetooth: hci3: command tx timeout [ 904.600033][T12723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.622937][T12723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.875005][T12723] team0: Port device team_slave_0 added [ 904.878296][T12723] team0: Port device team_slave_1 added [ 905.027600][T12723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.027614][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.027633][T12723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.034741][T12723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.034757][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.034781][T12723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.079537][ T5740] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 905.266810][ T5740] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 905.266841][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.266860][ T5740] usb 4-1: Product: syz [ 905.266873][ T5740] usb 4-1: Manufacturer: syz [ 905.266886][ T5740] usb 4-1: SerialNumber: syz [ 905.350329][ T5740] usb 4-1: config 0 descriptor?? [ 905.495449][T12723] hsr_slave_0: entered promiscuous mode [ 905.497536][T12723] hsr_slave_1: entered promiscuous mode [ 905.498940][T12723] debugfs: 'hsr0' already exists in 'hsr' [ 905.498964][T12723] Cannot create hsr debugfs directory [ 906.084741][ T5740] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 906.319816][ T5614] Bluetooth: hci3: command tx timeout [ 906.697194][T12846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.763126][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1732'. [ 906.967565][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1732'. [ 907.017203][T12851] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1732'. [ 907.029556][ T5740] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 907.072613][ T5740] usb 4-1: USB disconnect, device number 11 [ 907.762903][T12864] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 908.677168][ T1571] bridge_slave_1: left allmulticast mode [ 908.677206][ T1571] bridge_slave_1: left promiscuous mode [ 908.677467][ T1571] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.861077][ T1571] bridge_slave_0: left allmulticast mode [ 908.861115][ T1571] bridge_slave_0: left promiscuous mode [ 908.861418][ T1571] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.080888][T12878] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 913.598298][T12882] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 913.919703][ T1571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.006318][T12896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 914.052911][ T1571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.110510][ T1571] bond0 (unregistering): Released all slaves [ 914.433641][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 914.434127][T12897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 914.509533][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 914.670300][ T1571] hsr_slave_0: left promiscuous mode [ 914.709597][ T1571] hsr_slave_1: left promiscuous mode [ 914.710348][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.011912][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.860399][ T1571] team0 (unregistering): Port device team_slave_1 removed [ 915.910497][ T1571] team0 (unregistering): Port device team_slave_0 removed [ 916.094490][T12756] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.094940][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.096817][T12756] bridge_slave_0: entered allmulticast mode [ 916.103243][T12756] bridge_slave_0: entered promiscuous mode [ 918.527732][T12919] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 918.959023][T12756] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.959150][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.959345][T12756] bridge_slave_1: entered allmulticast mode [ 918.962142][T12756] bridge_slave_1: entered promiscuous mode [ 919.277496][T12927] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 919.536950][T12926] file system registered [ 919.538581][T12926] unloading [ 919.807862][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.816709][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.914468][T12756] team0: Port device team_slave_0 added [ 919.918160][T12756] team0: Port device team_slave_1 added [ 920.023501][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.023517][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.023560][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.348066][T12953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1752'. [ 922.647405][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.647424][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.647452][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.384395][T12972] netlink: 'syz.5.1756': attribute type 2 has an invalid length. [ 923.384421][T12972] netlink: 'syz.5.1756': attribute type 1 has an invalid length. [ 923.391598][T12972] Device name cannot be null; rc = [-22] [ 926.104452][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14 [ 926.201196][T12990] netlink: 'syz.1.1761': attribute type 2 has an invalid length. [ 926.201217][T12990] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 926.238277][T12990] Device name cannot be null; rc = [-22] [ 926.556877][T12756] hsr_slave_0: entered promiscuous mode [ 926.608711][T12756] hsr_slave_1: entered promiscuous mode [ 926.941596][T13000] input: syz1 as /devices/virtual/input/input40 [ 928.571710][T13008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1765'. [ 930.790600][T13019] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 930.792853][T13019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 930.793587][T13019] vhci_hcd vhci_hcd.0: Device attached [ 931.285780][T13027] netlink: 'syz.5.1768': attribute type 2 has an invalid length. [ 931.285793][T13027] netlink: 'syz.5.1768': attribute type 1 has an invalid length. [ 931.291607][T13027] Device name cannot be null; rc = [-22] [ 931.422380][ T5741] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 931.608232][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.608307][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.527140][T13020] vhci_hcd: connection reset by peer [ 932.681643][T13011] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 932.809148][ T156] vhci_hcd vhci_hcd.1: stop threads [ 932.809175][ T156] vhci_hcd vhci_hcd.1: release socket [ 933.149304][ T156] vhci_hcd vhci_hcd.1: disconnect device [ 933.873633][T13011] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 933.873698][T13011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.936613][T13011] usb 4-1: config 0 descriptor?? [ 934.152724][T13011] usb 4-1: Cannot read MAC address [ 934.152947][T13011] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 934.206639][T13011] usb 4-1: USB disconnect, device number 12 [ 934.506878][T13040] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 936.970020][ T5741] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 950.036097][T12723] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 950.163837][T12723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 950.164896][T12723] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 950.355588][T12723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 950.359060][T12723] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 950.691850][T12723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 950.725959][T12723] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 951.411013][T12723] netdevsim netdevsim7 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 951.414035][T12723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.881421][ T1571] bridge_slave_1: left allmulticast mode [ 951.881457][ T1571] bridge_slave_1: left promiscuous mode [ 951.881698][ T1571] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.231199][ T1571] bridge_slave_0: left allmulticast mode [ 952.231240][ T1571] bridge_slave_0: left promiscuous mode [ 952.231488][ T1571] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.363431][T11377] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 953.412331][T11377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 953.416376][T11377] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 953.417635][T11377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 953.418441][T11377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 955.650756][T11377] Bluetooth: hci5: command tx timeout [ 956.254849][T13229] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 956.314883][T13230] file system registered [ 956.315416][T13230] unloading [ 956.333231][ T1571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.390085][ T1571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.431784][ T1571] bond0 (unregistering): Released all slaves [ 956.457115][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 957.719577][T11377] Bluetooth: hci5: command tx timeout [ 958.209547][ T1571] hsr_slave_0: left promiscuous mode [ 958.229705][ T1571] hsr_slave_1: left promiscuous mode [ 958.230666][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.270675][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.611672][ T1571] team0 (unregistering): Port device team_slave_1 removed [ 958.660346][ T1571] team0 (unregistering): Port device team_slave_0 removed [ 959.043887][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 959.088892][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 959.310876][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 959.314004][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 959.314822][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 959.789642][T11377] Bluetooth: hci5: command tx timeout [ 961.124632][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 961.273942][ T31] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 961.273972][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.314863][ T31] usb 6-1: config 0 descriptor?? [ 961.519567][T11377] Bluetooth: hci0: command tx timeout [ 961.558850][ T31] usb 6-1: Cannot read MAC address [ 961.559116][ T31] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 961.599812][ T31] usb 6-1: USB disconnect, device number 9 [ 961.839485][T11377] Bluetooth: hci5: command tx timeout [ 963.023595][T13290] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 963.133042][T13290] bond4: entered promiscuous mode [ 963.133433][T13290] 8021q: adding VLAN 0 to HW filter on device bond4 [ 963.631205][T11377] Bluetooth: hci0: command tx timeout [ 964.306885][T13304] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 964.306924][T13304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 964.308488][T13304] vhci_hcd vhci_hcd.0: Device attached [ 964.990361][ T31] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 965.099803][T13306] vhci_hcd: connection reset by peer [ 965.126264][ T4821] vhci_hcd vhci_hcd.3: stop threads [ 965.126321][ T4821] vhci_hcd vhci_hcd.3: release socket [ 965.169041][ T4821] vhci_hcd vhci_hcd.3: disconnect device [ 965.839965][T11377] Bluetooth: hci0: command tx timeout [ 966.752861][T13319] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 966.753019][T13319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 966.791156][T13319] vhci_hcd vhci_hcd.0: Device attached [ 968.007662][T11377] Bluetooth: hci0: command tx timeout [ 968.008579][T13320] vhci_hcd: connection closed [ 968.034386][ T43] vhci_hcd vhci_hcd.3: stop threads [ 968.034456][ T43] vhci_hcd vhci_hcd.3: release socket [ 968.034624][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 970.070720][ T31] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 970.171795][T13336] netlink: 'syz.5.1826': attribute type 2 has an invalid length. [ 970.171815][T13336] netlink: 'syz.5.1826': attribute type 1 has an invalid length. [ 970.178862][T13336] Device name cannot be null; rc = [-22] [ 980.045431][T13208] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.045553][T13208] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.045767][T13208] bridge_slave_0: entered allmulticast mode [ 980.075681][T13208] bridge_slave_0: entered promiscuous mode [ 980.427358][T13208] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.634521][T13208] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.799030][T13208] bridge_slave_1: entered allmulticast mode [ 981.109001][T13208] bridge_slave_1: entered promiscuous mode [ 981.287212][T13208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.337477][T13208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.576846][T13208] team0: Port device team_slave_0 added [ 981.745434][T13208] team0: Port device team_slave_1 added [ 985.379206][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.379319][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.394798][T13246] bridge_slave_0: entered allmulticast mode [ 985.396345][T13246] bridge_slave_0: entered promiscuous mode [ 986.070818][T13208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.070834][T13208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.070848][T13208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.071542][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.071733][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.071909][T13246] bridge_slave_1: entered allmulticast mode [ 986.074610][T13246] bridge_slave_1: entered promiscuous mode [ 986.155725][T13208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.155737][T13208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.155752][T13208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.567055][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.583356][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.897964][T13208] hsr_slave_0: entered promiscuous mode [ 986.900930][T13208] hsr_slave_1: entered promiscuous mode [ 986.904062][T13208] debugfs: 'hsr0' already exists in 'hsr' [ 986.904087][T13208] Cannot create hsr debugfs directory [ 987.126737][T13476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.504641][T13246] team0: Port device team_slave_0 added [ 987.554983][T13246] team0: Port device team_slave_1 added [ 987.979651][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 988.139727][ T9] usb 6-1: device descriptor read/64, error -71 [ 988.399742][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 988.482786][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.482802][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.482824][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.523625][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.523641][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.523667][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.610360][ T9] usb 6-1: device descriptor read/64, error -71 [ 988.722585][ T9] usb usb6-port1: attempt power cycle [ 988.945663][T13246] hsr_slave_0: entered promiscuous mode [ 988.947001][T13246] hsr_slave_1: entered promiscuous mode [ 988.947928][T13246] debugfs: 'hsr0' already exists in 'hsr' [ 988.947950][T13246] Cannot create hsr debugfs directory [ 989.121450][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 989.140391][ T9] usb 6-1: device descriptor read/8, error -71 [ 989.211794][ T1571] bridge_slave_1: left allmulticast mode [ 989.211829][ T1571] bridge_slave_1: left promiscuous mode [ 989.212324][ T1571] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.180377][ T1571] bridge_slave_0: left allmulticast mode [ 990.180401][ T1571] bridge_slave_0: left promiscuous mode [ 990.180567][ T1571] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.219535][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 990.240286][ T9] usb 6-1: device descriptor read/8, error -71 [ 990.349812][ T9] usb usb6-port1: unable to enumerate USB device [ 991.782959][T13506] netlink: 'syz.3.1860': attribute type 2 has an invalid length. [ 991.783103][T13506] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 991.795919][T13506] Device name cannot be null; rc = [-22] [ 992.510744][ T1571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.610282][ T1571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.947713][T13514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.664532][ T1571] bond0 (unregistering): Released all slaves [ 994.279900][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.280042][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.749655][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 997.870773][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 998.036711][T13557] netlink: 'syz.1.1871': attribute type 2 has an invalid length. [ 998.036724][T13557] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 998.037422][T13557] Device name cannot be null; rc = [-22] [ 998.387307][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 998.387371][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.387432][ T9] usb 6-1: Product: syz [ 998.387482][ T9] usb 6-1: Manufacturer: syz [ 998.387497][ T9] usb 6-1: SerialNumber: syz [ 998.828959][ T9] usb 6-1: config 0 descriptor?? [ 999.043198][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 999.080993][ T1571] hsr_slave_0: left promiscuous mode [ 999.959541][ T1571] hsr_slave_1: left promiscuous mode [ 999.960523][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.020445][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.325501][T13567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.193774][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1001.208194][ T9] usb 6-1: USB disconnect, device number 14 [ 1001.800132][ T1571] team0 (unregistering): Port device team_slave_1 removed [ 1001.853066][ T1571] team0 (unregistering): Port device team_slave_0 removed [ 1004.288980][T13603] netlink: 'syz.3.1881': attribute type 2 has an invalid length. [ 1004.288993][T13603] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 1004.293070][T13603] Device name cannot be null; rc = [-22] [ 1005.009974][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1005.249554][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1005.256949][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.256973][ T9] usb 2-1: config 0 has no interfaces? [ 1005.259162][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1005.259189][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.259207][ T9] usb 2-1: Product: syz [ 1005.259219][ T9] usb 2-1: Manufacturer: syz [ 1005.259233][ T9] usb 2-1: SerialNumber: syz [ 1005.264883][ T9] usb 2-1: config 0 descriptor?? [ 1005.489517][T13308] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1005.686455][T13308] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1005.686487][T13308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.686506][T13308] usb 4-1: Product: syz [ 1005.686520][T13308] usb 4-1: Manufacturer: syz [ 1005.686533][T13308] usb 4-1: SerialNumber: syz [ 1005.693904][T13308] usb 4-1: config 0 descriptor?? [ 1005.931919][T13308] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1007.004008][ T9] usb 2-1: USB disconnect, device number 9 [ 1007.339167][T13308] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1007.352823][T13308] usb 4-1: USB disconnect, device number 13 [ 1008.818644][ T1571] bridge_slave_1: left allmulticast mode [ 1008.825390][ T1571] bridge_slave_1: left promiscuous mode [ 1008.989592][ T1571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.352269][ T1571] bridge_slave_0: left allmulticast mode [ 1009.352305][ T1571] bridge_slave_0: left promiscuous mode [ 1009.352551][ T1571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.312381][T13680] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1895'. [ 1010.850313][ T1571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.971457][ T1571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.052044][ T1571] bond0 (unregistering): Released all slaves [ 1012.477337][T13712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.763574][ T1571] hsr_slave_0: left promiscuous mode [ 1012.799596][ T1571] hsr_slave_1: left promiscuous mode [ 1012.800601][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.840442][ T1571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.229684][ T31] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1013.264918][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1013.296636][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1013.301348][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1013.352385][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1013.353255][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1013.535140][ T31] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1013.535169][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.535188][ T31] usb 6-1: Product: syz [ 1013.535201][ T31] usb 6-1: Manufacturer: syz [ 1013.535215][ T31] usb 6-1: SerialNumber: syz [ 1013.560446][ T31] usb 6-1: config 0 descriptor?? [ 1013.793594][ T31] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1013.900669][ T1571] team0 (unregistering): Port device team_slave_1 removed [ 1013.970688][ T1571] team0 (unregistering): Port device team_slave_0 removed [ 1014.611594][ T31] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1014.720030][T13738] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1014.804305][ T31] usb 6-1: USB disconnect, device number 15 [ 1015.471378][ T5614] Bluetooth: hci3: command tx timeout [ 1015.898292][T13746] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1908'. [ 1017.155171][T13752] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1017.530867][ T5614] Bluetooth: hci3: command tx timeout [ 1018.658642][T13770] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1018.683819][T13770] file system registered [ 1018.948846][T13770] unloading [ 1018.962820][T13772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.607473][T11377] Bluetooth: hci3: command tx timeout [ 1021.152206][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1021.203846][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1021.205274][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1021.206509][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1021.207531][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1021.409648][T13011] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1021.575393][T13011] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1021.575423][T13011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.575442][T13011] usb 6-1: Product: syz [ 1021.575454][T13011] usb 6-1: Manufacturer: syz [ 1021.575467][T13011] usb 6-1: SerialNumber: syz [ 1021.628090][T13011] usb 6-1: config 0 descriptor?? [ 1021.686782][ T5614] Bluetooth: hci3: command tx timeout [ 1022.055421][T13011] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1022.959410][T13011] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1023.422622][ T5614] Bluetooth: hci0: command tx timeout [ 1024.006270][T13011] usb 6-1: USB disconnect, device number 16 [ 1024.337948][T13801] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1918'. [ 1025.439566][ T5614] Bluetooth: hci0: command tx timeout [ 1026.137104][T13826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.559515][ T5614] Bluetooth: hci0: command tx timeout [ 1027.602632][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.602773][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.602988][T13726] bridge_slave_0: entered allmulticast mode [ 1027.606928][T13726] bridge_slave_0: entered promiscuous mode [ 1027.651624][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.651767][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.651984][T13726] bridge_slave_1: entered allmulticast mode [ 1027.697619][T13726] bridge_slave_1: entered promiscuous mode [ 1027.747459][ T5614] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1027.874195][T13726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.912400][T13726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.127137][T13726] team0: Port device team_slave_0 added [ 1028.168351][T13726] team0: Port device team_slave_1 added [ 1028.242152][T13726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.242169][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.242194][T13726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.297524][T13726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.297540][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.297567][T13726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.674700][T13841] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1029.599743][ T5614] Bluetooth: hci0: command tx timeout [ 1031.205688][T13861] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1931'. [ 1031.682122][T13726] hsr_slave_0: entered promiscuous mode [ 1031.685626][T13726] hsr_slave_1: entered promiscuous mode [ 1031.688892][T13869] fuse: Unknown parameter 'grou00000000000000000000' [ 1032.020092][T13011] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1032.189667][T13011] usb 4-1: Using ep0 maxpacket: 32 [ 1032.191461][T13011] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1032.191484][T13011] usb 4-1: config 0 has no interface number 0 [ 1032.191536][T13011] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.191557][T13011] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1032.194245][T13011] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1032.194283][T13011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.194304][T13011] usb 4-1: Product: syz [ 1032.194317][T13011] usb 4-1: Manufacturer: syz [ 1032.194343][T13011] usb 4-1: SerialNumber: syz [ 1032.257491][T13011] usb 4-1: config 0 descriptor?? [ 1032.327373][T13011] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1032.327393][T13011] em28xx 4-1:0.89: Video interface 89 found: [ 1032.476124][T13780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.476551][T13780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.477070][T13780] bridge_slave_0: entered allmulticast mode [ 1032.503127][T13780] bridge_slave_0: entered promiscuous mode [ 1032.863709][T13880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.889719][T13780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.889894][T13780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.890228][T13780] bridge_slave_1: entered allmulticast mode [ 1032.894062][T13780] bridge_slave_1: entered promiscuous mode [ 1033.061580][T13011] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1033.292927][T13886] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1033.977795][T13780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.017965][T13780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.323122][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.337468][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.397110][T13011] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1034.397140][T13011] em28xx 4-1:0.89: board has no eeprom [ 1034.466645][T13780] team0: Port device team_slave_0 added [ 1034.483147][T13011] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1034.483175][T13011] em28xx 4-1:0.89: analog set to bulk mode. [ 1034.488789][ T5740] em28xx 4-1:0.89: Registering V4L2 extension [ 1034.569073][T13011] usb 4-1: USB disconnect, device number 14 [ 1034.569655][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1034.707792][T13780] team0: Port device team_slave_1 added [ 1034.726570][T13011] em28xx 4-1:0.89: Disconnecting em28xx [ 1034.764650][ T5740] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1034.764674][ T5740] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1034.764687][ T5740] em28xx 4-1:0.89: No AC97 audio processor [ 1034.790901][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1034.794807][ T5740] usb 4-1: Decoder not found [ 1034.794823][ T5740] em28xx 4-1:0.89: failed to create media graph [ 1034.794846][ T5740] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1034.823540][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1034.832856][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.832881][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.858270][ T5740] em28xx 4-1:0.89: Registering snapshot button... [ 1034.882863][ T9] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1034.882892][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.882911][ T9] usb 6-1: Product: syz [ 1034.882925][ T9] usb 6-1: Manufacturer: syz [ 1034.882939][ T9] usb 6-1: SerialNumber: syz [ 1035.001014][ T6261] bridge_slave_1: left allmulticast mode [ 1035.001049][ T6261] bridge_slave_1: left promiscuous mode [ 1035.001294][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.083750][ T5740] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input43 [ 1035.094914][ T5740] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1035.098670][T13011] em28xx 4-1:0.89: Closing input extension [ 1035.098697][T13011] em28xx 4-1:0.89: Deregistering snapshot button [ 1035.318984][ T9] usb 6-1: unit 4 not found! [ 1035.319033][ T9] usb 6-1: unit 0 not found! [ 1035.412126][ T6261] bridge_slave_0: left allmulticast mode [ 1035.412159][ T6261] bridge_slave_0: left promiscuous mode [ 1035.412415][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.064483][T13891] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: 0 [ 1036.110848][T13891] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 1036.136219][T13891] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 1036.273928][T13899] ================================================================== [ 1036.273947][T13899] BUG: KASAN: slab-use-after-free in lookup_noperm_common+0x407/0x430 [ 1036.274124][T13899] Read of size 4 at addr ffff88803fed8a50 by task syz.5.1939/13899 [ 1036.274149][T13899] [ 1036.274172][T13899] CPU: 0 UID: 0 PID: 13899 Comm: syz.5.1939 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1036.274207][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.274226][T13899] Call Trace: [ 1036.274234][T13899] [ 1036.274243][T13899] dump_stack_lvl+0xe8/0x150 [ 1036.274333][T13899] print_address_description+0x55/0x1e0 [ 1036.274370][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.274424][T13899] print_report+0x58/0x70 [ 1036.274450][T13899] kasan_report+0x117/0x150 [ 1036.274543][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.274568][T13899] lookup_noperm_common+0x407/0x430 [ 1036.274594][T13899] simple_start_creating+0x9c/0x110 [ 1036.274666][T13899] ? __pfx_simple_start_creating+0x10/0x10 [ 1036.274690][T13899] ? rt_spin_unlock+0x163/0x200 [ 1036.274781][T13899] ? mntput+0x65/0xc0 [ 1036.274860][T13899] debugfs_start_creating+0xdb/0x1a0 [ 1036.274943][T13899] debugfs_create_dir+0x24/0x350 [ 1036.274971][T13899] i2c_device_probe+0x814/0xbf0 [ 1036.275178][T13899] ? __pfx_i2c_device_probe+0x10/0x10 [ 1036.275207][T13899] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1036.275276][T13899] ? driver_sysfs_add+0x1fe/0x210 [ 1036.275363][T13899] ? __pfx_i2c_device_probe+0x10/0x10 [ 1036.275388][T13899] really_probe+0x254/0xae0 [ 1036.275418][T13899] __driver_probe_device+0x1e8/0x360 [ 1036.275452][T13899] driver_probe_device+0x4f/0x240 [ 1036.275482][T13899] __device_attach_driver+0x270/0x410 [ 1036.275511][T13899] bus_for_each_drv+0x25b/0x2f0 [ 1036.275532][T13899] ? __pfx___device_attach_driver+0x10/0x10 [ 1036.275558][T13899] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1036.275579][T13899] ? rt_spin_unlock+0x163/0x200 [ 1036.275603][T13899] __device_attach+0x2c7/0x450 [ 1036.275629][T13899] ? __pfx___device_attach+0x10/0x10 [ 1036.275661][T13899] device_initial_probe+0xa1/0xd0 [ 1036.275689][T13899] bus_probe_device+0x12d/0x220 [ 1036.275712][T13899] device_add+0x7d7/0xb80 [ 1036.275781][T13899] i2c_new_client_device+0xa29/0x1130 [ 1036.275816][T13899] ? __pfx_i2c_new_client_device+0x10/0x10 [ 1036.275846][T13899] ? new_device_store+0x132/0x530 [ 1036.275868][T13899] new_device_store+0x24b/0x530 [ 1036.275889][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.275945][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.275973][T13899] ? __pfx_new_device_store+0x10/0x10 [ 1036.275998][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.276025][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.276054][T13899] ? sysfs_file_kobj+0x1e4/0x230 [ 1036.276083][T13899] ? sysfs_kf_write+0x166/0x260 [ 1036.276103][T13899] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1036.276120][T13899] kernfs_fop_write_iter+0x3a5/0x540 [ 1036.276158][T13899] vfs_write+0x61e/0xbb0 [ 1036.276214][T13899] ? __pfx_vfs_write+0x10/0x10 [ 1036.276239][T13899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.276265][T13899] ? lockdep_hardirqs_on+0x7a/0x110 [ 1036.276320][T13899] ? mutex_lock_nested+0x152/0x1d0 [ 1036.276339][T13899] ? fdget_pos+0x252/0x320 [ 1036.276364][T13899] ksys_write+0x156/0x270 [ 1036.276389][T13899] ? __pfx_ksys_write+0x10/0x10 [ 1036.276418][T13899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.276461][T13899] do_syscall_64+0x174/0x580 [ 1036.276513][T13899] ? trace_irq_disable+0x3b/0x140 [ 1036.276582][T13899] ? clear_bhb_loop+0x40/0x90 [ 1036.276605][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.276629][T13899] RIP: 0033:0x7f450dabe019 [ 1036.276651][T13899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.276669][T13899] RSP: 002b:00007f450bcf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1036.276692][T13899] RAX: ffffffffffffffda RBX: 00007f450dd46090 RCX: 00007f450dabe019 [ 1036.276707][T13899] RDX: 0000000000000012 RSI: 0000200000000800 RDI: 0000000000000007 [ 1036.276721][T13899] RBP: 00007f450db5500c R08: 0000000000000000 R09: 0000000000000000 [ 1036.276734][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.276745][T13899] R13: 00007f450dd46128 R14: 00007f450dd46090 R15: 00007ffd3e5df768 [ 1036.276766][T13899] [ 1036.276774][T13899] [ 1036.276778][T13899] Allocated by task 13011: [ 1036.276788][T13899] kasan_save_track+0x3e/0x80 [ 1036.276807][T13899] __kasan_slab_alloc+0x6c/0x80 [ 1036.276825][T13899] kmem_cache_alloc_lru_noprof+0x353/0x650 [ 1036.276875][T13899] __d_alloc+0x37/0x6f0 [ 1036.276954][T13899] d_alloc+0x4b/0x190 [ 1036.276973][T13899] lookup_one_qstr_excl+0xd8/0x360 [ 1036.277020][T13899] start_dirop+0x5c/0x90 [ 1036.277036][T13899] simple_start_creating+0xcc/0x110 [ 1036.277057][T13899] debugfs_start_creating+0xdb/0x1a0 [ 1036.277080][T13899] debugfs_create_dir+0x24/0x350 [ 1036.277103][T13899] i2c_register_adapter+0xc14/0x1400 [ 1036.277128][T13899] em28xx_i2c_register+0x3a4/0x1950 [ 1036.277200][T13899] em28xx_init_dev+0xa97/0x2210 [ 1036.277224][T13899] em28xx_usb_probe+0x17b2/0x2dd0 [ 1036.277248][T13899] usb_probe_interface+0x653/0xc60 [ 1036.277315][T13899] really_probe+0x254/0xae0 [ 1036.277341][T13899] __driver_probe_device+0x1e8/0x360 [ 1036.277362][T13899] driver_probe_device+0x4f/0x240 [ 1036.277384][T13899] __device_attach_driver+0x270/0x410 [ 1036.277403][T13899] bus_for_each_drv+0x25b/0x2f0 [ 1036.277416][T13899] __device_attach+0x2c7/0x450 [ 1036.277434][T13899] device_initial_probe+0xa1/0xd0 [ 1036.277457][T13899] bus_probe_device+0x12d/0x220 [ 1036.277474][T13899] device_add+0x7d7/0xb80 [ 1036.277494][T13899] usb_set_configuration+0x1ad8/0x2180 [ 1036.277514][T13899] usb_generic_driver_probe+0x8d/0x150 [ 1036.277595][T13899] usb_probe_device+0x1c3/0x3b0 [ 1036.277613][T13899] really_probe+0x254/0xae0 [ 1036.277637][T13899] __driver_probe_device+0x1e8/0x360 [ 1036.277661][T13899] driver_probe_device+0x4f/0x240 [ 1036.277683][T13899] __device_attach_driver+0x270/0x410 [ 1036.277713][T13899] bus_for_each_drv+0x25b/0x2f0 [ 1036.277733][T13899] __device_attach+0x2c7/0x450 [ 1036.277756][T13899] device_initial_probe+0xa1/0xd0 [ 1036.277781][T13899] bus_probe_device+0x12d/0x220 [ 1036.277800][T13899] device_add+0x7d7/0xb80 [ 1036.277821][T13899] usb_new_device+0x98d/0x1610 [ 1036.277901][T13899] hub_event+0x28cf/0x4cf0 [ 1036.277920][T13899] process_scheduled_works+0xa8e/0x14e0 [ 1036.278009][T13899] worker_thread+0xa47/0xfb0 [ 1036.278031][T13899] kthread+0x388/0x470 [ 1036.278080][T13899] ret_from_fork+0x514/0xb70 [ 1036.278148][T13899] ret_from_fork_asm+0x1a/0x30 [ 1036.278167][T13899] [ 1036.278172][T13899] Freed by task 20: [ 1036.278182][T13899] kasan_save_track+0x3e/0x80 [ 1036.278200][T13899] kasan_save_free_info+0x40/0x50 [ 1036.278225][T13899] __kasan_slab_free+0x5c/0x80 [ 1036.278243][T13899] kmem_cache_free+0x187/0x6c0 [ 1036.278263][T13899] rcu_cpu_kthread+0x950/0x1480 [ 1036.278321][T13899] smpboot_thread_fn+0x57c/0xa80 [ 1036.278368][T13899] kthread+0x388/0x470 [ 1036.278394][T13899] ret_from_fork+0x514/0xb70 [ 1036.278421][T13899] ret_from_fork_asm+0x1a/0x30 [ 1036.278438][T13899] [ 1036.278443][T13899] Last potentially related work creation: [ 1036.278451][T13899] kasan_save_stack+0x3e/0x60 [ 1036.278467][T13899] kasan_record_aux_stack+0xbd/0xd0 [ 1036.278492][T13899] call_rcu+0xee/0x8b0 [ 1036.278536][T13899] dentry_kill+0x4d3/0x880 [ 1036.278560][T13899] finish_dput+0x1a/0x260 [ 1036.278576][T13899] debugfs_remove+0x5b/0x70 [ 1036.278597][T13899] i2c_del_adapter+0x229/0x430 [ 1036.278620][T13899] em28xx_i2c_unregister+0x4b/0x60 [ 1036.278645][T13899] em28xx_release_resources+0x14c/0x240 [ 1036.278668][T13899] em28xx_usb_disconnect+0x19f/0x2f0 [ 1036.278693][T13899] usb_unbind_interface+0x295/0x9f0 [ 1036.278710][T13899] device_release_driver_internal+0x4f5/0x880 [ 1036.278734][T13899] bus_remove_device+0x449/0x560 [ 1036.278750][T13899] device_del+0x528/0x8f0 [ 1036.278768][T13899] usb_disable_device+0x3d4/0x8d0 [ 1036.278782][T13899] usb_disconnect+0x32d/0x990 [ 1036.278801][T13899] hub_event+0x1bb7/0x4cf0 [ 1036.278817][T13899] process_scheduled_works+0xa8e/0x14e0 [ 1036.278839][T13899] worker_thread+0xa47/0xfb0 [ 1036.278859][T13899] kthread+0x388/0x470 [ 1036.278884][T13899] ret_from_fork+0x514/0xb70 [ 1036.278909][T13899] ret_from_fork_asm+0x1a/0x30 [ 1036.278925][T13899] [ 1036.278929][T13899] The buggy address belongs to the object at ffff88803fed8a50 [ 1036.278929][T13899] which belongs to the cache dentry of size 376 [ 1036.278947][T13899] The buggy address is located 0 bytes inside of [ 1036.278947][T13899] freed 376-byte region [ffff88803fed8a50, ffff88803fed8bc8) [ 1036.278967][T13899] [ 1036.278972][T13899] The buggy address belongs to the physical page: [ 1036.278995][T13899] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3fed8 [ 1036.279013][T13899] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1036.279027][T13899] memcg:ffff88803fed9ef1 [ 1036.279035][T13899] flags: 0x80000000000040(head|node=0|zone=1) [ 1036.279057][T13899] page_type: f5(slab) [ 1036.279075][T13899] raw: 0080000000000040 ffff88801b2ba640 dead000000000100 dead000000000122 [ 1036.279092][T13899] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff88803fed9ef1 [ 1036.279111][T13899] head: 0080000000000040 ffff88801b2ba640 dead000000000100 dead000000000122 [ 1036.279129][T13899] head: 0000000000000000 0000000800120012 00000000f5000000 ffff88803fed9ef1 [ 1036.279155][T13899] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1036.279172][T13899] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 1036.279182][T13899] page dumped because: kasan: bad access detected [ 1036.279196][T13899] page_owner tracks the page as allocated [ 1036.279203][T13899] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6675, tgid 6675 (syz-executor), ts 247341867195, free_ts 0 [ 1036.279240][T13899] post_alloc_hook+0x1f9/0x250 [ 1036.279295][T13899] get_page_from_freelist+0x262a/0x26a0 [ 1036.279317][T13899] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1036.279338][T13899] allocate_slab+0x79/0x5e0 [ 1036.279385][T13899] refill_objects+0x2d8/0x350 [ 1036.279407][T13899] __pcs_replace_empty_main+0x330/0x690 [ 1036.279429][T13899] kmem_cache_alloc_lru_noprof+0x44b/0x650 [ 1036.279445][T13899] __d_alloc+0x37/0x6f0 [ 1036.279462][T13899] d_alloc+0x4b/0x190 [ 1036.279479][T13899] lookup_one_qstr_excl+0xd8/0x360 [ 1036.279499][T13899] filename_create+0x20e/0x370 [ 1036.279520][T13899] filename_mkdirat+0xd2/0x520 [ 1036.279543][T13899] __se_sys_mkdirat+0x35/0x150 [ 1036.279566][T13899] do_syscall_64+0x174/0x580 [ 1036.279588][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.279606][T13899] page_owner free stack trace missing [ 1036.279613][T13899] [ 1036.279617][T13899] Memory state around the buggy address: [ 1036.279628][T13899] ffff88803fed8900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.279641][T13899] ffff88803fed8980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.279654][T13899] >ffff88803fed8a00: 00 00 fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 1036.279663][T13899] ^ [ 1036.279675][T13899] ffff88803fed8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.279689][T13899] ffff88803fed8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.279700][T13899] ================================================================== [ 1036.302731][T13899] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1036.302753][T13899] CPU: 0 UID: 0 PID: 13899 Comm: syz.5.1939 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1036.302776][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.302790][T13899] Call Trace: [ 1036.302800][T13899] [ 1036.302809][T13899] vpanic+0x56c/0xa60 [ 1036.302834][T13899] ? __pfx_vpanic+0x10/0x10 [ 1036.302858][T13899] panic+0xc5/0xd0 [ 1036.302875][T13899] ? __pfx_panic+0x10/0x10 [ 1036.302894][T13899] ? preempt_schedule_thunk+0x16/0x40 [ 1036.302993][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.303016][T13899] ? preempt_schedule_thunk+0x16/0x40 [ 1036.303040][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.303059][T13899] check_panic_on_warn+0x89/0xb0 [ 1036.303119][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.303139][T13899] end_report+0x73/0x170 [ 1036.303161][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.303181][T13899] kasan_report+0x128/0x150 [ 1036.303203][T13899] ? lookup_noperm_common+0x407/0x430 [ 1036.303228][T13899] lookup_noperm_common+0x407/0x430 [ 1036.303251][T13899] simple_start_creating+0x9c/0x110 [ 1036.303275][T13899] ? __pfx_simple_start_creating+0x10/0x10 [ 1036.303299][T13899] ? rt_spin_unlock+0x163/0x200 [ 1036.303318][T13899] ? mntput+0x65/0xc0 [ 1036.303345][T13899] debugfs_start_creating+0xdb/0x1a0 [ 1036.303372][T13899] debugfs_create_dir+0x24/0x350 [ 1036.303398][T13899] i2c_device_probe+0x814/0xbf0 [ 1036.303427][T13899] ? __pfx_i2c_device_probe+0x10/0x10 [ 1036.303453][T13899] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1036.303474][T13899] ? driver_sysfs_add+0x1fe/0x210 [ 1036.303501][T13899] ? __pfx_i2c_device_probe+0x10/0x10 [ 1036.303525][T13899] really_probe+0x254/0xae0 [ 1036.303554][T13899] __driver_probe_device+0x1e8/0x360 [ 1036.303587][T13899] driver_probe_device+0x4f/0x240 [ 1036.303617][T13899] __device_attach_driver+0x270/0x410 [ 1036.303647][T13899] bus_for_each_drv+0x25b/0x2f0 [ 1036.303668][T13899] ? __pfx___device_attach_driver+0x10/0x10 [ 1036.303694][T13899] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1036.303715][T13899] ? rt_spin_unlock+0x163/0x200 [ 1036.303738][T13899] __device_attach+0x2c7/0x450 [ 1036.303765][T13899] ? __pfx___device_attach+0x10/0x10 [ 1036.303795][T13899] device_initial_probe+0xa1/0xd0 [ 1036.303821][T13899] bus_probe_device+0x12d/0x220 [ 1036.303843][T13899] device_add+0x7d7/0xb80 [ 1036.303868][T13899] i2c_new_client_device+0xa29/0x1130 [ 1036.303900][T13899] ? __pfx_i2c_new_client_device+0x10/0x10 [ 1036.303928][T13899] ? new_device_store+0x132/0x530 [ 1036.303950][T13899] new_device_store+0x24b/0x530 [ 1036.303969][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.303994][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.304018][T13899] ? __pfx_new_device_store+0x10/0x10 [ 1036.304039][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.304059][T13899] ? sysfs_file_kobj+0x1a/0x230 [ 1036.304084][T13899] ? sysfs_file_kobj+0x1e4/0x230 [ 1036.304108][T13899] ? sysfs_kf_write+0x166/0x260 [ 1036.304126][T13899] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1036.304140][T13899] kernfs_fop_write_iter+0x3a5/0x540 [ 1036.304169][T13899] vfs_write+0x61e/0xbb0 [ 1036.304198][T13899] ? __pfx_vfs_write+0x10/0x10 [ 1036.304233][T13899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.304263][T13899] ? lockdep_hardirqs_on+0x7a/0x110 [ 1036.304291][T13899] ? mutex_lock_nested+0x152/0x1d0 [ 1036.304310][T13899] ? fdget_pos+0x252/0x320 [ 1036.304335][T13899] ksys_write+0x156/0x270 [ 1036.304361][T13899] ? __pfx_ksys_write+0x10/0x10 [ 1036.304389][T13899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.304410][T13899] do_syscall_64+0x174/0x580 [ 1036.304434][T13899] ? trace_irq_disable+0x3b/0x140 [ 1036.304454][T13899] ? clear_bhb_loop+0x40/0x90 [ 1036.304476][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.304496][T13899] RIP: 0033:0x7f450dabe019 [ 1036.304514][T13899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.304531][T13899] RSP: 002b:00007f450bcf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1036.304554][T13899] RAX: ffffffffffffffda RBX: 00007f450dd46090 RCX: 00007f450dabe019 [ 1036.304569][T13899] RDX: 0000000000000012 RSI: 0000200000000800 RDI: 0000000000000007 [ 1036.304591][T13899] RBP: 00007f450db5500c R08: 0000000000000000 R09: 0000000000000000 [ 1036.304604][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.304617][T13899] R13: 00007f450dd46128 R14: 00007f450dd46090 R15: 00007ffd3e5df768 [ 1036.304640][T13899] [ 1036.304801][T13899] Kernel Offset: disabled