last executing test programs: 2m45.977705124s ago: executing program 3 (id=431): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c2", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 2m40.799044102s ago: executing program 3 (id=442): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f10"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2m40.710485079s ago: executing program 3 (id=443): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xfffffff8, @loopback, 0x6}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r2, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2021, 0x0, 0x0) 2m39.940155046s ago: executing program 3 (id=444): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m36.984045724s ago: executing program 3 (id=454): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x7fec, 0x7, 0x4) 2m35.865121322s ago: executing program 3 (id=456): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 2m20.085027904s ago: executing program 32 (id=456): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 9.797446004s ago: executing program 0 (id=801): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2251], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) 9.094204079s ago: executing program 2 (id=802): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x11, 0xa, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000"], 0xd6) 8.966988787s ago: executing program 1 (id=804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 7.290222457s ago: executing program 1 (id=807): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, r4, 0x1000000}, 0x80, 0x0}, 0x0) 6.97043958s ago: executing program 0 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.897041331s ago: executing program 2 (id=810): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x20, 0x8, "6762ccdad070ba9ee324100976be1ca0aa1d6cb518798900e5ce9dab"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 5.855388445s ago: executing program 1 (id=811): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd80e, 0x3010}, &(0x7f00000001c0), &(0x7f0000000080)) close(0x3) 5.214344748s ago: executing program 0 (id=813): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000140)="0573e6b82c4e232b") 3.478748071s ago: executing program 5 (id=818): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2251], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) 2.053175168s ago: executing program 5 (id=819): socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="18570000070000000000000000001801000020646cb6be132500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000ccaeabf34b97488978e89bc1b1d2f43767845058446270334a6838ea60e09e14fc2f76dd39e151040090a7fda881574f60"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='fscache_volume\x00', r2, 0x0, 0x10001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x2, 0x0, 0x0) 2.050777589s ago: executing program 1 (id=821): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, r4, 0x1000000}, 0x80, 0x0}, 0x0) 1.965025826s ago: executing program 0 (id=822): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00000004c0)="0000e2ffff68ed7d5213e6ea822197072f297c84b01396ffbc7b27695aa5c98ed79a09050000005313b3beb05e80ed47a7377fa14a63b20dde5ffb0e527dd86a559c6b7631aaf98dc567b9acb434b72d18a73f9e162ee80477c6701ac841e533bb7ed3fae97491b73817ade9536dcc9deb582243704331e426", 0x79) 1.779616551s ago: executing program 0 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1080000000000000}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48084}, 0x4008000) 1.530863588s ago: executing program 0 (id=825): syz_usb_connect(0x0, 0x3d, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') close(0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000000ac0)) 1.530116197s ago: executing program 4 (id=826): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x30, 0x4008000}, 0xc00) 735.35209ms ago: executing program 4 (id=827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x810) 734.344058ms ago: executing program 5 (id=828): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 631.024556ms ago: executing program 1 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001a000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 576.107655ms ago: executing program 5 (id=830): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r5, 0xffffffffffffffff, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 508.082004ms ago: executing program 4 (id=831): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0xf00, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 432.377353ms ago: executing program 1 (id=832): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd80e, 0x3010}, &(0x7f00000001c0), &(0x7f0000000080)) close(0x3) 431.435314ms ago: executing program 2 (id=833): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x118, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xd8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_ACT={0xc4, 0x6, [@m_mirred={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x5d, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c559c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 340.979547ms ago: executing program 2 (id=834): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) 290.80745ms ago: executing program 5 (id=835): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 290.247237ms ago: executing program 4 (id=836): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000005c0)={0x1ff, {{0xa, 0x4e21, 0x6, @mcast1, 0x8}}}, 0x88) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001400)="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", 0xf40}, {&(0x7f0000000700)="8066add79cbb58d71934bdc0f85abec97624740854771367a0ae99eda10ef40830c6e79462ddb813fa720b29fa089ce6e5fda7c128fb5973497a4b20465235a32cfc363d0be0611493ce2716b4a7bebfffce6d637edf87362e1e37a09a7d17f2", 0x60}], 0x2, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x30}, 0x8000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 236.194391ms ago: executing program 2 (id=837): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 85.100007ms ago: executing program 4 (id=838): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 22.787957ms ago: executing program 2 (id=839): dup(0xffffffffffffffff) gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000040000000000000000003000300000000000000000038000000000000000000000000002000"], 0x158) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) 22.234089ms ago: executing program 4 (id=840): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x148, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 0s ago: executing program 5 (id=841): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 81.364162][ T5818] cgroup: Unknown subsys name 'net' [ 81.509331][ T5818] cgroup: Unknown subsys name 'cpuset' [ 81.518739][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.157020][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.858164][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.861167][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.872760][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.881713][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.889540][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.899587][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.908546][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.916184][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.917930][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.924323][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.931653][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.946747][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.947572][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.954743][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.969054][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.976189][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.977997][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.992725][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.014185][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.036740][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.045437][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.063254][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.071778][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.084098][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.097451][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.681488][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.712432][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.797492][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.976297][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 87.137209][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.153856][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.162939][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.172932][ T5835] bridge_slave_0: entered allmulticast mode [ 87.182400][ T5835] bridge_slave_0: entered promiscuous mode [ 87.268130][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.275380][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.282882][ T5835] bridge_slave_1: entered allmulticast mode [ 87.291873][ T5835] bridge_slave_1: entered promiscuous mode [ 87.362507][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.369724][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.377172][ T5844] bridge_slave_0: entered allmulticast mode [ 87.384464][ T5844] bridge_slave_0: entered promiscuous mode [ 87.413081][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.420396][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.427709][ T5834] bridge_slave_0: entered allmulticast mode [ 87.435628][ T5834] bridge_slave_0: entered promiscuous mode [ 87.443553][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.450798][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.458515][ T5834] bridge_slave_1: entered allmulticast mode [ 87.466280][ T5834] bridge_slave_1: entered promiscuous mode [ 87.485350][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.492509][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.500886][ T5844] bridge_slave_1: entered allmulticast mode [ 87.508397][ T5844] bridge_slave_1: entered promiscuous mode [ 87.583550][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.641869][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.667651][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.680945][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.716993][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.730310][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.778399][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.788246][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.795555][ T5829] bridge_slave_0: entered allmulticast mode [ 87.802885][ T5829] bridge_slave_0: entered promiscuous mode [ 87.842865][ T5835] team0: Port device team_slave_0 added [ 87.851900][ T5844] team0: Port device team_slave_0 added [ 87.861324][ T5844] team0: Port device team_slave_1 added [ 87.867856][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.876122][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.883371][ T5829] bridge_slave_1: entered allmulticast mode [ 87.895818][ T5829] bridge_slave_1: entered promiscuous mode [ 87.902723][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.910082][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.917554][ T5828] bridge_slave_0: entered allmulticast mode [ 87.924758][ T5828] bridge_slave_0: entered promiscuous mode [ 87.949315][ T5835] team0: Port device team_slave_1 added [ 87.985966][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.993165][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.000503][ T5828] bridge_slave_1: entered allmulticast mode [ 88.008123][ T5828] bridge_slave_1: entered promiscuous mode [ 88.019074][ T5834] team0: Port device team_slave_0 added [ 88.028420][ T5834] team0: Port device team_slave_1 added [ 88.045732][ T5833] Bluetooth: hci0: command tx timeout [ 88.045769][ T55] Bluetooth: hci4: command tx timeout [ 88.091572][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.128211][ T55] Bluetooth: hci3: command tx timeout [ 88.128272][ T5833] Bluetooth: hci2: command tx timeout [ 88.156617][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.163668][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.189982][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.205241][ T5833] Bluetooth: hci1: command tx timeout [ 88.209810][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.248912][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.256520][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.282567][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.294326][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.301647][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.328207][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.362705][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.373451][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.381065][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.407811][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.420019][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.427077][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.453206][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.480986][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.504208][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.511571][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.538248][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.571081][ T5829] team0: Port device team_slave_0 added [ 88.633030][ T5829] team0: Port device team_slave_1 added [ 88.642629][ T5828] team0: Port device team_slave_0 added [ 88.653014][ T5828] team0: Port device team_slave_1 added [ 88.689769][ T5834] hsr_slave_0: entered promiscuous mode [ 88.697687][ T5834] hsr_slave_1: entered promiscuous mode [ 88.736254][ T5844] hsr_slave_0: entered promiscuous mode [ 88.742650][ T5844] hsr_slave_1: entered promiscuous mode [ 88.749905][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.758093][ T5844] Cannot create hsr debugfs directory [ 88.783823][ T5835] hsr_slave_0: entered promiscuous mode [ 88.790416][ T5835] hsr_slave_1: entered promiscuous mode [ 88.797309][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.804913][ T5835] Cannot create hsr debugfs directory [ 88.853394][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.860605][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.886675][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.901559][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.908715][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.939449][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.965293][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.972276][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.999250][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.037539][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.044532][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.073554][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.310934][ T5829] hsr_slave_0: entered promiscuous mode [ 89.317471][ T5829] hsr_slave_1: entered promiscuous mode [ 89.323580][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.331839][ T5829] Cannot create hsr debugfs directory [ 89.361187][ T5828] hsr_slave_0: entered promiscuous mode [ 89.368154][ T5828] hsr_slave_1: entered promiscuous mode [ 89.374449][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.382223][ T5828] Cannot create hsr debugfs directory [ 89.803309][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.817182][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.828887][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.855333][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.930876][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.957742][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.985630][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.010097][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.065419][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.084295][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.110811][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.121287][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.128312][ T5833] Bluetooth: hci4: command tx timeout [ 90.136125][ T5833] Bluetooth: hci0: command tx timeout [ 90.206705][ T5833] Bluetooth: hci3: command tx timeout [ 90.206715][ T55] Bluetooth: hci2: command tx timeout [ 90.280504][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.295663][ T5833] Bluetooth: hci1: command tx timeout [ 90.328418][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.341258][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.383482][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.394926][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.436244][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.475617][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.505106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.512431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.527691][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.534858][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.553451][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.564771][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.576399][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.589380][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.630093][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.673945][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.681129][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.704940][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.712147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.837874][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.859720][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.971430][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.988952][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.030205][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.037450][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.072410][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.079616][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.099052][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.106289][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.158786][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.166055][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.322673][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.370084][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.442650][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.460632][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.495033][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.502234][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.561703][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.569077][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.712336][ T5844] veth0_vlan: entered promiscuous mode [ 91.739884][ T5844] veth1_vlan: entered promiscuous mode [ 91.789754][ T5834] veth0_vlan: entered promiscuous mode [ 91.849193][ T5834] veth1_vlan: entered promiscuous mode [ 91.889822][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.913301][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.928484][ T5844] veth0_macvtap: entered promiscuous mode [ 91.973666][ T3082] cfg80211: failed to load regulatory.db [ 91.979013][ T5844] veth1_macvtap: entered promiscuous mode [ 92.020833][ T5834] veth0_macvtap: entered promiscuous mode [ 92.084778][ T5834] veth1_macvtap: entered promiscuous mode [ 92.151475][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.167958][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.176335][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.191332][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.203235][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.217190][ T5833] Bluetooth: hci0: command tx timeout [ 92.217211][ T55] Bluetooth: hci4: command tx timeout [ 92.234968][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.244503][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.253756][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.262661][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.279376][ T5835] veth0_vlan: entered promiscuous mode [ 92.285358][ T5833] Bluetooth: hci3: command tx timeout [ 92.286206][ T55] Bluetooth: hci2: command tx timeout [ 92.304016][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.315870][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.327303][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.339857][ T5828] veth0_vlan: entered promiscuous mode [ 92.353331][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.372569][ T55] Bluetooth: hci1: command tx timeout [ 92.399289][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.414821][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.424693][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.438561][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.452730][ T5835] veth1_vlan: entered promiscuous mode [ 92.500822][ T5828] veth1_vlan: entered promiscuous mode [ 92.561979][ T5835] veth0_macvtap: entered promiscuous mode [ 92.593897][ T5835] veth1_macvtap: entered promiscuous mode [ 92.700107][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.714833][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.726449][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.727680][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.744537][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.755300][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.772073][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.799285][ T5828] veth0_macvtap: entered promiscuous mode [ 92.825964][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.836924][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.847436][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.858743][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.870071][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.881657][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.885741][ T5828] veth1_macvtap: entered promiscuous mode [ 92.890043][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.947372][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.947740][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960569][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.967577][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.980866][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989631][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.052535][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.063764][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.074524][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.090015][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.101099][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.111739][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.123755][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.169396][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.184603][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.201504][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.212150][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.222344][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.232884][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.253968][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.260421][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.283318][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.297845][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.306903][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.315768][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.329327][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.340158][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.460147][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.553586][ T5829] veth0_vlan: entered promiscuous mode [ 93.580844][ T5829] veth1_vlan: entered promiscuous mode [ 93.605788][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.619548][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.772494][ T5829] veth0_macvtap: entered promiscuous mode [ 93.791862][ T5922] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 93.801086][ T5922] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 93.819392][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.841855][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.871070][ T5829] veth1_macvtap: entered promiscuous mode [ 93.894989][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.907055][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.973677][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.998433][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.006788][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.006815][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.006827][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.006842][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.006853][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.006869][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.006882][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.006898][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.021256][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.140339][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.163853][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.178173][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.189020][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.203378][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.249700][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.272057][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.285439][ T55] Bluetooth: hci4: command tx timeout [ 94.285503][ T5833] Bluetooth: hci0: command tx timeout [ 94.296932][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.320767][ T5928] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.351007][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.368949][ T5833] Bluetooth: hci2: command tx timeout [ 94.369595][ T55] Bluetooth: hci3: command tx timeout [ 94.383839][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.424250][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.445785][ T55] Bluetooth: hci1: command tx timeout [ 94.458319][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524184][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.546443][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.897139][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.797283][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.823729][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.868482][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 95.892123][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.113421][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.312040][ T5884] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.327387][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.385518][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.394340][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.467338][ T5884] usb 4-1: Product: syz [ 96.471582][ T5884] usb 4-1: Manufacturer: syz [ 96.491375][ T5884] usb 4-1: SerialNumber: syz [ 96.532656][ T5884] usb 4-1: config 0 descriptor?? [ 96.567885][ T5884] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.588182][ T5884] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 96.655499][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.838767][ T5904] usb 3-1: device descriptor read/64, error -71 [ 97.477111][ T5884] em28xx 4-1:0.0: unknown em28xx chip ID (89) [ 97.636451][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.697020][ T5884] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 97.739497][ T5884] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 97.769876][ T5884] em28xx 4-1:0.0: No AC97 audio processor [ 97.785309][ T5904] usb 3-1: device descriptor read/64, error -71 [ 97.819807][ T5884] usb 4-1: USB disconnect, device number 2 [ 97.848792][ T5884] em28xx 4-1:0.0: Disconnecting em28xx [ 97.893090][ T5971] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 97.898162][ T5884] em28xx 4-1:0.0: Freeing device [ 97.915614][ T5971] netlink: 216 bytes leftover after parsing attributes in process `syz.4.16'. [ 97.929271][ T5904] usb usb3-port1: attempt power cycle [ 97.955422][ T5886] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 98.099720][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 98.132797][ T5886] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 98.145658][ T5886] usb 1-1: config 0 has no interface number 0 [ 98.162074][ T5886] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.179687][ T5886] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 98.193274][ T5886] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 98.205507][ T5886] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 98.217802][ T5886] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 98.230190][ T5886] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.251270][ T5886] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.260505][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.305220][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.317647][ T5886] usb 1-1: config 0 descriptor?? [ 98.335189][ T5904] usb 3-1: device descriptor read/8, error -71 [ 98.342533][ T5967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.355355][ T969] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.363423][ T5967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.398069][ T5886] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 98.557032][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 98.585139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.605838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.678571][ T969] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 98.707594][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.754749][ T969] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.816500][ T5904] usb 3-1: device descriptor read/8, error -71 [ 98.907483][ T969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.033961][ T969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.054363][ T5904] usb usb3-port1: unable to enumerate USB device [ 99.078137][ T24] usb 1-1: USB disconnect, device number 2 [ 99.090842][ T969] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.105427][ T969] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.107881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.124227][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.124249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.147023][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 99.574406][ T969] usb 2-1: usb_control_msg returned -32 [ 99.585361][ T969] usbtmc 2-1:16.0: can't read capabilities [ 99.965596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.047018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.147270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.157480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.206152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.286464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.456855][ T5994] lo speed is unknown, defaulting to 1000 [ 100.478686][ T5994] lo speed is unknown, defaulting to 1000 [ 100.506763][ T5994] lo speed is unknown, defaulting to 1000 [ 101.060808][ T5994] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.142920][ T5994] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.424855][ T5886] usb 2-1: USB disconnect, device number 2 [ 101.576237][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 101.601761][ T5994] lo speed is unknown, defaulting to 1000 [ 101.623585][ T5994] lo speed is unknown, defaulting to 1000 [ 101.643813][ T5994] lo speed is unknown, defaulting to 1000 [ 101.691337][ T5994] lo speed is unknown, defaulting to 1000 [ 101.716546][ T5994] lo speed is unknown, defaulting to 1000 [ 102.141776][ T6015] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 105.712165][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.611913][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 106.979358][ T6054] siw: device registration error -23 [ 108.640350][ T6066] openvswitch: netlink: Missing key (keys=40, expected=100) [ 111.381676][ T6073] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 111.686921][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.708990][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.968306][ T6091] delete_channel: no stack [ 115.106115][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 117.405919][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 117.935410][ T6128] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 118.467934][ T6124] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 119.624681][ T6139] 9pnet_fd: Insufficient options for proto=fd [ 121.427846][ T6161] /dev/nullb0: Can't open blockdev [ 122.226750][ T6168] process 'syz.1.70' launched './file0' with NULL argv: empty string added [ 122.296271][ T6171] Zero length message leads to an empty skb [ 123.975790][ T6184] 9pnet_fd: Insufficient options for proto=fd [ 126.342871][ T6201] ======================================================= [ 126.342871][ T6201] WARNING: The mand mount option has been deprecated and [ 126.342871][ T6201] and is ignored by this kernel. Remove the mand [ 126.342871][ T6201] option from the mount to silence this warning. [ 126.342871][ T6201] ======================================================= [ 128.125624][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 128.134496][ T6237] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 129.016306][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 133.033293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.268411][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.567767][ T6304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.449698][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.117'. [ 141.464030][ T6331] dlm: no local IP address has been set [ 141.469936][ T6331] dlm: cannot start dlm midcomms -107 [ 141.582663][ T6334] wireguard0: entered promiscuous mode [ 141.588856][ T6334] wireguard0: entered allmulticast mode [ 142.008720][ T6341] mmap: syz.0.111 (6341) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.828310][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.547374][ T5886] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 143.725271][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.766710][ T5886] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.779286][ T5886] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.793402][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.802980][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.839120][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.892116][ T6350] netlink: set zone limit has 4 unknown bytes [ 143.945325][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 143.960036][ T5886] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 143.989092][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.016455][ T10] usb 1-1: config 0 has no interface number 0 [ 144.045594][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.057972][ T5886] usb 3-1: USB disconnect, device number 6 [ 144.066413][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.095785][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.126369][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.153427][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.166737][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.177727][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.195870][ T10] usb 1-1: config 0 descriptor?? [ 144.219999][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.386102][ T6343] openvswitch: netlink: Message has 3 unknown bytes. [ 144.392907][ T6343] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.194538][ T5953] usb 1-1: USB disconnect, device number 3 [ 145.784677][ T5953] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 146.799179][ T6359] delete_channel: no stack [ 147.017957][ T5953] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.379571][ T6375] lo speed is unknown, defaulting to 1000 [ 147.386180][ T6375] lo speed is unknown, defaulting to 1000 [ 147.402814][ T6375] lo speed is unknown, defaulting to 1000 [ 147.474855][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 147.763429][ T6375] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.856576][ T5953] usb 5-1: no configurations [ 147.893336][ T5953] usb 5-1: can't read configurations, error -22 [ 147.919785][ T6375] lo speed is unknown, defaulting to 1000 [ 147.927596][ T6375] lo speed is unknown, defaulting to 1000 [ 147.937262][ T6375] lo speed is unknown, defaulting to 1000 [ 147.944252][ T6375] lo speed is unknown, defaulting to 1000 [ 147.951517][ T6375] lo speed is unknown, defaulting to 1000 [ 148.213054][ T6380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.131'. [ 148.224121][ T6380] dlm: no local IP address has been set [ 148.230180][ T6380] dlm: cannot start dlm midcomms -107 [ 148.237320][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.395256][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 148.980491][ T5953] usb 5-1: no configurations [ 148.997776][ T5953] usb 5-1: can't read configurations, error -22 [ 149.115432][ T5953] usb usb5-port1: attempt power cycle [ 149.498315][ T6396] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 149.555125][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.143930][ T5953] usb 5-1: device descriptor read/8, error -71 [ 153.299856][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.375476][ T6425] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 153.786013][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'. [ 153.797289][ T6431] dlm: no local IP address has been set [ 153.802889][ T6431] dlm: cannot start dlm midcomms -107 [ 154.384293][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 154.392377][ T5839] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.401007][ T5839] usb 4-1: config 0 has no interface number 0 [ 154.537131][ T5839] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.608004][ T5839] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 154.654168][ T5839] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.688571][ T5839] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.727697][ T5839] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 154.758719][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.799939][ T5839] usb 4-1: config 0 descriptor?? [ 154.835197][ T5953] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.844873][ T5839] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 155.007323][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 155.016580][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.048945][ T5953] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.323860][ T5839] usb 4-1: USB disconnect, device number 3 [ 156.443971][ T5953] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 156.630639][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.640767][ T5953] usb 2-1: Product: syz [ 156.646959][ T5839] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 156.655633][ T5953] usb 2-1: Manufacturer: syz [ 156.668323][ T5953] usb 2-1: SerialNumber: syz [ 156.720744][ T5953] usb 2-1: config 0 descriptor?? [ 156.781867][ T6450] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 157.813783][ T6448] delete_channel: no stack [ 158.492252][ T5886] usb 2-1: USB disconnect, device number 3 [ 159.615227][ T6469] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 159.999624][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.158'. [ 160.010908][ T6475] dlm: no local IP address has been set [ 160.016674][ T6475] dlm: cannot start dlm midcomms -107 [ 167.476036][ T6536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'. [ 167.487519][ T6536] dlm: no local IP address has been set [ 167.493159][ T6536] dlm: cannot start dlm midcomms -107 [ 182.143302][ T6625] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 182.763860][ T6632] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.776390][ T6633] delete_channel: no stack [ 183.935683][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.985268][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 184.389386][ T10] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 184.569935][ T10] usb 3-1: config 0 has no interface number 0 [ 184.686291][ T10] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 184.875169][ T10] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.925067][ T10] usb 3-1: config 0 interface 113 has no altsetting 0 [ 184.972315][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.987805][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 184.997627][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 185.007394][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.020653][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 185.021392][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 185.029991][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.073874][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.091323][ T24] usb 2-1: config 0 descriptor?? [ 185.112873][ T10] usb 3-1: Product: syz [ 185.118836][ T24] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 185.136019][ T24] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 185.325591][ T10] usb 3-1: Manufacturer: syz [ 185.330920][ T10] usb 3-1: SerialNumber: syz [ 185.341899][ T10] usb 3-1: config 0 descriptor?? [ 185.353628][ C0] usb 3-1: NFC: Urb failure (status -71) [ 185.360289][ T10] usb 3-1: NFC: Unable to get FW version [ 185.371960][ T10] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 185.620326][ T5886] usb 3-1: USB disconnect, device number 7 [ 185.825277][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.534890][ T6662] delete_channel: no stack [ 186.679668][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 186.718411][ T969] usb 2-1: USB disconnect, device number 4 [ 186.922686][ T24] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.934209][ T24] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.965251][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.755143][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.792951][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.912282][ T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 187.994909][ T24] usb 1-1: USB disconnect, device number 4 [ 188.034179][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.541498][ T6689] openvswitch: netlink: Message has 3 unknown bytes. [ 188.549468][ T6689] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.689922][ T6676] delete_channel: no stack [ 191.637021][ T6703] delete_channel: no stack [ 192.204397][ T6718] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 192.569410][ T6718] lo speed is unknown, defaulting to 1000 [ 194.365324][ T6730] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 194.923430][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.930083][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.745370][ T969] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.666745][ T969] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 196.690161][ T969] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.733440][ T969] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.765315][ T969] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.774424][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.857746][ T969] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.101638][ T969] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 197.151139][ T969] usb 2-1: USB disconnect, device number 5 [ 198.466444][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.658047][ T6768] delete_channel: no stack [ 199.940290][ T6775] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 205.386977][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 205.401533][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'. [ 205.505537][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'. [ 205.655479][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 205.821113][ T5904] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 205.831674][ T5904] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.852821][ T5904] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.071089][ T5904] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.089393][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.107357][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.137537][ T5904] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 206.785266][ T6834] xt_TPROXY: Can be used only with -p tcp or -p udp [ 207.344032][ T6829] delete_channel: no stack [ 207.648899][ T5904] usb 3-1: USB disconnect, device number 8 [ 207.745082][ T6840] openvswitch: netlink: Message has 3 unknown bytes. [ 207.752275][ T6840] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.424773][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 208.539807][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.681730][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'. [ 208.699802][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'. [ 209.263717][ T6858] netlink: set zone limit has 4 unknown bytes [ 210.587408][ T6870] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 210.955160][ T6877] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.808219][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.808249][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 211.814898][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 211.820293][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.885265][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 213.757653][ T6887] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 213.840778][ T6887] syz_tun: entered promiscuous mode [ 213.896871][ T6887] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.964530][ T6889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.276'. [ 214.025703][ T6891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.276'. [ 215.185143][ T5839] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 215.402313][ T5839] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 215.541411][ T5839] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.621287][ T5839] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.830985][ T5839] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.883567][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.938614][ T5839] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.987557][ T6909] 9pnet_fd: Insufficient options for proto=fd [ 216.036275][ T5839] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 216.132545][ T5839] usb 4-1: USB disconnect, device number 4 [ 216.154955][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.241408][ T6920] vlan0: entered promiscuous mode [ 216.595175][ T6924] openvswitch: netlink: Message has 3 unknown bytes. [ 216.602274][ T6924] openvswitch: netlink: Actions may not be safe on all matching packets [ 217.323597][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'. [ 217.344088][ T6928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.351810][ T6928] IPv6: NLM_F_CREATE should be set when creating new route [ 217.359140][ T6928] IPv6: NLM_F_CREATE should be set when creating new route [ 217.409575][ T6926] netlink: 'syz.4.288': attribute type 10 has an invalid length. [ 217.424357][ T6926] syz_tun: entered promiscuous mode [ 217.457501][ T6926] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.212238][ T6957] netlink: 892 bytes leftover after parsing attributes in process `syz.1.295'. [ 220.599005][ T6962] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.611073][ T6971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.301'. [ 221.630552][ T6971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.638160][ T6971] IPv6: NLM_F_CREATE should be set when creating new route [ 221.645625][ T6971] IPv6: NLM_F_CREATE should be set when creating new route [ 221.709503][ T6967] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 222.027987][ T6977] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 222.066367][ T6977] syz_tun: entered promiscuous mode [ 222.318781][ T6977] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.316581][ T6999] netlink: 892 bytes leftover after parsing attributes in process `syz.2.309'. [ 224.485124][ T5886] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 224.704554][ T7007] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.297518][ T5886] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.372595][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.458830][ T5886] usb 1-1: config 0 has no interface number 0 [ 225.479186][ T5886] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.518980][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.748645][ T5886] usb 1-1: config 0 descriptor?? [ 225.768387][ T5886] ldusb 1-1:0.55: Interrupt in endpoint not found [ 226.145557][ T5886] usb 1-1: USB disconnect, device number 5 [ 227.384234][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.647336][ T7027] 9pnet: Unknown protocol version 9p200 [ 227.946678][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 227.963372][ T7027] bond0: (slave syz_tun): Releasing backup interface [ 227.998883][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.026898][ T7027] bridge_slave_0: left allmulticast mode [ 228.032414][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.044129][ T7027] bridge_slave_0: left promiscuous mode [ 228.091904][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 228.711936][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.740210][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.796655][ T24] usb 5-1: config 0 descriptor?? [ 228.865221][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.938827][ T7027] bridge_slave_1: left allmulticast mode [ 228.944603][ T7027] bridge_slave_1: left promiscuous mode [ 229.026915][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 229.027735][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.070663][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 229.088597][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 229.111555][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 229.124071][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 229.138989][ T7027] bond0: (slave bond_slave_0): Releasing backup interface [ 229.139381][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.164057][ T5839] usb 3-1: config 0 descriptor?? [ 229.185242][ T5839] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 229.193076][ T5839] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 229.193184][ T7027] bond0: (slave bond_slave_1): Releasing backup interface [ 229.303677][ T7027] team0: Port device team_slave_0 removed [ 229.332333][ T3082] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.358085][ T7027] team0: Port device team_slave_1 removed [ 229.381533][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.398762][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.421968][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.439666][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.499476][ T3082] usb 4-1: Using ep0 maxpacket: 16 [ 229.521569][ T3082] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 229.551770][ T3082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.578525][ T3082] usb 4-1: Product: syz [ 229.597559][ T3082] usb 4-1: Manufacturer: syz [ 229.618083][ T3082] usb 4-1: SerialNumber: syz [ 229.659101][ T3082] usb 4-1: config 0 descriptor?? [ 230.877980][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 230.893877][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 230.918699][ T24] usb 5-1: USB disconnect, device number 6 [ 230.991870][ T5841] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 230.991944][ T5841] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 230.999646][ T5841] Bluetooth: hci1: Malformed LE Event: 0x0d [ 231.078894][ T5953] usb 3-1: USB disconnect, device number 9 [ 232.086059][ T5886] usb 4-1: USB disconnect, device number 5 [ 233.433331][ T7088] netlink: 892 bytes leftover after parsing attributes in process `syz.3.333'. [ 236.135221][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 236.448134][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 236.531204][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 236.614929][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 236.675202][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 236.684843][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.703142][ T5953] usb 4-1: config 0 descriptor?? [ 236.727180][ T5953] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 236.791273][ T5953] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 237.136829][ T5953] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.847099][ T5953] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.910852][ T5953] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 237.949876][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.987617][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 238.033161][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 238.063630][ T5953] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.082727][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.102145][ T5953] usb 2-1: Product: syz [ 238.116188][ T5953] usb 2-1: Manufacturer: syz [ 238.134281][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 238.144001][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 238.155422][ T5953] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 238.162585][ T5953] cdc_wdm 2-1:1.0: Unknown control protocol [ 238.378905][ T5953] usb 2-1: USB disconnect, device number 6 [ 239.539307][ T969] usb 4-1: USB disconnect, device number 6 [ 239.844637][ T7147] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 240.825536][ T7141] 9pnet_fd: Insufficient options for proto=fd [ 241.120282][ T7142] delete_channel: no stack [ 242.072764][ T7164] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 242.421079][ T7164] lo speed is unknown, defaulting to 1000 [ 242.955586][ T5839] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.239846][ T7175] dlm: no local IP address has been set [ 243.263920][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.354'. [ 243.285156][ T7175] dlm: cannot start dlm midcomms -107 [ 243.452269][ T5839] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 243.472761][ T5839] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.505275][ T5839] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.570569][ T5839] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.594916][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.742790][ T5839] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.784547][ T5839] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 243.894510][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.944044][ T5839] usb 2-1: USB disconnect, device number 7 [ 244.472322][ T7185] openvswitch: netlink: Message has 3 unknown bytes. [ 244.479349][ T7185] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.209548][ T5841] block nbd4: Receive control failed (result -107) [ 245.334786][ T7189] syz.4.361: attempt to access beyond end of device [ 245.334786][ T7189] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 245.403705][ T7192] nbd4: detected capacity change from 0 to 12 [ 245.444918][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 245.473577][ T7189] block nbd4: Dead connection, failed to find a fallback [ 245.480972][ T7189] block nbd4: shutting down sockets [ 245.488044][ T7189] I/O error, dev nbd4, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.490045][ T5881] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.497633][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=5, location=5 [ 245.497742][ T7189] I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.497837][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=4, location=4 [ 246.339274][ T7193] delete_channel: no stack [ 246.523988][ T5881] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.132958][ T5881] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.207179][ T5881] Buffer I/O error on dev nbd4, logical block 1, async page read [ 247.246995][ T5881] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.442730][ T5881] Buffer I/O error on dev nbd4, logical block 2, async page read [ 247.451303][ T5881] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.460830][ T5881] Buffer I/O error on dev nbd4, logical block 3, async page read [ 247.469780][ T5881] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.479005][ T5881] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.487154][ T5881] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.497433][ T5881] Buffer I/O error on dev nbd4, logical block 1, async page read [ 247.516260][ T5881] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.525495][ T5881] Buffer I/O error on dev nbd4, logical block 2, async page read [ 247.539683][ T5881] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.548912][ T5881] Buffer I/O error on dev nbd4, logical block 3, async page read [ 247.556931][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=3, location=3 [ 247.557825][ T5881] Buffer I/O error on dev nbd4, logical block 0, async page read [ 247.761179][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 248.199540][ T5881] Buffer I/O error on dev nbd4, logical block 1, async page read [ 248.210341][ T5881] ldm_validate_partition_table(): Disk read failed. [ 248.220887][ T5881] Dev nbd4: unable to read RDB block 0 [ 248.228078][ T5881] nbd4: unable to read partition table [ 248.238929][ T5881] nbd4: partition table beyond EOD, truncated [ 248.252473][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 248.254540][ T5881] ldm_validate_partition_table(): Disk read failed. [ 248.270727][ T5881] Dev nbd4: unable to read RDB block 0 [ 248.286628][ T5881] nbd4: unable to read partition table [ 248.292701][ T5881] nbd4: partition table beyond EOD, truncated [ 248.302968][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2 [ 248.433613][ T7213] 9pnet_fd: Insufficient options for proto=fd [ 248.441563][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 248.499388][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 248.519408][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 248.554202][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 248.588396][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 248.616865][ T7189] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 248.663325][ T7189] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 249.526563][ T5841] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 251.592091][ T3082] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.810727][ T3082] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 251.839173][ T3082] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.047024][ T3082] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.067390][ T3082] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.078776][ T3082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.111323][ T3082] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.996157][ T7249] openvswitch: netlink: Message has 3 unknown bytes. [ 253.003131][ T7249] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.581972][ T3082] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 253.616564][ T3082] usb 5-1: USB disconnect, device number 7 [ 253.913990][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.195106][ T7258] 9pnet_fd: Insufficient options for proto=fd [ 254.554020][ T7263] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 255.836251][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852451][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.898886][ T7285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.386'. [ 258.074729][ T7285] dlm: no local IP address has been set [ 258.096023][ T7285] dlm: cannot start dlm midcomms -107 [ 261.212633][ T7301] wireguard0: entered promiscuous mode [ 261.296167][ T7301] wireguard0: entered allmulticast mode [ 261.535124][ T3082] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 261.716608][ T3082] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 261.755158][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 261.763562][ T3082] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.797825][ T3082] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.829498][ T3082] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.857450][ T3082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.903564][ T3082] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.955629][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.975163][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.000574][ T3082] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 262.020774][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.055159][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.095282][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.122688][ T3082] usb 5-1: USB disconnect, device number 8 [ 262.131692][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.157370][ T7308] 9pnet_fd: Insufficient options for proto=fd [ 262.172851][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.189363][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.208472][ T24] usb 4-1: Product: syz [ 262.225139][ T24] usb 4-1: Manufacturer: syz [ 262.272232][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 262.295126][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 262.463141][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 262.474385][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 262.579266][ T7312] openvswitch: netlink: Message has 3 unknown bytes. [ 262.586390][ T7312] openvswitch: netlink: Actions may not be safe on all matching packets [ 263.198872][ T969] usb 4-1: USB disconnect, device number 7 [ 268.541198][ T7348] 9pnet_fd: Insufficient options for proto=fd [ 269.335230][ T7352] netlink: 860 bytes leftover after parsing attributes in process `syz.0.407'. [ 271.345459][ T7368] openvswitch: netlink: Message has 3 unknown bytes. [ 271.352383][ T7368] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.165966][ T7365] wireguard0: entered promiscuous mode [ 272.171507][ T7365] wireguard0: entered allmulticast mode [ 276.606614][ T7392] netlink: 860 bytes leftover after parsing attributes in process `syz.1.418'. [ 278.056641][ T7410] openvswitch: netlink: Message has 3 unknown bytes. [ 278.063585][ T7410] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.690920][ T5953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 279.901916][ T5953] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.920846][ T5953] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.963357][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.973699][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 279.994295][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 280.017793][ T5953] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.032053][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.054717][ T5953] usb 1-1: Product: syz [ 280.067941][ T5953] usb 1-1: Manufacturer: syz [ 280.117968][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 280.151437][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 280.163032][ T5953] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 280.191771][ T5953] cdc_wdm 1-1:1.0: Unknown control protocol [ 280.524698][ T5886] usb 1-1: USB disconnect, device number 6 [ 280.961545][ T5953] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 282.395179][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 282.416707][ T5953] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.428049][ T5953] usb 2-1: config 0 has no interface number 0 [ 282.435110][ T5953] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.446329][ T5953] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 282.458158][ T5953] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.472708][ T5953] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.489809][ T5953] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.506405][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.525396][ T5953] usb 2-1: config 0 descriptor?? [ 282.546577][ T5953] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 282.652461][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 282.772015][ T5953] usb 2-1: USB disconnect, device number 8 [ 283.246111][ T5953] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 283.491988][ T7436] netlink: 860 bytes leftover after parsing attributes in process `syz.4.430'. [ 285.516411][ T7456] openvswitch: netlink: Message has 3 unknown bytes. [ 285.523430][ T7456] openvswitch: netlink: Actions may not be safe on all matching packets [ 286.473116][ T7450] wireguard0: entered promiscuous mode [ 286.526055][ T7450] wireguard0: entered allmulticast mode [ 287.225732][ T7471] openvswitch: netlink: Message has 3 unknown bytes. [ 287.232571][ T7471] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.315445][ T7472] siw: device registration error -23 [ 288.335230][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 289.905214][ T969] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 290.475399][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 290.491723][ T969] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 290.507909][ T969] usb 4-1: config 0 has no interface number 0 [ 290.517396][ T969] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.539629][ T969] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 290.825394][ T969] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.925338][ T969] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.116074][ T969] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.205149][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.231005][ T969] usb 4-1: config 0 descriptor?? [ 291.267030][ T969] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 291.632677][ T10] usb 4-1: USB disconnect, device number 8 [ 291.643051][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 291.975343][ T7514] siw: device registration error -23 [ 292.573060][ T7515] wireguard0: entered promiscuous mode [ 292.581865][ T7515] wireguard0: entered allmulticast mode [ 294.065307][ T7526] syz.0.455: attempt to access beyond end of device [ 294.065307][ T7526] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 294.079633][ T7526] syz.0.455: attempt to access beyond end of device [ 294.079633][ T7526] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 294.094364][ T7526] Mount JFS Failure: -5 [ 295.365942][ T5841] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 296.011794][ T7543] netlink: 80 bytes leftover after parsing attributes in process `syz.4.462'. [ 296.588569][ T7547] openvswitch: netlink: Message has 3 unknown bytes. [ 296.595455][ T7547] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.805075][ T5886] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 297.125272][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 297.148600][ T5886] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 297.157197][ T5886] usb 3-1: config 0 has no interface number 0 [ 297.164314][ T5886] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.182077][ T5886] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 297.194307][ T5886] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.207633][ T5886] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.236837][ T5886] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 297.255279][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.294704][ T5886] usb 3-1: config 0 descriptor?? [ 297.340032][ T5886] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 298.181218][ T5953] usb 3-1: USB disconnect, device number 10 [ 298.212390][ T5953] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 298.240918][ T7561] openvswitch: netlink: Message has 3 unknown bytes. [ 298.251255][ T7561] openvswitch: netlink: Actions may not be safe on all matching packets [ 298.313860][ T5841] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 298.446098][ T5841] block nbd1: Receive control failed (result -107) [ 298.565191][ T7570] nbd1: detected capacity change from 0 to 12 [ 298.606087][ T7567] block nbd1: Dead connection, failed to find a fallback [ 298.613891][ T7567] block nbd1: shutting down sockets [ 298.636027][ T7567] blk_print_req_error: 97 callbacks suppressed [ 298.637276][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.654603][ T7567] buffer_io_error: 90 callbacks suppressed [ 298.654698][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.705758][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.728532][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.753945][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.775251][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 298.811491][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.078713][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.093274][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.113732][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.123967][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.137489][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.872679][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.895627][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 299.903773][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.102251][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.275361][ T7567] ldm_validate_partition_table(): Disk read failed. [ 300.282495][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.292584][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.300990][ T7567] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.315498][ T7567] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.324687][ T7567] Dev nbd1: unable to read RDB block 0 [ 300.334640][ T7567] nbd1: unable to read partition table [ 300.342865][ T7567] nbd1: partition table beyond EOD, truncated [ 300.350647][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 300.392009][ T5881] ldm_validate_partition_table(): Disk read failed. [ 301.035967][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=5, location=5 [ 301.104085][ T5881] Dev nbd1: unable to read RDB block 0 [ 301.117728][ T5881] nbd1: unable to read partition table [ 301.123588][ T5881] nbd1: partition table beyond EOD, truncated [ 301.139602][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 301.154126][ T5881] ldm_validate_partition_table(): Disk read failed. [ 301.200749][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 301.218293][ T5881] Dev nbd1: unable to read RDB block 0 [ 301.240227][ T5881] nbd1: unable to read partition table [ 301.396063][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 301.406408][ T5881] nbd1: partition table beyond EOD, truncated [ 301.426722][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 301.436621][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 301.446636][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 301.456042][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 301.472905][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 301.486938][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 301.505159][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 301.556333][ T7567] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 301.596289][ T7567] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 301.766302][ T7583] wireguard0: entered promiscuous mode [ 301.774335][ T7583] wireguard0: entered allmulticast mode [ 304.057429][ T5841] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 304.115115][ T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 304.288120][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 304.301373][ T10] usb 3-1: config 0 has no interface number 0 [ 304.321026][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.348695][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 304.365919][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 304.380720][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 304.394530][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 304.407916][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.421954][ T969] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 304.435058][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 304.444349][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.480380][ T10] usb 3-1: config 0 descriptor?? [ 304.487659][ T7607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.531482][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 304.577443][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 304.609121][ T969] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 304.618969][ T969] usb 2-1: config 0 has no interface number 0 [ 304.629385][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.649614][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 304.837666][ T969] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.850122][ T7607] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 304.873497][ T969] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.889854][ T969] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 304.892265][ T3082] usb 3-1: USB disconnect, device number 11 [ 304.909293][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.922301][ T3082] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 304.949652][ T969] usb 2-1: config 0 descriptor?? [ 304.974895][ T969] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 305.347551][ T969] usb 2-1: USB disconnect, device number 9 [ 305.548013][ T7624] netlink: set zone limit has 4 unknown bytes [ 305.714251][ T969] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 306.505255][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 306.817222][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 306.834113][ T7632] wireguard0: entered promiscuous mode [ 306.839747][ T7632] wireguard0: entered allmulticast mode [ 306.847159][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 306.857324][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 306.868370][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 306.876449][ T7637] openvswitch: netlink: Message has 3 unknown bytes. [ 306.878237][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 306.884868][ T7637] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.896187][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.978953][ T24] usb 1-1: config 0 descriptor?? [ 307.282182][ T24] hdpvr 1-1:0.0: unexpected answer of status request, len 0 [ 307.302937][ T24] hdpvr 1-1:0.0: device init failed [ 307.312559][ T24] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 308.253268][ T5841] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 308.526966][ T7653] capability: warning: `syz.1.496' uses deprecated v2 capabilities in a way that may be insecure [ 309.438308][ T969] usb 1-1: USB disconnect, device number 7 [ 309.857563][ T7663] 9pnet_fd: Insufficient options for proto=fd [ 310.804626][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.878288][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.887438][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.896739][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.906161][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.914161][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.044704][ T7669] lo speed is unknown, defaulting to 1000 [ 311.175503][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 311.219162][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 311.240197][ T24] usb 1-1: config 0 has no interface number 0 [ 311.255093][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.463124][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 311.477845][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.493581][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.517853][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 311.545272][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.569129][ T7680] openvswitch: netlink: Message has 3 unknown bytes. [ 311.576001][ T7680] openvswitch: netlink: Actions may not be safe on all matching packets [ 311.622230][ T24] usb 1-1: config 0 descriptor?? [ 311.650701][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 311.659221][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 311.906990][ T5953] usb 1-1: USB disconnect, device number 8 [ 311.966374][ T5953] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 312.189668][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.211481][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.222098][ T7669] bridge_slave_0: entered allmulticast mode [ 312.261248][ T7669] bridge_slave_0: entered promiscuous mode [ 312.296195][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.303603][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.344757][ T7669] bridge_slave_1: entered allmulticast mode [ 312.354737][ T7669] bridge_slave_1: entered promiscuous mode [ 312.557037][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.626207][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.735077][ T5841] Bluetooth: hci5: command tx timeout [ 314.752484][ T7669] team0: Port device team_slave_0 added [ 314.785739][ T7669] team0: Port device team_slave_1 added [ 315.007981][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.034254][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.085897][ T7694] syz.0.507: attempt to access beyond end of device [ 315.085897][ T7694] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 315.115451][ T7694] syz.0.507: attempt to access beyond end of device [ 315.115451][ T7694] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 315.129852][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.148538][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.155761][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 315.166280][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.192723][ T7694] syz.0.507: attempt to access beyond end of device [ 315.192723][ T7694] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 315.225270][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 315.694039][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.730901][ T7694] syz.0.507: attempt to access beyond end of device [ 315.730901][ T7694] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 315.856229][ T7694] syz.0.507: attempt to access beyond end of device [ 315.856229][ T7694] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 315.987563][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 316.000075][ T7694] syz.0.507: attempt to access beyond end of device [ 316.000075][ T7694] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 316.015358][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 316.028871][ T7694] syz.0.507: attempt to access beyond end of device [ 316.028871][ T7694] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 316.042035][ T7694] syz.0.507: attempt to access beyond end of device [ 316.042035][ T7694] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 316.055167][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 316.064870][ T7694] syz.0.507: attempt to access beyond end of device [ 316.064870][ T7694] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 316.079019][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 316.090968][ T7694] syz.0.507: attempt to access beyond end of device [ 316.090968][ T7694] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 316.104154][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 316.116065][ T7694] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 316.125803][ T7694] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 316.223820][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 316.272349][ T7669] hsr_slave_0: entered promiscuous mode [ 316.509556][ T7669] hsr_slave_1: entered promiscuous mode [ 316.526594][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.536975][ T7669] Cannot create hsr debugfs directory [ 317.266214][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.273148][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.280804][ T5841] Bluetooth: hci5: command tx timeout [ 318.269982][ T7724] netlink: 80 bytes leftover after parsing attributes in process `syz.1.516'. [ 319.115471][ T7731] overlayfs: failed to resolve './file0': -2 [ 319.327504][ T5841] Bluetooth: hci5: command tx timeout [ 320.920116][ T7669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.068689][ T7669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.249178][ T7669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.336258][ T7669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.405239][ T5841] Bluetooth: hci5: command tx timeout [ 322.483908][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.749774][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.682556][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.689852][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.703797][ T7763] openvswitch: netlink: Message has 3 unknown bytes. [ 323.710744][ T7763] openvswitch: netlink: Actions may not be safe on all matching packets [ 323.879419][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.886587][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.958198][ T7765] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 324.156024][ T7770] vlan0: entered promiscuous mode [ 325.083924][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.919404][ T7790] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 327.789887][ T7669] veth0_vlan: entered promiscuous mode [ 327.887353][ T7669] veth1_vlan: entered promiscuous mode [ 327.994526][ T7669] veth0_macvtap: entered promiscuous mode [ 328.061262][ T7669] veth1_macvtap: entered promiscuous mode [ 329.199492][ T7810] dns_resolver: Unsupported content type (8) [ 329.220409][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.325667][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.373094][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.399877][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.439808][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.460458][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.470417][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.471259][ T5841] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 329.493682][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.506419][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.775167][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.900123][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.163988][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.368676][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.395365][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.215099][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.238689][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.270068][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.282074][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.326288][ T7806] lo speed is unknown, defaulting to 1000 [ 331.344305][ T7669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.353766][ T7669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.365096][ T7669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.379629][ T7669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.336480][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.425155][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.316280][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.338245][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.518284][ T5841] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 345.288433][ T7932] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.568'. [ 350.769718][ T7963] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 351.314078][ T7961] overlayfs: conflicting lowerdir path [ 352.628292][ T7979] netlink: 80 bytes leftover after parsing attributes in process `syz.2.581'. [ 353.927321][ T7994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.928652][ T7994] netlink: 'syz.4.586': attribute type 10 has an invalid length. [ 354.123064][ T7996] geneve2: entered promiscuous mode [ 354.128549][ T7996] geneve2: entered allmulticast mode [ 359.590584][ T8033] netlink: 'syz.4.598': attribute type 10 has an invalid length. [ 359.718588][ T8033] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.845181][ T5848] Bluetooth: hci5: command 0x0405 tx timeout [ 363.136294][ T8065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.606'. [ 367.011050][ T8094] syz.5.614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 372.586667][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 377.985033][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 378.752295][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797390][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.071563][ T3082] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 380.865211][ T3082] usb 1-1: Using ep0 maxpacket: 16 [ 381.187910][ T3082] usb 1-1: device descriptor read/all, error -71 [ 381.191372][ T5848] Bluetooth: hci5: link tx timeout [ 381.199727][ T5848] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.225006][ T5841] Bluetooth: hci5: link tx timeout [ 381.230632][ T5841] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.267592][ T5841] Bluetooth: hci5: link tx timeout [ 381.272822][ T5841] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.280636][ T5841] Bluetooth: hci5: link tx timeout [ 381.285808][ T5841] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 382.464460][ T8210] lo speed is unknown, defaulting to 1000 [ 382.471176][ T8210] lo speed is unknown, defaulting to 1000 [ 382.554840][ T8210] lo speed is unknown, defaulting to 1000 [ 383.327576][ T8210] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 383.565681][ T5841] Bluetooth: hci5: command 0x0405 tx timeout [ 383.591493][ T8210] lo speed is unknown, defaulting to 1000 [ 383.599196][ T8210] lo speed is unknown, defaulting to 1000 [ 383.607977][ T8210] lo speed is unknown, defaulting to 1000 [ 383.617225][ T8210] lo speed is unknown, defaulting to 1000 [ 383.627981][ T8210] lo speed is unknown, defaulting to 1000 [ 383.639157][ T8210] lo speed is unknown, defaulting to 1000 [ 385.032005][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 385.259566][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 385.288074][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 385.307892][ T10] usb 3-1: config 0 has no interface number 0 [ 385.333586][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.371587][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 385.406723][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.454346][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 385.490547][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 385.539540][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.565104][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.604540][ T10] usb 3-1: config 0 descriptor?? [ 385.630933][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 385.642476][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 386.679926][ T3082] usb 3-1: USB disconnect, device number 12 [ 386.698461][ T3082] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 386.955441][ T52] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 387.156895][ T52] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 387.351346][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.032362][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.042279][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 388.051235][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.170212][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.281127][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 388.464341][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.479441][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 388.488625][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 388.502799][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.541075][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.288056][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 389.303904][ T52] usb 2-1: unable to read config index 4 descriptor/start: -71 [ 389.328882][ T52] usb 2-1: can't read configurations, error -71 [ 390.156813][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 390.330216][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.375241][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.423025][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.504011][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.616237][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.936892][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.024016][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 391.085035][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.118215][ T24] usb 1-1: Product: syz [ 391.133341][ T24] usb 1-1: Manufacturer: syz [ 391.161717][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 391.232364][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 391.352142][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 391.425733][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 391.473092][ T24] usb 1-1: USB disconnect, device number 11 [ 391.720821][ T52] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 392.545061][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 392.597136][ T52] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 392.632954][ T52] usb 2-1: config 0 has no interface number 0 [ 392.675013][ T52] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.749319][ T52] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 392.778965][ T52] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.815026][ T52] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 392.845944][ T52] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.875384][ T52] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 392.893061][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.074279][ T52] usb 2-1: config 0 descriptor?? [ 393.098887][ T52] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 394.708725][ T10] usb 2-1: USB disconnect, device number 12 [ 394.750510][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 397.218968][ T5848] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 397.830206][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 397.871403][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 398.345051][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 399.121125][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.165743][ T10] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 399.189007][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.277365][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 399.355144][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 399.397279][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.437345][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.455081][ T10] usb 6-1: Product: syz [ 399.469023][ T10] usb 6-1: Manufacturer: syz [ 399.503704][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 399.534659][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 399.550849][ T10] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 399.757006][ T10] usb 6-1: USB disconnect, device number 2 [ 399.855081][ T52] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 399.957935][ T8349] bio_check_eod: 2 callbacks suppressed [ 399.957977][ T8349] syz.1.689: attempt to access beyond end of device [ 399.957977][ T8349] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 399.979104][ T8349] syz.1.689: attempt to access beyond end of device [ 399.979104][ T8349] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 399.993337][ T8349] Mount JFS Failure: -5 [ 400.305716][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 400.498996][ T52] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 400.507976][ T52] usb 1-1: config 0 has no interface number 0 [ 400.514239][ T52] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.526665][ T52] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 400.538835][ T52] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.556138][ T52] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 400.576260][ T52] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.614381][ T52] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 400.652799][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.682627][ T52] usb 1-1: config 0 descriptor?? [ 400.693961][ T8353] 9pnet: Unknown protocol version 9p200 [ 400.769166][ T52] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 400.790490][ T8353] bond0: (slave syz_tun): Releasing backup interface [ 401.002555][ T8353] bridge_slave_0: left allmulticast mode [ 401.020823][ T8353] bridge_slave_0: left promiscuous mode [ 401.035828][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.749073][ T8353] bridge_slave_1: left allmulticast mode [ 401.754802][ T8353] bridge_slave_1: left promiscuous mode [ 401.761071][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.781931][ T8353] bond0: (slave bond_slave_0): Releasing backup interface [ 402.244339][ T5953] usb 1-1: USB disconnect, device number 12 [ 402.452059][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 402.472102][ T5953] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 402.533968][ T8353] bond0: (slave bond_slave_1): Releasing backup interface [ 403.230584][ T8353] team0: Port device team_slave_0 removed [ 403.309495][ T8353] team0: Port device team_slave_1 removed [ 403.343434][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.368374][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.381592][ T8385] sctp: [Deprecated]: syz.4.702 (pid 8385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.381592][ T8385] Use struct sctp_sack_info instead [ 403.400467][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.446648][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.508474][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 403.612045][ T8360] team0: Mode changed to "loadbalance" [ 403.655030][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 404.201927][ T8394] syz.0.704: attempt to access beyond end of device [ 404.201927][ T8394] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 404.215989][ T8394] syz.0.704: attempt to access beyond end of device [ 404.215989][ T8394] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 404.229386][ T8394] Mount JFS Failure: -5 [ 410.075245][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 411.339297][ T5848] Bluetooth: hci5: command 0x0405 tx timeout [ 411.683742][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 411.696617][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 411.704785][ T10] usb 2-1: config 0 has no interface number 0 [ 411.714203][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 411.725705][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 411.737916][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.752156][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 411.762618][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.784486][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.794091][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.846324][ T10] usb 2-1: config 0 descriptor?? [ 411.858714][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 411.923743][ T8457] bond0: entered promiscuous mode [ 411.931720][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 411.939563][ T8457] bond_slave_0: entered promiscuous mode [ 411.951144][ T8457] bond_slave_1: entered promiscuous mode [ 411.958850][ T8457] dummy0: entered promiscuous mode [ 411.964403][ T8457] bond0: entered allmulticast mode [ 411.971194][ T8457] bond_slave_0: entered allmulticast mode [ 411.977529][ T8457] bond_slave_1: entered allmulticast mode [ 411.984593][ T8457] syz_tun: entered allmulticast mode [ 411.990906][ T8457] dummy0: entered allmulticast mode [ 412.907582][ T52] usb 2-1: USB disconnect, device number 13 [ 412.931760][ T52] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 413.162182][ T8468] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.727'. [ 413.171665][ T8468] netlink: zone id is out of range [ 413.181490][ T8468] netlink: zone id is out of range [ 413.189902][ T8468] netlink: get zone limit has 8 unknown bytes [ 413.488261][ T5953] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 414.315070][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 414.499086][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 414.515697][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 414.530407][ T5953] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 414.539926][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.570595][ T5953] usb 1-1: Product: syz [ 414.574829][ T5953] usb 1-1: Manufacturer: syz [ 414.631201][ T5953] usb 1-1: SerialNumber: syz [ 415.529492][ T5953] usb 1-1: config 0 descriptor?? [ 415.786006][ T5953] appledisplay 1-1:0.0: Error while getting initial brightness: -90 [ 415.807099][ T5953] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -90 [ 416.032812][ T5953] usb 1-1: USB disconnect, device number 13 [ 417.096749][ T5886] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 418.415111][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 418.423919][ T5886] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 418.432355][ T5886] usb 2-1: config 0 has no interface number 0 [ 418.439041][ T5886] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 418.450319][ T5886] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 418.462387][ T5886] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.765282][ T5886] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 418.780098][ T5886] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.793656][ T5886] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.835058][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.868771][ T5886] usb 2-1: config 0 descriptor?? [ 418.893178][ T5886] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.448247][ T969] usb 2-1: USB disconnect, device number 14 [ 420.049811][ T969] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 420.547255][ T8546] vlan2: entered promiscuous mode [ 420.573198][ T8546] bond0: entered promiscuous mode [ 424.765962][ T8575] syz.4.762 uses obsolete (PF_INET,SOCK_PACKET) [ 426.295308][ T969] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 427.415662][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 427.435285][ T969] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 427.451704][ T969] usb 2-1: config 0 has no interface number 0 [ 427.458883][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.615034][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 428.627369][ T969] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.638415][ T969] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 428.650726][ T969] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.949160][ T969] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 429.389539][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.401023][ T969] usb 2-1: config 0 descriptor?? [ 429.796192][ T969] usb 2-1: can't set config #0, error -71 [ 430.495010][ T969] usb 2-1: USB disconnect, device number 15 [ 431.556104][ T8633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.101613][ T8645] syz.1.783: attempt to access beyond end of device [ 432.101613][ T8645] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 432.115595][ T8645] syz.1.783: attempt to access beyond end of device [ 432.115595][ T8645] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 432.130283][ T8645] Mount JFS Failure: -5 [ 432.799021][ T8647] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 433.254374][ T8647] lo speed is unknown, defaulting to 1000 [ 433.389654][ T8647] lo speed is unknown, defaulting to 1000 [ 434.367374][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 434.809411][ T8654] delete_channel: no stack [ 435.839808][ T3082] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 436.035311][ T3082] usb 1-1: Using ep0 maxpacket: 8 [ 436.056234][ T3082] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 436.069469][ T3082] usb 1-1: config 0 has no interface number 0 [ 436.241336][ T3082] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.263441][ T3082] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 436.280173][ T3082] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.293197][ T3082] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 436.359589][ T3082] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.375777][ T3082] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 436.387553][ T3082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.140223][ T3082] usb 1-1: config 0 descriptor?? [ 437.176355][ T3082] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 437.654139][ T8681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.481773][ T969] usb 1-1: USB disconnect, device number 14 [ 438.596807][ T969] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 440.183817][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.233665][ T8716] delete_channel: no stack [ 440.425554][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.807013][ T8735] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 443.601410][ T8735] lo speed is unknown, defaulting to 1000 [ 443.622434][ T8735] lo speed is unknown, defaulting to 1000 [ 443.965628][ T969] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 444.355046][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 444.362607][ T969] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 444.371280][ T969] usb 2-1: config 0 has no interface number 0 [ 444.377891][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.396474][ T969] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 444.432595][ T969] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 444.478655][ T969] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 444.506521][ T969] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.528745][ T969] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 444.539724][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.547988][ T5886] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 444.565419][ T8754] delete_channel: no stack [ 444.664764][ T969] usb 2-1: config 0 descriptor?? [ 444.708350][ T969] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 444.795018][ T5886] usb 1-1: device descriptor read/64, error -71 [ 445.191583][ T3082] usb 2-1: USB disconnect, device number 16 [ 445.803090][ T3082] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 445.809878][ T5886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 445.947387][ T5886] usb 1-1: device descriptor read/64, error -71 [ 446.148751][ T5886] usb usb1-port1: attempt power cycle [ 449.315022][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 449.475357][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 449.492638][ T5884] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 449.518175][ T5884] usb 2-1: config 0 has no interface number 0 [ 449.541800][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.589110][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 449.628441][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.664312][ T5884] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 449.700551][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.725434][ T31] INFO: task syz-executor:5834 blocked for more than 143 seconds. [ 449.733277][ T31] Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 [ 450.375031][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.383892][ T31] task:syz-executor state:D stack:20840 pid:5834 tgid:5834 ppid:1 task_flags:0x400140 flags:0x00004004 [ 450.395954][ T31] Call Trace: [ 450.399277][ T31] [ 450.402249][ T31] __schedule+0x1b9a/0x5250 [ 450.406937][ T31] ? schedule+0x163/0x360 [ 450.411350][ T31] ? __pfx___schedule+0x10/0x10 [ 450.416321][ T31] ? schedule+0x90/0x360 [ 450.439085][ T31] ? schedule+0x90/0x360 [ 450.447173][ T31] schedule+0x163/0x360 [ 450.451497][ T31] v9fs_evict_inode+0x17e/0x370 [ 450.452744][ T5884] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 450.462378][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 450.481468][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 450.487590][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 450.493285][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 450.495002][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.499520][ T31] evict+0x4f9/0x9b0 [ 450.511120][ T31] ? __pfx_evict+0x10/0x10 [ 450.516003][ T31] ? iput+0x713/0xa50 [ 450.520444][ T31] __dentry_kill+0x20d/0x630 [ 450.528556][ T31] ? dput+0x37/0x2b0 [ 450.532894][ T31] dput+0x19f/0x2b0 [ 450.537389][ T31] shrink_dcache_for_umount+0xb4/0x180 [ 450.541081][ T5884] usb 2-1: config 0 descriptor?? [ 450.543411][ T31] generic_shutdown_super+0x6a/0x2d0 [ 450.559655][ T31] kill_anon_super+0x3b/0x70 [ 450.564375][ T31] v9fs_kill_super+0x4c/0x90 [ 450.570402][ T5884] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 450.575002][ T31] deactivate_locked_super+0xc4/0x130 [ 450.585615][ T31] cleanup_mnt+0x422/0x4c0 [ 450.590675][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 450.607646][ T31] task_work_run+0x251/0x310 [ 450.612322][ T31] ? __pfx_task_work_run+0x10/0x10 [ 450.635101][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 SYZFAIL: failed to send rpc fd=3 want=3104 sent=0 n=-1 (errno 32: Broken pipe) [ 450.640922][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 450.648787][ T31] do_syscall_64+0x100/0x230 [ 450.653492][ T31] ? clear_bhb_loop+0x45/0xa0 [ 450.658293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.671296][ T31] RIP: 0033:0x7fcb4bb8f497 [ 450.676506][ T31] RSP: 002b:00007ffd10d84468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 450.689778][ T31] RAX: 0000000000000000 RBX: 00007fcb4bc10854 RCX: 00007fcb4bb8f497 [ 450.705427][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd10d84520 [ 450.714986][ T31] RBP: 00007ffd10d84520 R08: 0000000000000000 R09: 0000000000000000 [ 450.737743][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd10d855b0 [ 450.780854][ T31] R13: 00007fcb4bc10854 R14: 0000000000047a2c R15: 00007ffd10d855f0 [ 450.828867][ T31] [ 450.839108][ T31] [ 450.839108][ T31] Showing all locks held in the system: [ 450.865083][ T31] 1 lock held by khungtaskd/31: [ 451.622188][ T31] #0: ffffffff8ed3f180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 451.632260][ T31] 2 locks held by kworker/u8:4/63: [ 451.637494][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 451.649295][ T31] #1: ffffc90001557c60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 451.661197][ T31] 5 locks held by kworker/u8:5/752: [ 451.666492][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 451.677491][ T31] #1: ffffc900032f7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 451.688986][ T31] #2: ffffffff900f6710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 451.698568][ T31] #3: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 451.708026][ T31] #4: ffff88803547d4e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xba/0x1e0 [ 451.718663][ T31] 2 locks held by getty/5586: [ 451.723377][ T31] #0: ffff888031b260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 451.733527][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 451.743811][ T31] 1 lock held by syz-executor/5827: [ 451.749271][ T31] 1 lock held by syz-executor/5829: [ 451.754492][ T31] #0: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 451.765526][ T31] 1 lock held by syz-executor/5834: [ 451.771036][ T31] #0: ffff88802a32a0e0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 451.781945][ T31] 1 lock held by syz-executor/5835: [ 451.787257][ T31] 3 locks held by kworker/u8:11/6511: [ 451.793293][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 451.815084][ T31] #1: ffffc9001a38fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 451.835093][ T31] #2: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 451.844193][ T31] 1 lock held by syz.1.832/8811: [ 451.852134][ T31] #0: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 451.863519][ T31] [ 451.869296][ T31] ============================================= [ 451.869296][ T31] [ 452.075266][ T31] NMI backtrace for cpu 1 [ 452.075304][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 452.075330][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.075342][ T31] Call Trace: [ 452.075351][ T31] [ 452.075360][ T31] dump_stack_lvl+0x241/0x360 [ 452.075400][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.075431][ T31] ? __pfx__printk+0x10/0x10 [ 452.075473][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 452.075514][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 452.075543][ T31] ? _printk+0xd5/0x120 [ 452.075572][ T31] ? __wake_up_klogd+0xcc/0x110 [ 452.075602][ T31] ? __pfx__printk+0x10/0x10 [ 452.075635][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.075657][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 452.075693][ T31] watchdog+0x1058/0x10a0 [ 452.075716][ T31] ? watchdog+0x1ea/0x10a0 [ 452.075742][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.075762][ T31] kthread+0x7b7/0x940 [ 452.075790][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.075811][ T31] ? __pfx_kthread+0x10/0x10 [ 452.075834][ T31] ? __pfx_kthread+0x10/0x10 [ 452.075859][ T31] ? __pfx_kthread+0x10/0x10 [ 452.075884][ T31] ? __pfx_kthread+0x10/0x10 [ 452.075908][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.075927][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 452.075949][ T31] ? __pfx_kthread+0x10/0x10 [ 452.075975][ T31] ret_from_fork+0x4b/0x80 [ 452.075994][ T31] ? __pfx_kthread+0x10/0x10 [ 452.076020][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.076058][ T31] [ 452.076074][ T31] Sending NMI from CPU 1 to CPUs 0: [ 452.239655][ C0] NMI backtrace for cpu 0 [ 452.239674][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 452.239694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.239706][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 452.239731][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 02 15 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 452.239746][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c2 [ 452.239762][ C0] RAX: 48301a3f163f7300 RBX: ffffffff8197d17e RCX: ffffffff8c333afc [ 452.239775][ C0] RDX: 0000000000000001 RSI: ffffffff8e6ab01c RDI: ffffffff8ca1ee40 [ 452.239788][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 452.239801][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: 1ffffffff1d40fc6 [ 452.239820][ C0] R13: 1ffffffff1d52cb8 R14: 0000000000000000 R15: dffffc0000000000 [ 452.239832][ C0] FS: 0000000000000000(0000) GS:ffff888124f80000(0000) knlGS:0000000000000000 [ 452.239845][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.239857][ C0] CR2: 0000200000003000 CR3: 0000000035726000 CR4: 00000000003526f0 [ 452.239872][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 452.239881][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 452.239891][ C0] Call Trace: [ 452.239899][ C0] [ 452.239905][ C0] default_idle+0x13/0x20 [ 452.239926][ C0] default_idle_call+0x74/0xb0 [ 452.239948][ C0] do_idle+0x22e/0x5d0 [ 452.239972][ C0] ? __pfx_do_idle+0x10/0x10 [ 452.239989][ C0] ? rest_init+0x31/0x300 [ 452.240016][ C0] ? do_idle+0x5/0x5d0 [ 452.240032][ C0] ? rest_init+0x31/0x300 [ 452.240054][ C0] cpu_startup_entry+0x42/0x60 [ 452.240073][ C0] rest_init+0x2dc/0x300 [ 452.240095][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 452.240121][ C0] start_kernel+0x484/0x510 [ 452.240142][ C0] x86_64_start_reservations+0x2a/0x30 [ 452.240164][ C0] x86_64_start_kernel+0x66/0x70 [ 452.240185][ C0] common_startup_64+0x13e/0x147 [ 452.240217][ C0] [ 452.496257][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 452.503184][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 452.514511][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.524611][ T31] Call Trace: [ 452.527920][ T31] [ 452.530882][ T31] dump_stack_lvl+0x241/0x360 [ 452.535618][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.540919][ T31] ? __pfx__printk+0x10/0x10 [ 452.545580][ T31] ? vscnprintf+0x5d/0x90 [ 452.550043][ T31] panic+0x349/0x880 [ 452.553980][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 452.559399][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 452.565620][ T31] ? __pfx_panic+0x10/0x10 [ 452.570090][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 452.575685][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 452.581980][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 452.588200][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 452.594403][ T31] watchdog+0x1097/0x10a0 [ 452.598771][ T31] ? watchdog+0x1ea/0x10a0 [ 452.603221][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.607925][ T31] kthread+0x7b7/0x940 [ 452.612035][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.616720][ T31] ? __pfx_kthread+0x10/0x10 [ 452.621319][ T31] ? __pfx_kthread+0x10/0x10 [ 452.625920][ T31] ? __pfx_kthread+0x10/0x10 [ 452.630521][ T31] ? __pfx_kthread+0x10/0x10 [ 452.635121][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.640325][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 452.645532][ T31] ? __pfx_kthread+0x10/0x10 [ 452.650133][ T31] ret_from_fork+0x4b/0x80 [ 452.654555][ T31] ? __pfx_kthread+0x10/0x10 [ 452.659159][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.663949][ T31] [ 452.667243][ T31] Kernel Offset: disabled [ 452.671579][ T31] Rebooting in 86400 seconds..