last executing test programs: 34.66476184s ago: executing program 1 (id=1064): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ptrace(0x10, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 33.526573835s ago: executing program 1 (id=1068): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 31.325091845s ago: executing program 1 (id=1071): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf2fe, 0x0, 0x1, 0x250}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, r7, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r4, 0x8aa, 0x0, 0x4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 26.333237132s ago: executing program 1 (id=1081): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x58}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) 22.122580701s ago: executing program 1 (id=1094): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 22.12160348s ago: executing program 4 (id=1095): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) 17.539110583s ago: executing program 1 (id=1105): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioperm(0x0, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x100, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c0002"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 16.113059746s ago: executing program 3 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f0000000000), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x7, 0x0, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x3, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0xfd, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x72, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0x4, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x2, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xff, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x31a8, 0x4, 0xc, 0x7, 0xb, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x1, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x3, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x5, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff83, 0xd5800000, 0x6, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x3, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x40006fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10800400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x4, 0x4}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 14.828955382s ago: executing program 2 (id=1110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) listen(r5, 0x101) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r8, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @multicast1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9, r0}, 0xc) 13.865083266s ago: executing program 2 (id=1111): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup(r3) setsockopt$rose(r4, 0x104, 0x1, &(0x7f0000000080)=0x6, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) 12.829559137s ago: executing program 2 (id=1112): setxattr$security_ima(0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) 11.671509107s ago: executing program 2 (id=1113): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4004085) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r4, 0x1) 11.564275828s ago: executing program 3 (id=1114): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x0) read$FUSE(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41800}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) 10.57689315s ago: executing program 2 (id=1115): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 10.209879468s ago: executing program 4 (id=1116): r0 = syz_open_dev$dri(&(0x7f0000002280), 0x1, 0x80002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000019c0)={0x0, 0x0, 0x0}) 9.994389666s ago: executing program 4 (id=1118): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000400)={0x0, @reserved}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x100020, 0x2, {0xffffffffffffffff}, {0xee01}, 0x8, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x1, &(0x7f0000000240)) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='./file1\x00') 9.956311727s ago: executing program 3 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 9.71668181s ago: executing program 3 (id=1120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7.389502579s ago: executing program 0 (id=1122): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = dup(r3) setsockopt$rose(r4, 0x104, 0x1, &(0x7f0000000080)=0x6, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) 6.243295644s ago: executing program 0 (id=1123): setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) 6.06816618s ago: executing program 4 (id=1124): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 5.887111911s ago: executing program 3 (id=1125): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4004085) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r4, 0x1) 5.068945098s ago: executing program 0 (id=1126): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) 4.923201217s ago: executing program 2 (id=1127): setxattr$security_ima(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000013c0)=ANY=[], 0x700, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{0x0}], 0x1) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.504233895s ago: executing program 3 (id=1128): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="080c01"], 0x0, 0x0}) 2.28481514s ago: executing program 32 (id=1105): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioperm(0x0, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x100, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c0002"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2.259216344s ago: executing program 0 (id=1130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.258596883s ago: executing program 4 (id=1131): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r4 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000340)) 2.179404347s ago: executing program 0 (id=1132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) listen(r5, 0x101) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r8, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @multicast1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9, r0}, 0xc) 100.957479ms ago: executing program 0 (id=1133): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0xddd2abeb0b6b28c5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) 0s ago: executing program 4 (id=1134): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 82.171496][ T5817] cgroup: Unknown subsys name 'net' [ 82.278899][ T5817] cgroup: Unknown subsys name 'cpuset' [ 82.287699][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.915638][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.592294][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.612137][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.620146][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.628180][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.635971][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.654535][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.664617][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.691052][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.704977][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.712675][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.803491][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.813128][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.822111][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.830500][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.838987][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.876131][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.884037][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.891711][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.927363][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.939923][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.955523][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.977141][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.992224][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.003331][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.011802][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.338050][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.365757][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.561457][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.596162][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.603437][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.611690][ T5827] bridge_slave_0: entered allmulticast mode [ 88.619403][ T5827] bridge_slave_0: entered promiscuous mode [ 88.630247][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.637520][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.645038][ T5827] bridge_slave_1: entered allmulticast mode [ 88.651948][ T5827] bridge_slave_1: entered promiscuous mode [ 88.677072][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.684215][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.691428][ T5836] bridge_slave_0: entered allmulticast mode [ 88.698577][ T5836] bridge_slave_0: entered promiscuous mode [ 88.743733][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.751014][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.758901][ T5836] bridge_slave_1: entered allmulticast mode [ 88.766679][ T5836] bridge_slave_1: entered promiscuous mode [ 88.860373][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.877612][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.911517][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.973747][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.007407][ T5827] team0: Port device team_slave_0 added [ 89.047237][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.061035][ T5827] team0: Port device team_slave_1 added [ 89.067730][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.075680][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.082818][ T5831] bridge_slave_0: entered allmulticast mode [ 89.090266][ T5831] bridge_slave_0: entered promiscuous mode [ 89.102394][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.109824][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.117272][ T5831] bridge_slave_1: entered allmulticast mode [ 89.124484][ T5831] bridge_slave_1: entered promiscuous mode [ 89.168773][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.200364][ T5836] team0: Port device team_slave_0 added [ 89.208976][ T5836] team0: Port device team_slave_1 added [ 89.221888][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.228877][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.255265][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.320005][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.327437][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.356561][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.390460][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.404514][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.414160][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.421919][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.448655][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.489815][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.497611][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.523744][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.605960][ T5831] team0: Port device team_slave_0 added [ 89.629688][ T5836] hsr_slave_0: entered promiscuous mode [ 89.636749][ T5836] hsr_slave_1: entered promiscuous mode [ 89.680775][ T5831] team0: Port device team_slave_1 added [ 89.712208][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.719608][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.727091][ T5840] bridge_slave_0: entered allmulticast mode [ 89.734027][ T5840] bridge_slave_0: entered promiscuous mode [ 89.740568][ T5139] Bluetooth: hci0: command tx timeout [ 89.744795][ T5139] Bluetooth: hci1: command tx timeout [ 89.790893][ T5827] hsr_slave_0: entered promiscuous mode [ 89.797819][ T5827] hsr_slave_1: entered promiscuous mode [ 89.803902][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.812782][ T5827] Cannot create hsr debugfs directory [ 89.818937][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.829175][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.836527][ T5840] bridge_slave_1: entered allmulticast mode [ 89.843491][ T5840] bridge_slave_1: entered promiscuous mode [ 89.850575][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.857892][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.865371][ T5838] bridge_slave_0: entered allmulticast mode [ 89.872322][ T5838] bridge_slave_0: entered promiscuous mode [ 89.880401][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.887745][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.914097][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.914733][ T5139] Bluetooth: hci2: command tx timeout [ 89.927646][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.937362][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.964434][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.003550][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.010973][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.018533][ T5838] bridge_slave_1: entered allmulticast mode [ 90.026574][ T5838] bridge_slave_1: entered promiscuous mode [ 90.054466][ T5139] Bluetooth: hci4: command tx timeout [ 90.064381][ T5139] Bluetooth: hci3: command tx timeout [ 90.127143][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.139475][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.151165][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.164600][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.190374][ T5831] hsr_slave_0: entered promiscuous mode [ 90.197161][ T5831] hsr_slave_1: entered promiscuous mode [ 90.203336][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.211151][ T5831] Cannot create hsr debugfs directory [ 90.309260][ T5838] team0: Port device team_slave_0 added [ 90.336247][ T5840] team0: Port device team_slave_0 added [ 90.356658][ T5838] team0: Port device team_slave_1 added [ 90.383412][ T5840] team0: Port device team_slave_1 added [ 90.446129][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.453174][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.479388][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.517683][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.524878][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.555284][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.578081][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.585293][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.611875][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.672661][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.679823][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.706389][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.770978][ T5840] hsr_slave_0: entered promiscuous mode [ 90.777683][ T5840] hsr_slave_1: entered promiscuous mode [ 90.783789][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.791594][ T5840] Cannot create hsr debugfs directory [ 90.949380][ T5838] hsr_slave_0: entered promiscuous mode [ 90.955818][ T5838] hsr_slave_1: entered promiscuous mode [ 90.962164][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.970496][ T5838] Cannot create hsr debugfs directory [ 90.981121][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.996366][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.012857][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.024137][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.166048][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.177300][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.188211][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.235954][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.328875][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.376237][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.391251][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.411740][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.465264][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.477827][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.492561][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.506736][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.616971][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.649452][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.661495][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.673952][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.770098][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.815157][ T5830] Bluetooth: hci0: command tx timeout [ 91.820784][ T5139] Bluetooth: hci1: command tx timeout [ 91.830283][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.863928][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.871242][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.892469][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.902610][ T59] cfg80211: failed to load regulatory.db [ 91.931066][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.963804][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.971066][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.981054][ T5139] Bluetooth: hci2: command tx timeout [ 92.005380][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.016519][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.046269][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.063071][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.070256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.109578][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.116768][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.133070][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.139898][ T5139] Bluetooth: hci3: command tx timeout [ 92.145509][ T5830] Bluetooth: hci4: command tx timeout [ 92.159501][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.166675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.200299][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.207464][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.218904][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.226059][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.240892][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.248043][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.433103][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.511929][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.553979][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.629064][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.636254][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.669171][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.676384][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.783284][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.940919][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.973477][ T5836] veth0_vlan: entered promiscuous mode [ 92.993951][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.057145][ T5836] veth1_vlan: entered promiscuous mode [ 93.080275][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.181475][ T5831] veth0_vlan: entered promiscuous mode [ 93.206316][ T5840] veth0_vlan: entered promiscuous mode [ 93.226686][ T5831] veth1_vlan: entered promiscuous mode [ 93.240914][ T5836] veth0_macvtap: entered promiscuous mode [ 93.263218][ T5840] veth1_vlan: entered promiscuous mode [ 93.277771][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.288043][ T5836] veth1_macvtap: entered promiscuous mode [ 93.383279][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.404151][ T5840] veth0_macvtap: entered promiscuous mode [ 93.433313][ T5831] veth0_macvtap: entered promiscuous mode [ 93.462787][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.487555][ T5840] veth1_macvtap: entered promiscuous mode [ 93.509868][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.520511][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529627][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.538636][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.551051][ T5831] veth1_macvtap: entered promiscuous mode [ 93.610245][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.621391][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.633293][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.646505][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.661916][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.672557][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.683315][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.697197][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.710511][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.721706][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.733691][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.743859][ T5838] veth0_vlan: entered promiscuous mode [ 93.764000][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.775280][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.785866][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.796785][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.808228][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.819322][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828644][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.837715][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846778][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860971][ T5838] veth1_vlan: entered promiscuous mode [ 93.878633][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891040][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.901554][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.905145][ T5830] Bluetooth: hci0: command tx timeout [ 93.911093][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.915889][ T5139] Bluetooth: hci1: command tx timeout [ 94.012826][ T5827] veth0_vlan: entered promiscuous mode [ 94.035428][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.043376][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.056330][ T5139] Bluetooth: hci2: command tx timeout [ 94.081657][ T5827] veth1_vlan: entered promiscuous mode [ 94.140553][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.156393][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.179716][ T5838] veth0_macvtap: entered promiscuous mode [ 94.210981][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.213677][ T5838] veth1_macvtap: entered promiscuous mode [ 94.230637][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.233547][ T5139] Bluetooth: hci3: command tx timeout [ 94.243866][ T5830] Bluetooth: hci4: command tx timeout [ 94.269079][ T5827] veth0_macvtap: entered promiscuous mode [ 94.321415][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.343558][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.351663][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.372934][ T5827] veth1_macvtap: entered promiscuous mode [ 94.402513][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.427239][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.445083][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.463641][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.477551][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.489121][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.516054][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.570592][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.582947][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.599637][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.608153][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.634689][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.645489][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.656593][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.667476][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.679434][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.717227][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.742972][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.754484][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.770640][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.790535][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.801500][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.818315][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.829633][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.846622][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.873400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.883457][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.892400][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.892666][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.910101][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.918951][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.941031][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.953526][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.967194][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.978788][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.997192][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.015896][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.026147][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.036921][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.059098][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.059770][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.112674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.284109][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383554][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471690][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.512502][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.975077][ T5830] Bluetooth: hci1: command tx timeout [ 96.022447][ T5139] Bluetooth: hci0: command tx timeout [ 96.594348][ T5139] Bluetooth: hci2: command tx timeout [ 96.599824][ T5139] Bluetooth: hci4: command tx timeout [ 96.605378][ T5830] Bluetooth: hci3: command tx timeout [ 96.659774][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.670648][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.745769][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.890205][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.922901][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.144442][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 97.306680][ T5940] syz.1.12: attempt to access beyond end of device [ 97.306680][ T5940] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 97.319492][ T5940] MINIX-fs: unable to read superblock [ 97.978219][ T5874] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.988343][ T5874] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.000849][ T5874] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.014110][ T5874] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.079980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.100677][ T5874] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.114474][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.124195][ T5874] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.178646][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.482852][ T5874] usb 1-1: GET_CAPABILITIES returned 0 [ 98.717408][ T5874] usbtmc 1-1:16.0: can't read capabilities [ 98.754374][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.772969][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.796116][ T52] usb 1-1: USB disconnect, device number 2 [ 100.875700][ T5964] geneve2: entered promiscuous mode [ 100.909978][ T5964] geneve2: entered allmulticast mode [ 101.255484][ T52] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.589101][ T5975] dvmrp0: entered allmulticast mode [ 102.551202][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.576427][ T52] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 102.853523][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.899632][ T52] usb 1-1: Product: syz [ 102.906573][ T5985] Zero length message leads to an empty skb [ 102.920331][ T52] usb 1-1: Manufacturer: syz [ 102.930748][ T52] usb 1-1: SerialNumber: syz [ 102.947625][ T52] usb 1-1: config 0 descriptor?? [ 102.967486][ T52] yurex 1-1:0.0: Could not find endpoints [ 103.169595][ T841] usb 1-1: USB disconnect, device number 3 [ 103.975160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.022177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.169975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.354408][ T841] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.544489][ T841] usb 3-1: Using ep0 maxpacket: 8 [ 104.568323][ T841] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 104.607321][ T841] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.578858][ T841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.589712][ T841] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.600082][ T841] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.604456][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.613668][ T841] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.646854][ T841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.827825][ T10] usb 2-1: device descriptor read/64, error -71 [ 105.943761][ T841] usb 3-1: GET_CAPABILITIES returned 0 [ 105.951798][ T841] usbtmc 3-1:16.0: can't read capabilities [ 106.724482][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.935920][ T10] usb 2-1: device descriptor read/64, error -71 [ 107.065933][ T10] usb usb2-port1: attempt power cycle [ 107.629910][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.999466][ T10] usb 2-1: device not accepting address 4, error -71 [ 108.054907][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.072015][ T5987] usb 3-1: USB disconnect, device number 2 [ 108.376584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.425285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 108.964436][ T30] audit: type=1326 audit(1743470406.058:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6028 comm="syz.0.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348e38d169 code=0x7fc00000 [ 113.454697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.464921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.056659][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.248183][ T5876] usb 5-1: device descriptor read/64, error -71 [ 118.178266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.618443][ T6126] syz.3.55: attempt to access beyond end of device [ 119.618443][ T6126] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 119.674584][ T6126] MINIX-fs: unable to read superblock [ 123.555758][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.924426][ T24] usb 1-1: device descriptor read/64, error -71 [ 124.224414][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.574664][ T24] usb 1-1: device descriptor read/64, error -71 [ 125.094799][ T24] usb usb1-port1: attempt power cycle [ 127.127042][ T6200] syz.2.72: attempt to access beyond end of device [ 127.127042][ T6200] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 127.139704][ T6200] MINIX-fs: unable to read superblock [ 129.764686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.878772][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.885428][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.194202][ T6255] syz.0.87: attempt to access beyond end of device [ 135.194202][ T6255] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 135.207254][ T6255] MINIX-fs: unable to read superblock [ 144.030214][ T6307] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 144.036851][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.748393][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 144.989157][ T6308] vhci_hcd: connection closed [ 144.994637][ T24] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 144.994769][ T12] vhci_hcd: stop threads [ 145.011605][ T12] vhci_hcd: release socket [ 145.016972][ T12] vhci_hcd: disconnect device [ 149.572254][ T30] audit: type=1326 audit(1743470446.638:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf8d169 code=0x7fc00000 [ 150.624507][ T24] vhci_hcd: vhci_device speed not set [ 154.074450][ T30] audit: type=1326 audit(1743470451.158:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf8d169 code=0x7fc00000 [ 160.549785][ T59] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.728924][ T59] usb 3-1: device descriptor read/64, error -71 [ 161.092895][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 161.139620][ T6453] ubi31: attaching mtd0 [ 161.171300][ T6453] ubi31: scanning is finished [ 161.176401][ T6453] ubi31: empty MTD device detected [ 161.364328][ T59] usb 3-1: device descriptor read/64, error -71 [ 162.334868][ T6458] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.346670][ T59] usb usb3-port1: attempt power cycle [ 162.484472][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.120581][ T6453] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 163.128252][ T6453] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 163.135717][ T6453] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 163.146431][ T5876] usb 2-1: device descriptor read/64, error -71 [ 163.149356][ T6453] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 163.161890][ T6453] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 163.172354][ T6453] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 163.183723][ T6453] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1990647710 [ 163.205513][ T6453] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 163.242511][ T6469] ubi31: background thread "ubi_bgt31d" started, PID 6469 [ 163.404434][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.764353][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.926232][ T5876] usb 4-1: device descriptor read/64, error -71 [ 169.814361][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.964335][ T5876] usb 4-1: device descriptor read/64, error -71 [ 170.105457][ T5876] usb usb4-port1: attempt power cycle [ 170.595135][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.747721][ T5876] usb 4-1: device descriptor read/8, error -71 [ 174.451236][ T6564] TCP: TCP_TX_DELAY enabled [ 177.461377][ T59] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.730263][ T59] usb 2-1: device descriptor read/64, error -71 [ 177.905464][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 178.004438][ T59] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.154315][ T59] usb 2-1: device descriptor read/64, error -71 [ 178.276546][ T59] usb usb2-port1: attempt power cycle [ 184.665212][ T6646] dvmrp0: entered allmulticast mode [ 186.653241][ T6658] syz.2.197: attempt to access beyond end of device [ 186.653241][ T6658] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 186.668125][ T6658] MINIX-fs: unable to read superblock [ 188.733784][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 189.711069][ T6684] tipc: Started in network mode [ 189.716263][ T6684] tipc: Node identity ffffffff, cluster identity 4711 [ 189.723092][ T6684] tipc: Node number set to 4294967295 [ 190.685657][ T6693] dvmrp0: entered allmulticast mode [ 191.710048][ T6697] ubi: mtd0 is already attached to ubi31 [ 193.789845][ T6725] tipc: Started in network mode [ 193.794955][ T6725] tipc: Node identity ffffffff, cluster identity 4711 [ 193.817798][ T6725] tipc: Node number set to 4294967295 [ 194.469401][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475802][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.560578][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.216'. [ 196.640662][ T6745] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.040350][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 202.064787][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 203.440758][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 203.676300][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.701251][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.732325][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.758203][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.774562][ T24] usb 4-1: SerialNumber: syz [ 203.799690][ T24] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 203.831534][ T24] cdc_mbim 4-1:1.0: bind() failure [ 203.906452][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 203.925804][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 203.983780][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 204.325223][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 204.444976][ T10] usb 4-1: USB disconnect, device number 6 [ 207.297775][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 207.365581][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 208.574588][ T6858] capability: warning: `syz.0.258' uses deprecated v2 capabilities in a way that may be insecure [ 208.692974][ T6862] tipc: Started in network mode [ 208.723550][ T6862] tipc: Node identity 5ad873074b46, cluster identity 4711 [ 208.765617][ T6862] tipc: Enabled bearer , priority 0 [ 208.831018][ T6859] tipc: Resetting bearer [ 209.835440][ T10] tipc: Node number set to 295596807 [ 211.739859][ T6876] Bluetooth: hci1: command 0x0406 tx timeout [ 211.759995][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 211.760650][ T6876] Bluetooth: hci0: command 0x0406 tx timeout [ 211.766440][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 211.867092][ T6859] tipc: Disabling bearer [ 212.364574][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'. [ 213.141057][ T6903] ubi: mtd0 is already attached to ubi31 [ 215.366292][ T6925] ubi: mtd0 is already attached to ubi31 [ 215.406687][ T6922] syz.0.278: attempt to access beyond end of device [ 215.406687][ T6922] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 215.419450][ T6922] MINIX-fs: unable to read superblock [ 218.811838][ T6958] ubi: mtd0 is already attached to ubi31 [ 222.099375][ T6983] syz.3.294: attempt to access beyond end of device [ 222.099375][ T6983] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 222.114366][ T6983] MINIX-fs: unable to read superblock [ 223.516337][ T7003] ubi: mtd0 is already attached to ubi31 [ 227.009184][ T7048] syz.3.312: attempt to access beyond end of device [ 227.009184][ T7048] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 227.022000][ T7048] MINIX-fs: unable to read superblock [ 229.519694][ T7063] ubi: mtd0 is already attached to ubi31 [ 229.906952][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.099408][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.106132][ T7071] ubi: mtd0 is already attached to ubi31 [ 230.152833][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 230.216981][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.255568][ T24] usb 2-1: config 0 descriptor?? [ 231.117679][ T24] lg-g15 0003:046D:C222.0001: unbalanced delimiter at end of report description [ 231.138672][ T24] lg-g15 0003:046D:C222.0001: probe with driver lg-g15 failed with error -22 [ 231.288399][ T24] usb 2-1: USB disconnect, device number 11 [ 234.009721][ T30] audit: type=1326 audit(1743470531.078:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7103 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5e78d169 code=0x7fc00000 [ 235.589065][ T7127] ubi: mtd0 is already attached to ubi31 [ 235.820264][ T7131] syz.3.335: attempt to access beyond end of device [ 235.820264][ T7131] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 235.833170][ T7131] MINIX-fs: unable to read superblock [ 245.104059][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.356'. [ 246.002281][ T7214] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 246.008857][ T7214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.019850][ T7214] vhci_hcd vhci_hcd.0: Device attached [ 246.581334][ T7209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 246.587902][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.596336][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 246.764366][ T7221] vhci_hcd: connection closed [ 246.971071][ T6002] vhci_hcd: stop threads [ 247.092940][ T5987] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 247.101176][ T6002] vhci_hcd: release socket [ 247.195374][ T6002] vhci_hcd: disconnect device [ 247.204436][ T24] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 247.295225][ T24] usb 41-1: enqueue for inactive port 0 [ 247.465965][ T24] vhci_hcd: vhci_device speed not set [ 250.631078][ T7269] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 250.637654][ T7269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.645501][ T7269] vhci_hcd vhci_hcd.0: Device attached [ 250.846529][ T7272] vhci_hcd: connection closed [ 250.854106][ T5982] vhci_hcd: stop threads [ 250.870605][ T5982] vhci_hcd: release socket [ 250.875459][ T5982] vhci_hcd: disconnect device [ 250.894357][ T5874] vhci_hcd: vhci_device speed not set [ 252.583233][ T7295] syz.3.378: attempt to access beyond end of device [ 252.583233][ T7295] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 252.596231][ T7295] MINIX-fs: unable to read superblock [ 255.737157][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.743854][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.235717][ T5877] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 256.401708][ T5877] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 256.568940][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.614042][ T30] audit: type=1326 audit(1743470553.643:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7307 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5e78d169 code=0x7fc00000 [ 256.925324][ T5877] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.946690][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.955451][ T5877] usb 4-1: Product: syz [ 256.969865][ T5877] usb 4-1: Manufacturer: syz [ 256.974674][ T5877] usb 4-1: SerialNumber: syz [ 257.001586][ T5877] usb 4-1: config 0 descriptor?? [ 257.238516][ T5877] usb 4-1: selecting invalid altsetting 0 [ 257.838569][ T7332] syz.4.392: attempt to access beyond end of device [ 257.838569][ T7332] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 257.851503][ T7332] MINIX-fs: unable to read superblock [ 257.946190][ T59] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 258.089371][ T5877] usb 4-1: USB disconnect, device number 7 [ 258.573849][ T59] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 258.592845][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.603731][ T59] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 258.612998][ T59] usb 3-1: config 0 has no interface number 0 [ 258.627102][ T59] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 258.636592][ T59] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 258.646103][ T59] usb 3-1: Product: syz [ 258.650456][ T59] usb 3-1: Manufacturer: syz [ 258.655362][ T59] usb 3-1: SerialNumber: syz [ 258.664943][ T59] usb 3-1: config 0 descriptor?? [ 258.678137][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.876004][ T7351] ubi: mtd0 is already attached to ubi31 [ 260.225319][ T59] usb 3-1: USB disconnect, device number 6 [ 261.965607][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 262.439014][ T7369] syz.3.404: attempt to access beyond end of device [ 262.439014][ T7369] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 262.451782][ T7369] MINIX-fs: unable to read superblock [ 267.142213][ T7410] syz.2.417: attempt to access beyond end of device [ 267.142213][ T7410] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 267.156361][ T7410] MINIX-fs: unable to read superblock [ 273.276486][ T7456] syz.2.429: attempt to access beyond end of device [ 273.276486][ T7456] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 273.290610][ T7456] MINIX-fs: unable to read superblock [ 273.374115][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 274.113839][ T7462] mmap: syz.1.432 (7462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 274.176963][ T7462] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 276.314476][ T7481] ubi: mtd0 is already attached to ubi31 [ 277.697605][ T30] audit: type=1326 audit(1743470574.803:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 277.835897][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 277.839222][ T7496] netlink: 'syz.3.440': attribute type 4 has an invalid length. [ 277.852681][ T7496] netlink: 17 bytes leftover after parsing attributes in process `syz.3.440'. [ 277.861676][ T30] audit: type=1326 audit(1743470574.803:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 277.861729][ T30] audit: type=1326 audit(1743470574.833:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 277.913819][ T30] audit: type=1326 audit(1743470574.833:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 277.928766][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 278.437815][ T30] audit: type=1326 audit(1743470574.833:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 278.574951][ T7502] ubi: mtd0 is already attached to ubi31 [ 278.625937][ T30] audit: type=1326 audit(1743470574.833:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 278.833530][ T30] audit: type=1326 audit(1743470574.833:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 278.855778][ T30] audit: type=1326 audit(1743470574.833:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 278.894567][ T30] audit: type=1326 audit(1743470574.833:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 279.617024][ T30] audit: type=1326 audit(1743470574.833:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7491 comm="syz.1.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fa58d169 code=0x7ffc0000 [ 290.745339][ T7540] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 292.200062][ T7547] syz.3.449: attempt to access beyond end of device [ 292.200062][ T7547] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 292.213451][ T7547] MINIX-fs: unable to read superblock [ 294.470011][ T7574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 294.476574][ T7574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.484393][ T7574] vhci_hcd vhci_hcd.0: Device attached [ 295.316317][ T7570] ceph: No mds server is up or the cluster is laggy [ 295.373207][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 295.381067][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 295.851793][ T59] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 295.878865][ T7580] vhci_hcd: connection reset by peer [ 295.916748][ T53] vhci_hcd: stop threads [ 295.922282][ T53] vhci_hcd: release socket [ 295.936717][ T53] vhci_hcd: disconnect device [ 298.268182][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 298.317407][ T7607] syz.3.471 uses obsolete (PF_INET,SOCK_PACKET) [ 298.673699][ T7607] mac80211_hwsim hwsim8 syzkaller1: entered promiscuous mode [ 298.771774][ T7607] mac80211_hwsim hwsim8 syzkaller1: entered allmulticast mode [ 298.951527][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 300.502209][ T7630] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 300.575890][ T7630] hsr_slave_0: left promiscuous mode [ 300.808444][ T7634] vhci_hcd vhci_hcd.0: port 0 already used [ 300.847651][ T7630] hsr_slave_1: left promiscuous mode [ 301.014815][ T59] vhci_hcd: vhci_device speed not set [ 304.234631][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 307.646706][ T7687] tipc: Started in network mode [ 307.651714][ T7687] tipc: Node identity ffffffff, cluster identity 4711 [ 307.658720][ T7687] tipc: Node number set to 4294967295 [ 310.601827][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 313.048297][ T7727] ubi: mtd0 is already attached to ubi31 [ 316.674466][ T7759] netlink: 344 bytes leftover after parsing attributes in process `syz.3.513'. [ 316.716055][ T7760] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.666461][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.672807][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.412789][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 320.412808][ T30] audit: type=1326 audit(1743470617.503:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7766 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77638d169 code=0x7fc00000 [ 322.185513][ T7801] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 322.602195][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 322.634312][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 325.640474][ T7838] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 325.649756][ T7838] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 328.343875][ T7859] Bluetooth: MGMT ver 1.23 [ 330.142439][ T7873] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 330.149001][ T7873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.157184][ T7873] vhci_hcd vhci_hcd.0: Device attached [ 330.574234][ T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 331.682741][ T7874] vhci_hcd: connection reset by peer [ 331.805504][ T6204] vhci_hcd: stop threads [ 331.809860][ T6204] vhci_hcd: release socket [ 331.854018][ T6204] vhci_hcd: disconnect device [ 333.561747][ T7888] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 333.570916][ T7888] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 333.723872][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 333.733688][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 335.478213][ T30] audit: type=1326 audit(1743470632.553:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7899 comm="syz.0.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348e38d169 code=0x7fc00000 [ 337.159946][ T7916] ubi: mtd0 is already attached to ubi31 [ 337.294290][ T10] vhci_hcd: vhci_device speed not set [ 343.054474][ T30] audit: type=1326 audit(1743470640.133:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7959 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf8d169 code=0x7fc00000 [ 343.458303][ T7968] process 'syz.3.574' launched './file0' with NULL argv: empty string added [ 343.516823][ T7968] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 349.280585][ T30] audit: type=1326 audit(1743470646.383:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8011 comm="syz.4.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5e78d169 code=0x7fc00000 [ 350.082652][ T8026] dvmrp0: entered allmulticast mode [ 352.389779][ T8037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 352.396353][ T8037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.404278][ T8037] vhci_hcd vhci_hcd.0: Device attached [ 352.652492][ T8038] vhci_hcd: connection closed [ 352.713372][ T36] vhci_hcd: stop threads [ 352.838666][ T59] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 352.861756][ T36] vhci_hcd: release socket [ 352.954313][ T36] vhci_hcd: disconnect device [ 356.557292][ T30] audit: type=1326 audit(1743470653.633:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5e78d169 code=0x7fc00000 [ 357.888734][ T8083] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 357.895313][ T8083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.903086][ T8083] vhci_hcd vhci_hcd.0: Device attached [ 358.124284][ T59] vhci_hcd: vhci_device speed not set [ 358.220885][ T8084] vhci_hcd: connection closed [ 358.250141][ T5875] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 358.397770][ T8085] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 358.632866][ T4355] vhci_hcd: stop threads [ 358.708694][ T4355] vhci_hcd: release socket [ 358.776580][ T4355] vhci_hcd: disconnect device [ 358.797292][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 358.824290][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 360.395009][ T5878] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 361.227553][ T30] audit: type=1326 audit(1743470658.313:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8111 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf8d169 code=0x7fc00000 [ 361.546528][ T5878] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 362.310177][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.588778][ T5878] usb 1-1: config 0 descriptor?? [ 362.606427][ T5878] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 363.274072][ T5878] gp8psk: usb in 128 operation failed. [ 363.734420][ T5875] vhci_hcd: vhci_device speed not set [ 363.738525][ T5878] gp8psk: usb in 146 operation failed. [ 363.746194][ T5878] gp8psk: failed to get FW version [ 363.765444][ T5878] gp8psk: usb in 149 operation failed. [ 363.774186][ T5878] gp8psk: failed to get FPGA version [ 363.781619][ T5878] gp8psk: usb in 138 operation failed. [ 363.787326][ T5878] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 363.798535][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 364.131711][ T5878] usb 1-1: USB disconnect, device number 7 [ 364.794969][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 364.916195][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 366.146506][ T8168] dvmrp0: entered allmulticast mode [ 367.914553][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 367.965973][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 368.014432][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 368.040215][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 368.276749][ T5875] usb 4-1: device descriptor read/64, error -71 [ 368.600884][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 368.955287][ T5875] usb 4-1: device descriptor read/64, error -71 [ 369.235670][ T5875] usb usb4-port1: attempt power cycle [ 369.726100][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 369.747548][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 369.956492][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 370.001689][ T5875] usb 4-1: device descriptor read/8, error -71 [ 370.870691][ T8214] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 370.877285][ T8214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 370.899627][ T8214] vhci_hcd vhci_hcd.0: Device attached [ 371.524593][ T8215] vhci_hcd: connection closed [ 372.028963][ T5922] vhci_hcd: stop threads [ 372.103826][ T5922] vhci_hcd: release socket [ 372.110450][ T5922] vhci_hcd: disconnect device [ 375.914278][ T5875] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 376.033220][ T8266] vhci_hcd vhci_hcd.0: port 0 already used [ 376.582750][ T5875] usb 5-1: device descriptor read/64, error -71 [ 377.280366][ T8269] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 377.514507][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 378.748156][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.978687][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.157708][ T8289] Can't find ip_set type hash:ne [ 382.782925][ T8302] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 383.172225][ T5875] usb 5-1: device descriptor read/64, error -110 [ 383.502803][ T5875] usb usb5-port1: attempt power cycle [ 383.764231][ T5876] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 384.014654][ T5876] usb 3-1: device descriptor read/64, error -71 [ 384.181697][ T8313] vhci_hcd vhci_hcd.0: port 0 already used [ 384.384582][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 385.617030][ T5876] usb 3-1: device descriptor read/64, error -71 [ 385.734476][ T5876] usb usb3-port1: attempt power cycle [ 386.305374][ T5876] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 387.146649][ T5876] usb 3-1: device descriptor read/8, error -71 [ 389.020576][ T8353] syz.4.680: attempt to access beyond end of device [ 389.020576][ T8353] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 389.197715][ T8353] MINIX-fs: unable to read superblock [ 390.588359][ T8367] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 390.595020][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.603182][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 391.854324][ T8369] vhci_hcd: connection closed [ 391.874247][ T3533] vhci_hcd: stop threads [ 391.932275][ T3533] vhci_hcd: release socket [ 391.984191][ T3533] vhci_hcd: disconnect device [ 393.327807][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 393.494391][ T10] usb 4-1: device descriptor read/64, error -71 [ 394.187148][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 394.386835][ T10] usb 4-1: device descriptor read/64, error -71 [ 394.495386][ T10] usb usb4-port1: attempt power cycle [ 394.848770][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 394.885989][ T10] usb 4-1: device descriptor read/8, error -71 [ 395.145301][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 395.844382][ T10] usb 4-1: device descriptor read/8, error -71 [ 396.109722][ T10] usb usb4-port1: unable to enumerate USB device [ 396.212270][ T8415] lo: entered promiscuous mode [ 396.218037][ T8415] lo: entered allmulticast mode [ 397.010962][ T8417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 397.017625][ T8417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.025608][ T8417] vhci_hcd vhci_hcd.0: Device attached [ 397.189225][ T8418] vhci_hcd: connection closed [ 397.197603][ T5981] vhci_hcd: stop threads [ 397.311131][ T5981] vhci_hcd: release socket [ 397.373962][ T5981] vhci_hcd: disconnect device [ 397.408770][ T10] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 397.512924][ T10] usb 37-1: enqueue for inactive port 0 [ 397.678062][ T10] vhci_hcd: vhci_device speed not set [ 400.569260][ T8447] syz.2.710: attempt to access beyond end of device [ 400.569260][ T8447] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 400.584002][ T8447] MINIX-fs: unable to read superblock [ 401.314396][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 401.467554][ T10] usb 2-1: device descriptor read/64, error -71 [ 401.704332][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 402.058648][ T10] usb 2-1: device descriptor read/64, error -71 [ 403.074989][ T10] usb usb2-port1: attempt power cycle [ 403.371367][ T8467] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 403.474233][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 403.483235][ T8471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.501710][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 403.511480][ T8471] bond1: (slave bond2): making interface the new active one [ 403.519877][ T8471] bond1: (slave bond2): Enslaving as an active interface with an up link [ 403.610191][ T8467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.656692][ T8476] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 403.663259][ T8476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.671174][ T8476] vhci_hcd vhci_hcd.0: Device attached [ 404.134658][ T59] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 404.417939][ T8477] vhci_hcd: connection reset by peer [ 404.491444][ T5981] vhci_hcd: stop threads [ 404.571595][ T5981] vhci_hcd: release socket [ 404.660730][ T5981] vhci_hcd: disconnect device [ 405.017877][ T10] usb 2-1: device descriptor read/8, error -71 [ 405.514248][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 405.555561][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 405.567558][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 405.654462][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 405.690683][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 405.726748][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 405.752522][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.772152][ T10] usb 2-1: Product: syz [ 405.780525][ T10] usb 2-1: Manufacturer: syz [ 405.808873][ T10] usb 2-1: SerialNumber: syz [ 405.875810][ T10] usb 2-1: config 0 descriptor?? [ 406.714357][ T10] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 406.724003][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 406.740455][ T10] usb 2-1: USB disconnect, device number 15 [ 408.574245][ T8519] syz.3.724: attempt to access beyond end of device [ 408.574245][ T8519] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 408.587276][ T8519] MINIX-fs: unable to read superblock [ 409.064587][ T8525] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 409.071162][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.082880][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 409.314306][ T24] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 409.425665][ T59] vhci_hcd: vhci_device speed not set [ 409.597209][ T8526] vhci_hcd: connection closed [ 409.599746][ T13] vhci_hcd: stop threads [ 409.747515][ T13] vhci_hcd: release socket [ 409.820606][ T13] vhci_hcd: disconnect device [ 410.051957][ T24] usb 37-1: enqueue for inactive port 0 [ 410.124258][ T24] vhci_hcd: vhci_device speed not set [ 418.434324][ T841] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 418.705655][ T841] usb 2-1: device descriptor read/64, error -71 [ 419.034357][ T841] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 419.184604][ T841] usb 2-1: device descriptor read/64, error -71 [ 419.325677][ T841] usb usb2-port1: attempt power cycle [ 419.878848][ T841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 419.965040][ T841] usb 2-1: device descriptor read/8, error -71 [ 420.295113][ T841] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 422.095529][ T841] usb 2-1: device descriptor read/8, error -71 [ 422.220227][ T841] usb usb2-port1: unable to enumerate USB device [ 422.309692][ T8626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 422.316346][ T8626] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 422.344300][ T8626] vhci_hcd vhci_hcd.0: Device attached [ 422.374193][ T8629] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 422.380856][ T8629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.403572][ T8629] vhci_hcd vhci_hcd.0: Device attached [ 422.422779][ T8626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.492448][ T8629] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 422.499123][ T8629] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 422.524243][ T5878] vhci_hcd: vhci_device speed not set [ 422.566915][ T8629] vhci_hcd vhci_hcd.0: Device attached [ 422.618228][ T5878] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 422.626064][ T8626] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 422.632691][ T8626] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 422.660730][ T8626] vhci_hcd vhci_hcd.0: Device attached [ 423.085000][ T8642] ubi: mtd0 is already attached to ubi31 [ 423.148754][ T8629] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 423.155426][ T8629] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.203354][ T8645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.373327][ T8649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.384936][ T8626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.393212][ T8629] vhci_hcd vhci_hcd.0: Device attached [ 423.446799][ T8629] vhci_hcd vhci_hcd.0: port 0 already used [ 423.506600][ T8638] vhci_hcd: connection closed [ 423.506761][ T4355] vhci_hcd: stop threads [ 423.515308][ T8630] vhci_hcd: connection closed [ 423.517508][ T8633] vhci_hcd: connection closed [ 423.527919][ T8627] vhci_hcd: connection reset by peer [ 423.549658][ T4355] vhci_hcd: release socket [ 423.599164][ T8647] vhci_hcd: connection closed [ 423.600656][ T4355] vhci_hcd: disconnect device [ 423.621010][ T4355] vhci_hcd: stop threads [ 423.634232][ T4355] vhci_hcd: release socket [ 423.654555][ T4355] vhci_hcd: disconnect device [ 423.666882][ T4355] vhci_hcd: stop threads [ 423.671227][ T4355] vhci_hcd: release socket [ 423.714731][ T4355] vhci_hcd: disconnect device [ 423.731418][ T4355] vhci_hcd: stop threads [ 423.742328][ T4355] vhci_hcd: release socket [ 423.774208][ T4355] vhci_hcd: disconnect device [ 423.784258][ T4355] vhci_hcd: stop threads [ 423.788668][ T4355] vhci_hcd: release socket [ 423.804184][ T4355] vhci_hcd: disconnect device [ 426.055886][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 426.255604][ T24] usb 4-1: device descriptor read/64, error -71 [ 426.514204][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 426.677244][ T24] usb 4-1: device descriptor read/64, error -71 [ 426.878433][ T24] usb usb4-port1: attempt power cycle [ 427.234267][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 427.275021][ T24] usb 4-1: device descriptor read/8, error -71 [ 427.514195][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 427.542185][ T8698] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 427.548768][ T8698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.565016][ T24] usb 4-1: device descriptor read/8, error -71 [ 427.582736][ T8698] vhci_hcd vhci_hcd.0: Device attached [ 427.655535][ T8704] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 427.684622][ T24] usb usb4-port1: unable to enumerate USB device [ 427.706301][ T8704] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 427.713046][ T8704] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.806045][ T8704] vhci_hcd vhci_hcd.0: Device attached [ 427.806943][ T841] vhci_hcd: vhci_device speed not set [ 427.818609][ T8708] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 427.825267][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 427.833327][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 427.844834][ T8698] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 427.851471][ T8698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.864212][ T5878] vhci_hcd: vhci_device speed not set [ 427.885673][ T8698] vhci_hcd vhci_hcd.0: Device attached [ 427.944316][ T841] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 428.010702][ T8708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.096146][ T8698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.107816][ T8704] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 428.114467][ T8704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 428.126518][ T8704] vhci_hcd vhci_hcd.0: Device attached [ 428.166146][ T8698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 428.179879][ T8698] vhci_hcd vhci_hcd.0: port 0 already used [ 428.736497][ T8705] vhci_hcd: connection closed [ 428.766693][ T8703] vhci_hcd: connection closed [ 428.771609][ T8699] vhci_hcd: connection reset by peer [ 428.781942][ T8709] vhci_hcd: connection closed [ 428.784156][ T6204] vhci_hcd: stop threads [ 428.795676][ T8714] vhci_hcd: connection closed [ 428.836749][ T6204] vhci_hcd: release socket [ 428.886388][ T6204] vhci_hcd: disconnect device [ 428.934233][ T6204] vhci_hcd: stop threads [ 428.940208][ T6204] vhci_hcd: release socket [ 428.974639][ T6204] vhci_hcd: disconnect device [ 428.994810][ T6204] vhci_hcd: stop threads [ 428.999103][ T6204] vhci_hcd: release socket [ 429.034491][ T6204] vhci_hcd: disconnect device [ 429.053050][ T6204] vhci_hcd: stop threads [ 429.070412][ T6204] vhci_hcd: release socket [ 429.078260][ T6204] vhci_hcd: disconnect device [ 429.083314][ T6204] vhci_hcd: stop threads [ 429.094374][ T6204] vhci_hcd: release socket [ 429.107511][ T6204] vhci_hcd: disconnect device [ 429.658085][ T8730] xt_HMARK: proto mask must be zero with L3 mode [ 430.589208][ T5875] usb usb38-port1: attempt power cycle [ 431.567436][ T5875] usb usb38-port1: unable to enumerate USB device [ 433.244361][ T841] vhci_hcd: vhci_device speed not set [ 435.104579][ T8770] vhci_hcd vhci_hcd.0: port 0 already used [ 435.112256][ T8770] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 435.118895][ T8770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.159884][ T8770] vhci_hcd vhci_hcd.0: Device attached [ 435.223450][ T8775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.235653][ T10] usb usb36-port1: attempt power cycle [ 435.251988][ T8770] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 435.258663][ T8770] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 435.354494][ T8770] vhci_hcd vhci_hcd.0: Device attached [ 435.710797][ T8770] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 435.717464][ T8770] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 435.920432][ T10] usb usb36-port1: unable to enumerate USB device [ 435.991075][ T8775] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 435.997738][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 436.339796][ T8770] vhci_hcd vhci_hcd.0: Device attached [ 436.340656][ T8787] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 436.505099][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 437.407734][ T8770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.429324][ T8770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.460243][ T8770] vhci_hcd vhci_hcd.0: port 0 already used [ 437.520014][ T8784] vhci_hcd: connection closed [ 437.526426][ T8778] vhci_hcd: connection closed [ 437.527755][ T8782] vhci_hcd: connection closed [ 437.531435][ T8773] vhci_hcd: connection closed [ 437.542719][ T6002] vhci_hcd: stop threads [ 437.575511][ T6002] vhci_hcd: release socket [ 437.585263][ T6002] vhci_hcd: disconnect device [ 437.610762][ T6002] vhci_hcd: stop threads [ 438.569423][ T6002] vhci_hcd: release socket [ 438.575355][ T6002] vhci_hcd: disconnect device [ 438.665101][ T59] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 438.846350][ T6002] vhci_hcd: stop threads [ 438.850713][ T6002] vhci_hcd: release socket [ 438.862100][ T6002] vhci_hcd: disconnect device [ 438.886458][ T6002] vhci_hcd: stop threads [ 438.894746][ T6002] vhci_hcd: release socket [ 438.900275][ T6002] vhci_hcd: disconnect device [ 438.964186][ T59] usb 5-1: device descriptor read/64, error -71 [ 440.057145][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.063544][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.084550][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 441.732286][ T8825] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 443.001076][ T8835] mkiss: ax0: crc mode is auto. [ 449.524765][ T8874] bridge0: port 3(team0) entered blocking state [ 449.532459][ T8874] bridge0: port 3(team0) entered disabled state [ 449.540012][ T8874] team0: entered allmulticast mode [ 449.545277][ T8874] team_slave_0: entered allmulticast mode [ 449.551082][ T8874] team_slave_1: entered allmulticast mode [ 449.570365][ T8874] team0: entered promiscuous mode [ 449.575898][ T8874] team_slave_0: entered promiscuous mode [ 449.582873][ T8874] team_slave_1: entered promiscuous mode [ 449.594192][ T8874] bridge0: port 3(team0) entered blocking state [ 449.600708][ T8874] bridge0: port 3(team0) entered forwarding state [ 451.414349][ T841] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 451.620565][ T841] usb 2-1: device descriptor read/64, error -71 [ 451.838570][ T8881] xt_socket: unknown flags 0x8 [ 451.992141][ T841] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 452.204416][ T841] usb 2-1: device descriptor read/64, error -71 [ 452.384539][ T841] usb usb2-port1: attempt power cycle [ 457.174330][ T8920] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 458.710220][ T8949] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 462.582857][ T8983] mkiss: ax0: crc mode is auto. [ 465.116567][ T9002] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 466.320657][ T9018] capability: warning: `syz.2.860' uses 32-bit capabilities (legacy support in use) [ 466.331733][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.860'. [ 468.109065][ T9032] sp0: Synchronizing with TNC [ 468.887266][ T9028] [U] è [ 471.334445][ T9057] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 475.673062][ T9094] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 477.391155][ T9104] bridge0: port 3(team0) entered blocking state [ 477.397652][ T9104] bridge0: port 3(team0) entered disabled state [ 477.404216][ T9104] team0: entered allmulticast mode [ 477.409361][ T9104] team_slave_0: entered allmulticast mode [ 477.415364][ T9104] team_slave_1: entered allmulticast mode [ 477.422913][ T9104] team0: entered promiscuous mode [ 477.428181][ T9104] team_slave_0: entered promiscuous mode [ 477.434006][ T9104] team_slave_1: entered promiscuous mode [ 477.440456][ T9104] bridge0: port 3(team0) entered blocking state [ 477.446852][ T9104] bridge0: port 3(team0) entered forwarding state [ 480.835245][ T9139] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 488.004391][ T9195] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 490.705832][ T9225] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 493.939757][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 494.584411][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 494.602505][ T24] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 494.629208][ T24] usb 2-1: config 0 has no interface number 0 [ 494.664725][ T24] usb 2-1: config 0 interface 28 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 494.708415][ T24] usb 2-1: config 0 interface 28 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 494.747064][ T24] usb 2-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=40.85 [ 494.774257][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.808604][ T24] usb 2-1: Product: syz [ 494.812836][ T24] usb 2-1: Manufacturer: syz [ 494.824670][ T24] usb 2-1: SerialNumber: syz [ 495.055325][ T24] usb 2-1: config 0 descriptor?? [ 495.064565][ T9230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 495.072172][ T9230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 495.923322][ T24] io_ti 2-1:0.28: required endpoints missing [ 495.974500][ T24] usb 2-1: USB disconnect, device number 23 [ 496.690358][ T9270] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 498.828642][ T9286] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[9286] [ 501.586515][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593998][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.394187][ T5988] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 512.485897][ T9407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 512.812756][ T5988] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 512.902815][ T5988] usb 3-1: config 0 has no interface number 0 [ 513.155455][ T5988] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.166871][ T5988] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 513.177975][ T5988] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 513.267282][ T5988] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 513.324140][ T5988] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 513.390953][ T5988] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.443749][ T5988] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 513.467427][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.759810][ T5988] usb 3-1: config 0 descriptor?? [ 513.879396][ T9396] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 513.991556][ T9396] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.439693][ T5988] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 514.657147][ T5988] usb 3-1: USB disconnect, device number 11 [ 514.667729][ T5988] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 516.044187][ T5988] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 516.217303][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 516.229622][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.267470][ T5988] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 516.306265][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.435897][ T5988] usb 4-1: config 0 descriptor?? [ 517.130796][ T9438] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 517.350843][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.401353][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.461286][ T5988] usbhid 4-1:0.0: can't add hid device: -71 [ 519.469633][ T5988] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 520.083479][ T5988] usb 4-1: USB disconnect, device number 20 [ 524.840396][ T9511] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 527.088443][ T9537] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 527.095117][ T9537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.142404][ T9532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 527.148979][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 527.572505][ T9537] vhci_hcd vhci_hcd.0: Device attached [ 527.602999][ T9543] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 527.693131][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 527.775360][ T9532] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 527.782020][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 527.824284][ T5876] usb 37-2: new low-speed USB device number 6 using vhci_hcd [ 527.882675][ T9545] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 527.889346][ T9545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 527.967071][ T9545] vhci_hcd vhci_hcd.0: Device attached [ 528.181251][ T9537] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 528.187911][ T9537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 528.631327][ T9543] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 528.799627][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 528.856278][ T9537] vhci_hcd vhci_hcd.0: Device attached [ 528.863714][ T9561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 528.876788][ T9532] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 528.898010][ T9532] vhci_hcd vhci_hcd.0: port 0 already used [ 529.425196][ T9557] vhci_hcd: connection closed [ 529.427208][ T36] vhci_hcd: stop threads [ 529.535978][ T9548] vhci_hcd: connection closed [ 529.544212][ T9538] vhci_hcd: connection reset by peer [ 529.554705][ T9536] vhci_hcd: connection closed [ 529.564415][ T9550] vhci_hcd: connection closed [ 529.590719][ T36] vhci_hcd: release socket [ 529.632406][ T36] vhci_hcd: disconnect device [ 529.844692][ T36] vhci_hcd: stop threads [ 529.849004][ T36] vhci_hcd: release socket [ 529.864029][ T36] vhci_hcd: disconnect device [ 529.878598][ T36] vhci_hcd: stop threads [ 529.882891][ T36] vhci_hcd: release socket [ 529.894484][ T36] vhci_hcd: disconnect device [ 529.908959][ T36] vhci_hcd: stop threads [ 529.913257][ T36] vhci_hcd: release socket [ 529.925033][ T36] vhci_hcd: disconnect device [ 530.260053][ T36] vhci_hcd: stop threads [ 530.307653][ T36] vhci_hcd: release socket [ 530.379153][ T36] vhci_hcd: disconnect device [ 530.782187][ T9577] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 533.064234][ T5876] vhci_hcd: vhci_device speed not set [ 535.220290][ T24] usb usb38-port1: attempt power cycle [ 535.995605][ T9619] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 536.002173][ T9619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 536.185600][ T9619] vhci_hcd vhci_hcd.0: Device attached [ 536.215335][ T9628] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.622479][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 536.629146][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.595021][ T5876] vhci_hcd: vhci_device speed not set [ 537.624983][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 537.659527][ T5876] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 538.637748][ T24] usb usb38-port1: unable to enumerate USB device [ 538.670182][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 538.676835][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 538.685150][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 539.090944][ T9628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 539.097617][ T9628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 539.129765][ T9628] vhci_hcd vhci_hcd.0: Device attached [ 539.141645][ T9646] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 539.143616][ T9619] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 539.156542][ T9619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 539.192652][ T9637] sctp: failed to load transform for md5: -2 [ 539.227360][ T9619] vhci_hcd vhci_hcd.0: Device attached [ 539.344956][ T9625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 539.485228][ T9619] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 540.095972][ T9619] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 540.213391][ T9619] vhci_hcd vhci_hcd.0: port 0 already used [ 540.265464][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 540.404637][ T9670] sp0: Synchronizing with TNC [ 540.569887][ T9656] [U] è [ 541.437099][ T9643] vhci_hcd: connection closed [ 541.437420][ T9640] vhci_hcd: connection closed [ 541.443024][ T6001] vhci_hcd: stop threads [ 541.497097][ T9627] vhci_hcd: connection closed [ 541.507189][ T9620] vhci_hcd: connection reset by peer [ 541.529101][ T9639] vhci_hcd: connection closed [ 541.586664][ T6001] vhci_hcd: release socket [ 541.696444][ T6001] vhci_hcd: disconnect device [ 541.877778][ T6001] vhci_hcd: stop threads [ 542.227392][ T6001] vhci_hcd: release socket [ 542.259275][ T6001] vhci_hcd: disconnect device [ 542.290504][ T6001] vhci_hcd: stop threads [ 542.370547][ T6001] vhci_hcd: release socket [ 542.423099][ T6001] vhci_hcd: disconnect device [ 542.471154][ T6001] vhci_hcd: stop threads [ 542.559892][ T6001] vhci_hcd: release socket [ 542.646979][ T6001] vhci_hcd: disconnect device [ 543.723912][ T9626] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 544.138701][ T6001] vhci_hcd: stop threads [ 544.154188][ T6001] vhci_hcd: release socket [ 544.160417][ T6001] vhci_hcd: disconnect device [ 544.419376][ T5876] vhci_hcd: vhci_device speed not set [ 547.755502][ T5878] usb usb36-port1: attempt power cycle [ 547.765173][ T9709] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 548.848237][ T5878] usb usb36-port1: unable to enumerate USB device [ 549.194125][ T9725] vhci_hcd vhci_hcd.0: port 0 already used [ 549.224832][ T9725] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 549.231494][ T9725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 549.325332][ T9725] vhci_hcd vhci_hcd.0: Device attached [ 549.342226][ T9732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.415840][ T9733] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 549.422514][ T9733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 549.434324][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 549.453885][ T9733] vhci_hcd vhci_hcd.0: Device attached [ 549.484197][ T9725] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 549.490865][ T9725] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 549.504586][ T9725] vhci_hcd vhci_hcd.0: Device attached [ 549.544211][ T9725] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(17) [ 549.550872][ T9725] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 549.581091][ T9725] vhci_hcd vhci_hcd.0: Device attached [ 549.588077][ T9725] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.597872][ T9725] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.607573][ T9725] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.624427][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 549.629110][ T9725] vhci_hcd vhci_hcd.0: port 0 already used [ 549.654462][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 549.667554][ T9736] vhci_hcd: connection closed [ 549.669877][ T9734] vhci_hcd: connection closed [ 549.674927][ T9729] vhci_hcd: connection closed [ 549.676386][ T36] vhci_hcd: stop threads [ 549.700238][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 549.725364][ T36] vhci_hcd: release socket [ 549.732209][ T9738] vhci_hcd: connection closed [ 549.737996][ T36] vhci_hcd: disconnect device [ 549.759906][ T5876] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 549.770501][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.780383][ T36] vhci_hcd: stop threads [ 549.794116][ T5876] usb 5-1: Product: syz [ 549.794302][ T36] vhci_hcd: release socket [ 549.798363][ T5876] usb 5-1: Manufacturer: syz [ 549.807498][ T36] vhci_hcd: disconnect device [ 549.818619][ T36] vhci_hcd: stop threads [ 549.822918][ T36] vhci_hcd: release socket [ 549.831115][ T36] vhci_hcd: disconnect device [ 549.839214][ T9743] bond3 (unregistering): Released all slaves [ 549.847228][ T36] vhci_hcd: stop threads [ 549.860603][ T36] vhci_hcd: release socket [ 549.864232][ T5876] usb 5-1: SerialNumber: syz [ 549.865814][ T36] vhci_hcd: disconnect device [ 549.899690][ T5876] usb 5-1: config 0 descriptor?? [ 549.930830][ T5876] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 549.990736][ T5876] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 550.136562][ T59] usb 5-1: USB disconnect, device number 9 [ 550.195592][ T59] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 550.255263][ T59] kobil_sct 5-1:0.0: device disconnected [ 552.564409][ T9769] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 558.983332][ T9780] block device autoloading is deprecated and will be removed. [ 559.002577][ T9780] syz.3.1056: attempt to access beyond end of device [ 559.002577][ T9780] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 561.593403][ T9820] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 563.398320][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.407511][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.124198][ T9856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 566.130773][ T9856] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 566.145369][ T9856] vhci_hcd vhci_hcd.0: Device attached [ 566.874333][ T9856] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 566.881011][ T9856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 567.057854][ T5876] vhci_hcd: vhci_device speed not set [ 567.203747][ T9856] vhci_hcd vhci_hcd.0: Device attached [ 567.240626][ T5876] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 567.241437][ T9866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 567.284434][ T9856] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 567.291082][ T9856] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 567.335749][ T9856] vhci_hcd vhci_hcd.0: Device attached [ 567.391651][ T9869] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 567.398324][ T9869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 567.514733][ T9869] vhci_hcd vhci_hcd.0: Device attached [ 567.552696][ T9856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 567.559370][ T9856] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 567.606673][ T9866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 567.642014][ T9856] vhci_hcd vhci_hcd.0: Device attached [ 567.661695][ T9869] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 568.485446][ T9856] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 568.608520][ T9856] vhci_hcd vhci_hcd.0: port 0 already used [ 568.676404][ T9870] vhci_hcd: connection closed [ 568.676653][ T9867] vhci_hcd: connection closed [ 568.677147][ T9858] vhci_hcd: connection reset by peer [ 568.681680][ T9861] vhci_hcd: connection closed [ 568.691618][ T9874] vhci_hcd: connection closed [ 568.699151][ T13] vhci_hcd: stop threads [ 568.744695][ T13] vhci_hcd: release socket [ 568.757165][ T13] vhci_hcd: disconnect device [ 568.819354][ T9887] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 569.043724][ T13] vhci_hcd: stop threads [ 569.048216][ T13] vhci_hcd: release socket [ 569.052797][ T13] vhci_hcd: disconnect device [ 569.057851][ T13] vhci_hcd: stop threads [ 569.062161][ T13] vhci_hcd: release socket [ 569.067192][ T13] vhci_hcd: disconnect device [ 569.072874][ T13] vhci_hcd: stop threads [ 569.225387][ T13] vhci_hcd: release socket [ 569.234415][ T13] vhci_hcd: disconnect device [ 569.504382][ T13] vhci_hcd: stop threads [ 569.514117][ T13] vhci_hcd: release socket [ 569.585991][ T13] vhci_hcd: disconnect device [ 572.594181][ T5876] vhci_hcd: vhci_device speed not set [ 573.458067][ T9927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 573.464912][ T9927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 573.500964][ T9930] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 573.580432][ T9927] vhci_hcd vhci_hcd.0: Device attached [ 573.606991][ T9933] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 573.613647][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.676493][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 573.693049][ T9936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 573.711880][ T9927] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 573.718551][ T9927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 573.732923][ T9927] vhci_hcd vhci_hcd.0: Device attached [ 573.764507][ T9662] vhci_hcd: vhci_device speed not set [ 573.848185][ T9949] ubi: mtd0 is already attached to ubi31 [ 573.944262][ T9933] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 573.950943][ T9933] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 573.959010][ T9662] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 574.083964][ T9936] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 574.101906][ T9933] vhci_hcd vhci_hcd.0: Device attached [ 575.187118][ T9704] usb usb42-port1: attempt power cycle [ 575.205215][ T9957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 575.242824][ T9927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 575.249489][ T9927] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 575.891766][ T9927] vhci_hcd vhci_hcd.0: Device attached [ 575.914863][ T9933] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 575.970667][ T9927] vhci_hcd vhci_hcd.0: port 0 already used [ 576.048268][ T9947] vhci_hcd: connection closed [ 576.049284][ T9941] vhci_hcd: connection closed [ 576.155478][ T9704] usb usb42-port1: unable to enumerate USB device [ 576.191322][ T9951] vhci_hcd: connection closed [ 576.191764][ T9934] vhci_hcd: connection closed [ 576.197876][ T9928] vhci_hcd: connection reset by peer [ 576.247146][ T13] vhci_hcd: stop threads [ 577.068985][ T13] vhci_hcd: release socket [ 577.148242][ T13] vhci_hcd: disconnect device [ 577.189622][ T13] vhci_hcd: stop threads [ 577.308200][ T13] vhci_hcd: release socket [ 577.344349][ T13] vhci_hcd: disconnect device [ 577.350701][ T13] vhci_hcd: stop threads [ 577.404419][ T13] vhci_hcd: release socket [ 577.412962][ T13] vhci_hcd: disconnect device [ 577.444246][ T13] vhci_hcd: stop threads [ 577.466583][ T13] vhci_hcd: release socket [ 577.483132][ T13] vhci_hcd: disconnect device [ 577.504377][ T13] vhci_hcd: stop threads [ 577.558233][ T13] vhci_hcd: release socket [ 577.615893][ T13] vhci_hcd: disconnect device [ 577.680573][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1105'. [ 579.239121][ T9662] vhci_hcd: vhci_device speed not set [ 580.284320][ T59] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 580.487252][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.571464][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.641626][ T59] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 580.723861][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.848404][ T59] usb 4-1: config 0 descriptor?? [ 581.285138][ T5878] usb usb36-port1: attempt power cycle [ 581.302206][ T9990] mac80211_hwsim hwsim8 syzkaller1: left promiscuous mode [ 581.338184][ T9990] mac80211_hwsim hwsim8 syzkaller1: left allmulticast mode [ 582.124666][ T59] usbhid 4-1:0.0: can't add hid device: -71 [ 582.131897][ T59] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 582.202725][ T59] usb 4-1: USB disconnect, device number 21 [ 582.217289][ T5878] usb usb36-port1: unable to enumerate USB device [ 584.409894][T10021] ubi: mtd0 is already attached to ubi31 [ 584.571256][T10023] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 584.577830][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 584.630869][T10023] vhci_hcd vhci_hcd.0: Device attached [ 584.646054][T10028] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 584.652675][T10028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.696818][T10023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 584.734929][T10028] vhci_hcd vhci_hcd.0: Device attached [ 584.757200][T10023] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 584.763845][T10023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 584.804320][ T5878] vhci_hcd: vhci_device speed not set [ 584.841851][T10028] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14) [ 584.848513][T10028] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 584.874142][ T5878] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 584.905042][T10023] vhci_hcd vhci_hcd.0: Device attached [ 584.934274][T10028] vhci_hcd vhci_hcd.0: Device attached [ 584.937390][T10038] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 584.946390][T10038] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 586.124261][T10038] vhci_hcd vhci_hcd.0: Device attached [ 586.345393][T10023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 586.555411][T10023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.534919][T10023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.809276][T10028] vhci_hcd vhci_hcd.0: port 0 already used [ 588.710363][T10039] vhci_hcd: connection closed [ 588.711820][ T5981] vhci_hcd: stop threads [ 588.722534][T10036] vhci_hcd: connection closed [ 588.735554][T10029] vhci_hcd: connection closed [ 588.740339][T10032] vhci_hcd: connection closed [ 588.745398][T10025] vhci_hcd: connection reset by peer [ 588.767339][ T5981] vhci_hcd: release socket [ 588.805015][ T5981] vhci_hcd: disconnect device [ 588.812569][ T5981] vhci_hcd: stop threads [ 589.010649][ T5981] vhci_hcd: release socket [ 589.800126][ T5981] vhci_hcd: disconnect device [ 589.814667][ T5981] vhci_hcd: stop threads [ 589.819940][ T5981] vhci_hcd: release socket [ 589.834668][ T5981] vhci_hcd: disconnect device [ 589.842911][ T5981] vhci_hcd: stop threads [ 589.853055][ T5981] vhci_hcd: release socket [ 589.872442][ T5981] vhci_hcd: disconnect device [ 589.883063][ T5981] vhci_hcd: stop threads [ 589.890222][ T5981] vhci_hcd: release socket [ 589.901713][ T5981] vhci_hcd: disconnect device [ 590.079805][ T5878] vhci_hcd: vhci_device speed not set [ 594.760872][ T5876] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 594.770253][ T9662] usb usb38-port1: attempt power cycle [ 594.934524][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 594.942244][ T31] Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 595.036232][ T5876] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.052629][ T5876] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 595.081012][T10109] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 595.099446][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.205860][ T5876] usb 4-1: config 0 descriptor?? [ 595.236425][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.245290][ T31] task:kworker/0:1 state:D stack:22696 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 595.264226][ T31] Workqueue: usb_hub_wq hub_event [ 595.269564][ T31] Call Trace: [ 595.272959][ T31] [ 595.280401][ T31] __schedule+0x1b33/0x51f0 [ 596.033405][ T9662] usb usb38-port1: unable to enumerate USB device [ 596.144276][ T31] ? schedule+0x163/0x360 [ 596.148696][ T31] ? __pfx___schedule+0x10/0x10 [ 596.153626][ T31] ? schedule+0x90/0x360 [ 596.162289][ T5876] usb 4-1: can't set config #0, error -71 [ 596.242882][ T31] ? schedule+0x90/0x360 [ 596.247970][ T31] schedule+0x163/0x360 [ 596.252294][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 596.259731][ T31] schedule_preempt_disabled+0x13/0x30 [ 596.269390][ T31] __mutex_lock+0x805/0x10c0 [ 596.269410][ T5876] usb 4-1: USB disconnect, device number 22 [ 596.275415][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 596.285622][ T31] ? hub_event+0x24cd/0x50f0 [ 596.290355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 596.301978][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 596.405834][ T31] hub_event+0x24cd/0x50f0 [ 596.410386][ T31] ? __pfx_hub_event+0x10/0x10 [ 596.415319][ T31] ? __lock_acquire+0xad5/0xd80 [ 596.420238][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 596.426072][ T31] process_scheduled_works+0xac3/0x18e0 [ 596.434279][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.440321][ T31] ? assign_work+0x367/0x3d0 [ 596.445014][ T31] worker_thread+0x870/0xd50 [ 596.449658][ T31] ? __kthread_parkme+0x1a8/0x200 [ 596.454761][ T31] ? __pfx_worker_thread+0x10/0x10 [ 596.459908][ T31] kthread+0x7b7/0x940 [ 596.474086][ T31] ? __pfx_worker_thread+0x10/0x10 [ 596.479273][ T31] ? __pfx_kthread+0x10/0x10 [ 596.483890][ T31] ? __pfx_kthread+0x10/0x10 [ 596.492560][ T31] ? __pfx_kthread+0x10/0x10 [ 596.499667][ T31] ? __pfx_kthread+0x10/0x10 [ 596.507061][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.512302][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 596.519792][ T31] ? __pfx_kthread+0x10/0x10 [ 596.524822][ T31] ret_from_fork+0x4b/0x80 [ 596.529281][ T31] ? __pfx_kthread+0x10/0x10 [ 596.533900][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.539576][ T31] [ 596.784465][ T31] [ 596.784465][ T31] Showing all locks held in the system: [ 596.792247][ T31] 5 locks held by kworker/0:1/10: [ 596.984091][ T31] #0: ffff888144eb9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 597.014110][ T31] #1: ffffc900000f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 597.054106][ T31] #2: ffff8880298f4190 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 597.063095][ T31] #3: ffff8880298f7510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 597.124158][ T31] #4: ffff8880295d0d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 597.133925][ T31] 1 lock held by khungtaskd/31: [ 597.169033][ T31] #0: ffffffff8ed3b560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 597.224095][ T31] 3 locks held by kworker/1:2/841: [ 597.229290][ T31] 2 locks held by getty/5586: [ 597.233987][ T31] #0: ffff888035f8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.334098][ T31] #1: ffffc9000364b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 597.364153][ T31] 5 locks held by kworker/1:6/5987: [ 597.369394][ T31] #0: ffff888144eb9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 597.388713][ T31] #1: ffffc900049cfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 597.402550][ T31] #2: ffff88802988c190 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 597.412215][ T31] #3: ffff88802988f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 597.427719][ T31] #4: ffff8880295d0d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 597.438056][ T31] 2 locks held by kworker/1:7/5988: [ 597.443286][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 597.455604][ T31] #1: ffffc90004a9fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 597.466468][ T31] 5 locks held by syz.2.318/7066: [ 597.471707][ T31] #0: ffff88806598cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 597.484342][ T31] #1: ffff88806598c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 597.497995][ T31] #2: ffffffff90249088 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 597.508442][ T31] #3: ffff88802ec14338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 597.518381][ T31] #4: ffffffff8ed40a78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 597.529689][ T31] 3 locks held by syz.3.360/7217: [ 597.537976][ T31] #0: ffff88806299cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 597.548303][ T31] #1: ffff88806299c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 597.558397][ T31] #2: ffffffff90249088 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 597.568630][ T31] 3 locks held by syz.1.1105/9983: [ 597.573762][ T31] #0: ffff8880629c0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 597.594272][ T31] #1: ffff8880629c0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 597.604157][ T31] #2: ffffffff90249088 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 597.614261][ T31] 3 locks held by syz.0.1133/10106: [ 597.619482][ T31] #0: ffff888020e94d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 597.629699][ T31] #1: ffff888020e94078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 597.639442][ T31] #2: ffffffff90249088 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 597.652321][ T31] 2 locks held by syz.4.1134/10109: [ 597.657659][ T31] #0: ffffffff900e3308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 597.666737][ T31] #1: ffffffff8ed40a78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 597.677760][ T31] [ 597.700599][ T31] ============================================= [ 597.700599][ T31] [ 597.714969][ T31] NMI backtrace for cpu 1 [ 597.714999][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 597.715023][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 597.715034][ T31] Call Trace: [ 597.715042][ T31] [ 597.715050][ T31] dump_stack_lvl+0x241/0x360 [ 597.715086][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.715113][ T31] ? __pfx__printk+0x10/0x10 [ 597.715150][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 597.715183][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 597.715206][ T31] ? _printk+0xd5/0x120 [ 597.715231][ T31] ? __wake_up_klogd+0xcc/0x110 [ 597.715259][ T31] ? __pfx__printk+0x10/0x10 [ 597.715288][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 597.715307][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 597.715336][ T31] watchdog+0x1058/0x10a0 [ 597.715364][ T31] ? watchdog+0x1ea/0x10a0 [ 597.715387][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.715405][ T31] kthread+0x7b7/0x940 [ 597.715432][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.715450][ T31] ? __pfx_kthread+0x10/0x10 [ 597.715473][ T31] ? __pfx_kthread+0x10/0x10 [ 597.715498][ T31] ? __pfx_kthread+0x10/0x10 [ 597.715522][ T31] ? __pfx_kthread+0x10/0x10 [ 597.715547][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.715573][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 597.715602][ T31] ? __pfx_kthread+0x10/0x10 [ 597.715629][ T31] ret_from_fork+0x4b/0x80 [ 597.715647][ T31] ? __pfx_kthread+0x10/0x10 [ 597.715673][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.715717][ T31] [ 597.715725][ T31] Sending NMI from CPU 1 to CPUs 0: [ 597.882933][ C0] NMI backtrace for cpu 0 [ 597.882961][ C0] CPU: 0 UID: 0 PID: 4355 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 597.882982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 597.882993][ C0] Workqueue: bat_events batadv_nc_worker [ 597.883023][ C0] RIP: 0010:check_preemption_disabled+0x6a/0x120 [ 597.883043][ C0] Code: 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c7 49 89 f6 49 89 ff 65 4c 8b 2c 25 08 b0 63 93 41 f6 45 2f 04 [ 597.883057][ C0] RSP: 0018:ffffc9000d6c79f8 EFLAGS: 00000046 [ 597.883071][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: c9f6c1a72de6da00 [ 597.883082][ C0] RDX: 0000000000000000 RSI: ffffffff8e4dfdbf RDI: ffffffff8ca0acc0 [ 597.883094][ C0] RBP: ffffffff9363b020 R08: 0000000000000000 R09: 0000000000000000 [ 597.883104][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9363b020 [ 597.883115][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 597.883125][ C0] FS: 0000000000000000(0000) GS:ffff888124fe5000(0000) knlGS:0000000000000000 [ 597.883138][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.883150][ C0] CR2: 000055e1daf76930 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 597.883164][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.883174][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.883184][ C0] Call Trace: [ 597.883191][ C0] [ 597.883199][ C0] lock_acquire+0x126/0x2f0 [ 597.883217][ C0] ? batadv_nc_worker+0xcb/0x610 [ 597.883241][ C0] batadv_nc_worker+0xec/0x610 [ 597.883263][ C0] ? batadv_nc_worker+0xcb/0x610 [ 597.883285][ C0] ? batadv_nc_worker+0xcb/0x610 [ 597.883308][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 597.883325][ C0] process_scheduled_works+0xac3/0x18e0 [ 597.883356][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.883378][ C0] ? assign_work+0x367/0x3d0 [ 597.883396][ C0] worker_thread+0x870/0xd50 [ 597.883420][ C0] ? __kthread_parkme+0x1a8/0x200 [ 597.883441][ C0] ? __pfx_worker_thread+0x10/0x10 [ 597.883459][ C0] kthread+0x7b7/0x940 [ 597.883480][ C0] ? __pfx_worker_thread+0x10/0x10 [ 597.883499][ C0] ? __pfx_kthread+0x10/0x10 [ 597.883519][ C0] ? __pfx_kthread+0x10/0x10 [ 597.883539][ C0] ? __pfx_kthread+0x10/0x10 [ 597.883560][ C0] ? __pfx_kthread+0x10/0x10 [ 597.883580][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.883608][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 597.883632][ C0] ? __pfx_kthread+0x10/0x10 [ 597.883654][ C0] ret_from_fork+0x4b/0x80 [ 597.883669][ C0] ? __pfx_kthread+0x10/0x10 [ 597.883690][ C0] ret_from_fork_asm+0x1a/0x30 [ 597.883722][ C0] [ 598.181595][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 598.188509][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 598.200004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.210132][ T31] Call Trace: [ 598.213417][ T31] [ 598.216362][ T31] dump_stack_lvl+0x241/0x360 [ 598.221080][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.226307][ T31] ? __pfx__printk+0x10/0x10 [ 598.230927][ T31] ? vscnprintf+0x5d/0x90 [ 598.235273][ T31] panic+0x349/0x880 [ 598.239176][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 598.244559][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 598.250720][ T31] ? __pfx_panic+0x10/0x10 [ 598.255148][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 598.260524][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 598.266681][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 598.272846][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 598.279010][ T31] watchdog+0x1097/0x10a0 [ 598.283342][ T31] ? watchdog+0x1ea/0x10a0 [ 598.287790][ T31] ? __pfx_watchdog+0x10/0x10 [ 598.292478][ T31] kthread+0x7b7/0x940 [ 598.296579][ T31] ? __pfx_watchdog+0x10/0x10 [ 598.301260][ T31] ? __pfx_kthread+0x10/0x10 [ 598.305860][ T31] ? __pfx_kthread+0x10/0x10 [ 598.310474][ T31] ? __pfx_kthread+0x10/0x10 [ 598.315076][ T31] ? __pfx_kthread+0x10/0x10 [ 598.319671][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.324879][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 598.330085][ T31] ? __pfx_kthread+0x10/0x10 [ 598.334696][ T31] ret_from_fork+0x4b/0x80 [ 598.339114][ T31] ? __pfx_kthread+0x10/0x10 [ 598.343705][ T31] ret_from_fork_asm+0x1a/0x30 [ 598.348485][ T31] [ 598.351847][ T31] Kernel Offset: disabled [ 598.356182][ T31] Rebooting in 86400 seconds..