last executing test programs: 15.007916664s ago: executing program 3 (id=1438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ptrace$getregs(0xe, 0xffffffffffffffff, 0xc, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r9, &(0x7f00000001c0)=""/200, 0xc8, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000140), &(0x7f0000000080)=0x4) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x4, 0xfffffffffffffffd) vmsplice(r11, &(0x7f0000000300)=[{&(0x7f0000000100)="df", 0x1}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) 14.019518429s ago: executing program 3 (id=1439): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sysinfo(&(0x7f0000000000)=""/196) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0xc, "3eccd8000000000000000040000000040100"}) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000640)) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) accept$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x0, @initdev}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 11.246184444s ago: executing program 3 (id=1451): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x28, 0x0, 0x0, 0x5, 0x100000000009, 0x200000000000a, 0x0, 0x3}, 0x0) 11.118066923s ago: executing program 3 (id=1452): mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) fcntl$dupfd(r1, 0x406, r0) dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.290948635s ago: executing program 0 (id=1460): socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) syz_open_dev$video(0x0, 0x101, 0xab82) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000600), 0x0}) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6", 0x6f}], 0x1) 8.279554207s ago: executing program 2 (id=1462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x50, 0x0, &(0x7f00000005c0)="c6c45262e30db324a66735125d0af6b7338edfdef5579b7df065bcba0767d1fd499544191fbfa751b6c021b605fcac40bf6089cef17a7c752bb6646e01e9ae2dcc4f8b42693df3ccdb282ef0b20edde9"}) 7.900330916s ago: executing program 3 (id=1463): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x1f0, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x1dc, 0x1, [@m_vlan={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x1, 0x5, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x170, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x67d, 0x6, 0x5, 0xc8cd, 0x9a8}, @loopback, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffff801, 0x7, 0x8, 0x2}, @multicast1, @multicast1, 0xff000000, 0x1}}]}, {0xf8, 0x6, "41246e8991d162f01fae09a8831d660f523cbd5b681b368567382bd9b6e9dce4fc5f690efb6b1e6b90ff29c95fd7579bf76412060cea9fe4a75a4de6da8d91848a26155145d3fcf4733035910184052c1ec49dfbc99b988c26c095b8e8f0cdccc39d8e8035cbf7c74b7874534855335c4855376b4a75843199c0f1b4f8ec977a332a7699ddceb7741acd37e1ae49e8fe4f4a3cf6fff4d6f126dec2d0b27b67e887135224f30a7176a9b38a66e0ffea1d804b95ec6c8db7bfa9e6cb8461d5f5c875bbf580d6931768b7ec624932fee684aed947a6ddf313fd346e985c1ab1095704ed85a8414e85c1ecfff9fdc6e21e63278badc3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1f0}}, 0x0) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) 7.098044716s ago: executing program 1 (id=1464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 6.984438509s ago: executing program 1 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005240)={0x2010, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fe8, 0x2, 0x0, 0x1, [@nested={0x1fe1, 0x17, 0x0, 0x1, [@generic="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", @nested={0xfdd, 0xc, 0x0, 0x1, [@typed={0xc, 0xa0, 0x0, 0x0, @u64=0x5}, @generic="f6b2878b54400ecb5b4c1a3bfc0a027a109d897440a6c35f5878b6b108a2e7772b4709c34c5ce95797bbf9cb145d3652fa0103b8bda25b7b93159f540278b170085edd256382012d714547a0b20af03629bfe0ad4344df09406c28bf1a975a760ae724e409a0d9ff1f87f4de7c4719cf27165e1756e840c6783c57742fe0b7a2c8fe485b41082de4a3dcd7a7ed97dfb67f6a9abd0aab1ccac57ecab64184df3c990b9968da86c4e4b320e467218f8e3f4412c7bce633c4e006d0103c425edc92ace1e666f4d5215440d60a5eb36c4ae0fc066f21cce76b7e2d4e7ecdfa614d4226bdd4e989419095669678c7a298374d5c7da256f3533880fab1432ad57ce97ddd20ecf50875ffc9c439fecfde75cd2c5de6c06b574a50ec521548e6190b3fb406cc028f8c5eca04061faadb790395618be6c32a483b806bdfdba323ae20dbf5f6f375460cc9e9abfe194692b1b301a7a81c986920ef5b9e18c231458dd25ae4c3e5a9e9ab6425c97cdf7158146300be6e0fe858691aaf46a1b030531c4b03e6008d4f3f9866ccc89ba6082b5ae6deec7f2d21197c6758668e47a1b7daaf54ebee0b5c762ab30292e624c616eddfdfc5c16c285a9a98a82816ff72575cec50eab6d81ab05dee9300760d8815ff87bfdc950816b38b880a065de1368e0a7193badde6334ee4f04b826ed5c5aac9788ee69fc5aed4a1f5678ca69428cefaccad1691649cfb9be02055bd0df8c52a82fc8c053f0926b4d269b57a2d3505f6c0df96c3e9ca274b42a5464596fac177f71ed3f202d03275430a4d5f8338c6ed1930b0eeb67df77544fffeff3ada4ea7c9015244596d4506a54eae1b3e50565f5e00f75a30a7ecaa2ebbb7eb33fd2d4f904c6a824d59ea906fc47e42339179fafbda2b0678d335b5537147019b7b44b1539efde703450ce1f3e160de3afa0aa40b56e74a5c52849b7e94caacd5e753c1cae67daacfb89fbb0abc42ff0fe4e0ad4755e9ace65131fb7397c8b00bddee9e75bc780014ef70999eb50b3ccd82b7f6b72988dade6457bcb86dade335892326ea28132477a43efa01bb1100388c062fa9b528f1382e885a66d91aad8bfb495e890bf1285821822e60c12726ce493a240715a96deba6fefcd626a98b858be97140a0db9d330a970fb7c1d394c463f422c4394591c7ec597405d871e3d84bda5f25678c2e910d704aadc5fab04264b0ca9146df73304e76ba066e12e71a0d2ecc2c8a5dde1a9cfe37fa1b0ecc341917398e44533785dde5485b73cb9eed0f0a7d905d6612c9a21b7035be5122a5be2a658d4895f15d4a52d5cb9ee07924cdabbea5b3ff03e3c67374f61cad8cde1b75261bafaa6253b86404e1d339227167f843ae06c4f9953eba4baab93978e05ffa3aa15bbc054f5387d6666750b145f9dd9dd4a3a8b5fbf7e0be151ffbf584ed63d37ad5171e81eecef1fd94a235c64f79e50e6e76941993c921038ef01a1fe25836af73c2c942097f71c1603835aee448c1e3e3abb2849f318606dc848bc113965b05fb7ec2d181ef885a3a2fa8596f2d6db1aad80b3f9b8d4edb917f050ca646a60d3bf8f1ca8ca9516b028207a8088f32c71d4b1e7d57034824bbe9401d1f04efabc34e47a842e841dc4061a4c7f5900f5761375508b7522953a8d34fd6b3fc24ae404c1c8fc017607034bd8bfdf366f367e08cee5fa351f72479ba1ec97b2d0abe9d0d30aacf70a230ad07e08a0b6a05728631f8bb3d49d3c95f156db4eb62f41ed90c3dcdcaf30dbdf1bad4f425114dd89f43c04b5b357ab8c6458bac4f9de9f3bced05087f935f53e0ccd1dcd8ae2ebaf780e6d721a9d9ae4094b119a7fdc13bf81a5ce54b8e3cb8cb3efbf80e80cdf22773d7b9b2a21e26cd9d05b765da00eb6cbd8916db5ceaf4b4bfb914e53981831820f5670f7cf1446b3a6834609ed722d99c113ac8f6f428f63f0a015505cfb2fe6350134dbb091292295151e22c9648718b37c47b53d96ece476ecc069145908761815240519f03b0d52608bb1855489cf2fe41622b5802c48cab9ab112218b3a6fdd2a000bc5256be400f0adbef7394653bd3dd55d58663660d42bf84759941b7b28cca9066abd3e7a3cfaa245f94ac5beb6d5a186a44795fd027cbe69f25184ecd6e0e83b29cc0e1460931e8a9e956d90a10a9d31001998406a59570e429cf3c0d0cb7cf48a7b006cabec52fecade655ad39f3b258aace762051912ebabc700f2af9ba09739f6f2431f5bf2482229af2dc32b41890886767ee2ff9403afa39422b881f79a710aefa944a678b9b4569a36a1e335017985e6a101b8ae46ad45996eb6a403e9f98218105eec598bb44374c8a55993be7d694bc8d7359aa4107af42310d6f6025ab6f2590882636196400e49320342c8acd932582f953528c90021a8329acfb106ea81ca9852e0571f5d832c396ad35176c8a8738d087fe086158565d014401e81144f777ef430e8f31de362246ab4eae3aa1ee341318bb19c5a811bc66e28cad94d1be4d4b678e317339da17c96f848ab5d899a1253f911f17e225cef445c95567ad3b609e58661ccdfaa236aa03b1e243883e1f7b757587151105d1611e80fefeac25417f17b060985d33dbf7a8eae542bb0c738446c3f21c16d6f791f60bc41cfcc022a329c7ef76c919a2b381556ed51d6c1861c55a773acd7810dc28d0fafb91a98bba9b56f82a560f55401323fa2c5c114086d6d277edcb74c8258fcb1e44a07517f3d109a8f7c377e3aeb33e0f60e75ac6eeebce4e5ae6104b0427f330c18149b8c8f340c4ba39c32e2fa91c3d9fd298bcbee57b00a1ec1d43f8725dc6409f1f9c46f351629f7a1bc2a4b681a8c505bbe43848575787b7e65b464bc54ed937f44ebfd4ae0fa394d805d299981cc9dd9c77e85c89a6e52a27bcb7ca1bd6d1642898abf11f14b38d1df99c5a2b4fb8cdaa8e2022ddff6e75bd3f014a7a6db63b2bfdb9afc50a2370fc633b7988d5784e7c4d1d55a6d588d71aa1ea7b5b87a6340115a56cf0ad58e520e7a165161d5d90f365b8240df1aea2c6165a72c9fd2eebe81aed81b1f86d906ab2049e817bb971c1fb2ce94603682971091f4996b359508e16ffbb590502d097a77c3e104385bc9e9501440bf3d249ef0ff3186a4eae5b7b952e7a7703b80e502e8e643f8b9f2b916533bd5e152e51253d6e5e48a46f20d887825790cf37ee7662ed345a246afd1c92f5f1445911d1bb193204ec2d07fa96441a6e51bb686c5b068f62c692e20ecafda212614e01ce27f1a2ddaa06b4d6771195fdce8f7f27edce59ece18851689cf920aa09707d09da2f4dae324c84b04589c12eb21fdd94a7f3ea4ff8a50fa46f4f1674c98ab2452d6345b8171da7268bb7b49b971a0f62eed4016ef611604fd52645468c189f7eb4252d6aca7dba98f191ce1e30cbfc50e9602a1c551d755d0b63805318c7196361cbc0959d7017dec33112dd49de60ac0568a1fa3ed96e65c4126dc3ad651be9d8299d87f22d3045ef41ced92382bcebec929148874f6c1a73ed6a88f1b1c1201f3c575f5f3b2d38b75bf08aa5886b3db66550925874f080716f5e64df8e8aacb69bf2a852aec4d0051073ff9a4c2c99b559dc60044d0462c1852fd8bcbca178b76f3e82a388142bc793e0e2e71b77d4fc47aabf0b49d95d9335f710fe607b8c7be630a7b3322770f4e3fc721c98fa88cc7ee5cf57074230a48dd2187639c7b3efee4fbf9ec1ed03f32f13b4747d2f8a4b0ffcedc4e0fb43ae74143e428c34371f96ae2d35d78588d88127546b3f95ad68507f58aa734b652711c4ac1daf41a99feaba947a1b48a15ac503556d3c3805d6ad45597b05ce942bd096b9b2d2a57b4defe40d81d50d7f7b797f5e70f65a4cc1899eb3955fce33ab9765cccad225730247155b45a63b4435517f1c815f423bd223cad8db18acef33d435369e1da1ec36c5bee755b1c58e97711ab769d26f224422da12fbd86b637516547fe37c861b99b87236beb2a88007f00f96ec64bb019735c36e1e32b3b580fb414ef8156c9d126aa5f3637a6ab1d5259d97d0265ee1ff591a8adc1e2f3403ead530db2e7aa5a20e83c1fc6f01d874beec33d3dea612ca7f51064270d0a7f1a54174f2763b478bfddda6e489b772653461e2cdc1b421f569839fb597302282092b20d4d8497fdca5fea1953f2380fee83076bbeb33e9ad7a3aa34989cfb7e06139ccd01f8165791c555c67223c4a5bd07c2dd3c235945f5f5eda2ee214e295c0c00b6700650e61fee459215ff8bfc579a5a698b7330ee33c636a78baf336a7c5b487d39ab2b407a2c96858f2f7701046b18f14feb9b744e8cfedc0c42799a0f534c82c75cc475be1badc402c1e4aa533ef8802a06862be2af0f9861add1c6d6278f158bd94ca3dfe8522a93b7b7b018185e6c7634312f262fcfe68640adc11338a6d266ac3158df1f16d39a0fe345477da7f8d07c82fff8e6e980ef0c1c36da497a8e085475d71f8f1f49e569c984be28828907a5b279f26bcd8e0bdd75aa85c556053495e2008261146c1dd1825068e8b47c9cf6115feb27555b8d77fc80ec100b6a083af23c7ed29c975369dc2d6f415ae3a0fa9dc65660a2a3d5265dace601ebeaa17f9553b0d7c84b1a47afd63bd252b3b0cbddd6ee1479edc6cb51fd18a25c345da60c2f9adc0ed85b15c5dfbbb1b11c41b9089514cfc346e17972340a7007451ca7a07a728f641c2de33a3031053a5ce76c28dc0ea95503c0e6fc9d20af0aa6a28237aa9c386469fb16f026ddc8efa50aae966fe08d7604b561aaf4f36c823f4794f79d8b15a42b03df2925d3beae44f858d17386804ed459504634ab8f7cdec031351d861b52d4aa780d9b36d4b740d9b86ee9345671037521c2d938d21804dfd076d82351a10534b6fbc7035f42586a23b4d7922b0ed54f1111c1febcf666634751314727461b4babff486faf4e48556a669a328f36c3a55ee8f6818691824755735da330ceea3f4c4cb1f3042ec706e39fecece9d222be1c70d068eedf9f3848c8a735d92dcde0ffdb3f801f0d1ae89b40e3d24411a6745794cbf2587fb31457119a5b6a96356aa61e2f3ccd4e436975ec956f6031533e7b0c963c32bcaa62385248ca543c6a024be253387b189619d3716a71d2e0f0192e816c812646285135ef119b761206332c62af600b5dd22be209462a89f2b16d7c793978204075a0bdcd8f8f344451953efa9973a30fa7e5475c18cd96b4b3817c3fe3c3c6e94219255b4dd2878104ba2cd1dbf2963f8e3811009d08f3382845e2780effaa32a9059c7c94f6a9fea8e53356593fa5b4c6e3e546491830a8362768e1d991e93e569dcb41862a52d81c2c6ee2a71f040f9827face66c871bedac8b5f7d276490a625ce8e4214d0055f0f3416dd8b81d6a7c9649a7b4cf8b34bb44dd80c7508b8a1655dbd8bfb56edb64105184030d4d3b1fadb21e67fafd0e6b5cc852053127b8efc3fec99c6d37ab4b9aee5148688ee56d76400e405c444203365348faf595af753c25020b477fab3b06de0e3c1d334287e259cb03e15fbdf37fa5616d2067517979cb5c7bd58ea61f94a7acab3fb37c28e2c899dc39e437053791db1b497d4ab2291cf2f85131ffafc972a21dacb26bf3f1b0953bda488b36666521c54774d6872330af8bb3ad1e3b076f074ccdadee2b01d60f0215457d58f82c6801e9bb8474f718"]}]}]}]}, 0x2010}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 6.983585288s ago: executing program 2 (id=1466): r0 = fsopen(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x9, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a2", 0x27}], 0x1}, 0x0) 6.830323952s ago: executing program 1 (id=1467): openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) preadv(r3, &(0x7f0000001cc0), 0x0, 0x0, 0xa3) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) close(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.70556472s ago: executing program 0 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e1e}, 0xcf) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000041) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000140)=0xffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b2c, &(0x7f0000000040)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 5.667905428s ago: executing program 1 (id=1471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) r5 = getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 5.501959702s ago: executing program 4 (id=1472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x7, 0x6361, 0x5, 0xfffffffd, 0xb4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.746689715s ago: executing program 3 (id=1473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setresuid(0x0, 0xee00, 0x0) 4.526752127s ago: executing program 2 (id=1474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x84}}, 0x600c0) 4.334891579s ago: executing program 4 (id=1475): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x30000014}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20002000}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)={0x1d8, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x75, 0x8, "b70be53804ad981e79c6ae6d4a5e6db46546b2e10b251b2f7f01608b157aac829b54bae3c8ee80d7f06f8ee4e99db1a123ffa0962d28d6658616b69681c47d6f33637062e6f3fb2dd3b24f4914a1e496e31757e216b373023946750cf4eef45f8529f3afb9276099a8f0fc1e4c2f73fc56"}, @NFTA_OBJ_USERDATA={0xb0, 0x8, "e866783bdfff32007215aca7f53ac75a5eaa836af1600b9432f43833cf0a804be96227a2e975dbed8bbaaa2be0698528029af4c8201832adf5d8422e170dca3bcb835d0f17754e260a58c9e0c37ba8b6fabc8b921aec0dcd4ab5699fd2303824d452d73789cb52363133756cbb622f4923b2ff274197645e5eb4b45d23a857027fe4abeaf5b26c07a2785b14f60cdea6538ddabee89705ee090882a2f1451c02daf78e1cc6107f0bc0869a61"}, @NFTA_OBJ_USERDATA={0x54, 0x8, "3b834357a06a630c7f7060cd8751bb0d3cef598e854453ae83fa0e450e24ec48253fb844aebc0d507b2408c7367b82375da45d23c14b46fdc713410c7837ac5d7b71e484c77367dcf4d3e246d45bf240"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2400c815}, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)}, {0x0}], 0x2, &(0x7f0000000000)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x18, 0x14001}], 0x1, 0x4044040) 4.269896127s ago: executing program 2 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 4.056381538s ago: executing program 0 (id=1477): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000680)) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000002000000181800000f201d", @ANYRES32=0x1, @ANYRES32=0x1, @ANYBLOB="000000000c00000018110000", @ANYRES32=0x1], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x1, 0x5, 0xd, 0x4}, {0x0, 0x5, 0xb, 0x4}, {0x1, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x10, 0x8}]}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900), 0x78203, 0x0) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001080)={{0xc, 0xf}, {0xc, 0xa}, 0x1, 0x4}) syz_open_dev$amidi(&(0x7f0000000940), 0x3ff, 0x90000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 3.229635344s ago: executing program 2 (id=1478): inotify_init1(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee01, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 3.22770244s ago: executing program 4 (id=1479): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="180300", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000b40002800800020003000000a80005008fdd35f77bfcc7fe5d3708c8e4a42a33758b61c694c2d1c714ea18da2ab44cd7784c00361b390b9e9e7fa4f8f4f67ee844a7faceac62559bbd89257d20fa378a4109e2626bd4119fe693f708f63075200e69491a14c5919f3cecf3537943bc3bb3ce36aacfee6da8dd654d982714c898827ee86bb3c7dfd210a20491c48d5676f09d7a0f16a186c228ab713af93ded16a83efc49b7f4045d300001800800030001000000080003000100000014000200", @ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f766c616e", @ANYRES32=0x0, @ANYBLOB="040002801400", @ANYRES32, @ANYBLOB="080003000200"], 0x318}}, 0x4040010) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB]) socket$unix(0x1, 0x1, 0x0) setpriority(0x0, 0x0, 0x6) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.390115995s ago: executing program 0 (id=1480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)="4f1a", 0x2, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 2.389338859s ago: executing program 1 (id=1481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x81, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x650082) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=@bridge_getlink={0x28, 0x12, 0x201, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8900, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000a80)='71\a', 0x3, 0x20000000000000}]) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) execve(0x0, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940), 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2.243307248s ago: executing program 4 (id=1482): openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) preadv(r2, &(0x7f0000001cc0), 0x0, 0x0, 0xa3) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) close(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.182348431s ago: executing program 1 (id=1483): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x1f0, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x1dc, 0x1, [@m_vlan={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x1, 0x5, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x170, 0x2, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x67d, 0x6, 0x5, 0xc8cd, 0x9a8}, @loopback, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffff801, 0x7, 0x8, 0x2}, @multicast1, @multicast1, 0xff000000, 0x1}}]}, {0xf8, 0x6, "41246e8991d162f01fae09a8831d660f523cbd5b681b368567382bd9b6e9dce4fc5f690efb6b1e6b90ff29c95fd7579bf76412060cea9fe4a75a4de6da8d91848a26155145d3fcf4733035910184052c1ec49dfbc99b988c26c095b8e8f0cdccc39d8e8035cbf7c74b7874534855335c4855376b4a75843199c0f1b4f8ec977a332a7699ddceb7741acd37e1ae49e8fe4f4a3cf6fff4d6f126dec2d0b27b67e887135224f30a7176a9b38a66e0ffea1d804b95ec6c8db7bfa9e6cb8461d5f5c875bbf580d6931768b7ec624932fee684aed947a6ddf313fd346e985c1ab1095704ed85a8414e85c1ecfff9fdc6e21e63278badc3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1f0}}, 0x0) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) 2.035382702s ago: executing program 0 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) 1.88314559s ago: executing program 0 (id=1485): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7ab, 0x4, 0x6, 0x2}, 0x1d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x24008844) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) 1.032534025s ago: executing program 4 (id=1486): unshare(0x6000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 139.263686ms ago: executing program 4 (id=1487): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xdf}, 0x4ac2d78a}}, 0x0, 0x0, 0x4a, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b931651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 2 (id=1488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): dded [ 89.283009][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.290801][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.316885][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.330047][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.337003][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.363020][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.376205][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.413767][ T5846] team0: Port device team_slave_1 added [ 89.429533][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.551215][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.558702][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.584657][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.604472][ T5844] team0: Port device team_slave_0 added [ 89.620746][ T5839] hsr_slave_0: entered promiscuous mode [ 89.627052][ T5839] hsr_slave_1: entered promiscuous mode [ 89.635070][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.642059][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.668073][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.686576][ T5844] team0: Port device team_slave_1 added [ 89.717929][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.725514][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.732723][ T5849] bridge_slave_0: entered allmulticast mode [ 89.739428][ T5842] Bluetooth: hci0: command tx timeout [ 89.746871][ T5849] bridge_slave_0: entered promiscuous mode [ 89.797570][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.804732][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.812405][ T5849] bridge_slave_1: entered allmulticast mode [ 89.819757][ T5849] bridge_slave_1: entered promiscuous mode [ 89.862979][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.870234][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.896603][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.907294][ T5842] Bluetooth: hci1: command tx timeout [ 89.909203][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.920295][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.946789][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.977515][ T5842] Bluetooth: hci2: command tx timeout [ 89.993002][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.002403][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.010051][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.017177][ T5848] bridge_slave_0: entered allmulticast mode [ 90.024410][ T5848] bridge_slave_0: entered promiscuous mode [ 90.066376][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.076084][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.083648][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.090867][ T5848] bridge_slave_1: entered allmulticast mode [ 90.099489][ T5848] bridge_slave_1: entered promiscuous mode [ 90.116574][ T5846] hsr_slave_0: entered promiscuous mode [ 90.122960][ T5846] hsr_slave_1: entered promiscuous mode [ 90.129280][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.136957][ T5846] Cannot create hsr debugfs directory [ 90.142529][ T5842] Bluetooth: hci3: command tx timeout [ 90.148210][ T5842] Bluetooth: hci4: command tx timeout [ 90.266451][ T5849] team0: Port device team_slave_0 added [ 90.275475][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.289816][ T5844] hsr_slave_0: entered promiscuous mode [ 90.296175][ T5844] hsr_slave_1: entered promiscuous mode [ 90.302688][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.310308][ T5844] Cannot create hsr debugfs directory [ 90.328821][ T5849] team0: Port device team_slave_1 added [ 90.342693][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.421437][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.429129][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.455423][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.486766][ T5848] team0: Port device team_slave_0 added [ 90.497216][ T5848] team0: Port device team_slave_1 added [ 90.516601][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.523954][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.550131][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.645474][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.654217][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.680483][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.739615][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.746582][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.772626][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.839573][ T5849] hsr_slave_0: entered promiscuous mode [ 90.845833][ T5849] hsr_slave_1: entered promiscuous mode [ 90.852169][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.860194][ T5849] Cannot create hsr debugfs directory [ 90.944449][ T5848] hsr_slave_0: entered promiscuous mode [ 90.951642][ T5848] hsr_slave_1: entered promiscuous mode [ 90.957908][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.965473][ T5848] Cannot create hsr debugfs directory [ 91.077045][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.090320][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.119159][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.135384][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.273392][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.299634][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.312086][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.357706][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.405768][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.437345][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.452460][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.464235][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.589780][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.605113][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.626508][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.638383][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.660999][ T979] cfg80211: failed to load regulatory.db [ 91.743207][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.787246][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.816224][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.823185][ T5842] Bluetooth: hci0: command tx timeout [ 91.829036][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.842697][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.853564][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.892143][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.911110][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.926690][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.933872][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.955786][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.978134][ T5842] Bluetooth: hci1: command tx timeout [ 91.994900][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.002039][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.016751][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.044176][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.051368][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.059133][ T5842] Bluetooth: hci2: command tx timeout [ 92.065503][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.072621][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.101430][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.108541][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.139037][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.174789][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.181927][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.213217][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.219041][ T5842] Bluetooth: hci4: command tx timeout [ 92.220299][ T51] Bluetooth: hci3: command tx timeout [ 92.237187][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.244331][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.288846][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.295948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.424274][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.533214][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.626714][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.633918][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.691207][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.698391][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.859462][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.971564][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.079645][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.093697][ T5846] veth0_vlan: entered promiscuous mode [ 93.111917][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.140582][ T5846] veth1_vlan: entered promiscuous mode [ 93.210142][ T5839] veth0_vlan: entered promiscuous mode [ 93.234566][ T5839] veth1_vlan: entered promiscuous mode [ 93.319808][ T5846] veth0_macvtap: entered promiscuous mode [ 93.352290][ T5849] veth0_vlan: entered promiscuous mode [ 93.362474][ T5839] veth0_macvtap: entered promiscuous mode [ 93.380793][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.400333][ T5846] veth1_macvtap: entered promiscuous mode [ 93.415253][ T5839] veth1_macvtap: entered promiscuous mode [ 93.424458][ T5849] veth1_vlan: entered promiscuous mode [ 93.467908][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.496010][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.535945][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.564574][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.574085][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583815][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.592633][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.605588][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.628598][ T5849] veth0_macvtap: entered promiscuous mode [ 93.641955][ T5849] veth1_macvtap: entered promiscuous mode [ 93.652144][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.665577][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.675115][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684130][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724774][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.762742][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.772220][ T5848] veth0_vlan: entered promiscuous mode [ 93.804373][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.813528][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.825496][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.834463][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.873781][ T5848] veth1_vlan: entered promiscuous mode [ 93.898388][ T51] Bluetooth: hci0: command tx timeout [ 93.905306][ T5844] veth0_vlan: entered promiscuous mode [ 93.957746][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.965867][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.004414][ T5844] veth1_vlan: entered promiscuous mode [ 94.013640][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.027657][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.050149][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.058410][ T51] Bluetooth: hci1: command tx timeout [ 94.072424][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.113046][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.122755][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.138093][ T51] Bluetooth: hci2: command tx timeout [ 94.139398][ T5848] veth0_macvtap: entered promiscuous mode [ 94.164308][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.194441][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.206299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.225091][ T5848] veth1_macvtap: entered promiscuous mode [ 94.260096][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.282632][ T5844] veth0_macvtap: entered promiscuous mode [ 94.289420][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.299364][ T51] Bluetooth: hci4: command tx timeout [ 94.299375][ T5842] Bluetooth: hci3: command tx timeout [ 94.360015][ T5844] veth1_macvtap: entered promiscuous mode [ 94.421028][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.495354][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.507451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 94.966414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.037760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.068831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.171175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.180560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.273529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.282545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.375914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.384845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.519352][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.988551][ T51] Bluetooth: hci0: command tx timeout [ 96.139225][ T51] Bluetooth: hci1: command tx timeout [ 96.217774][ T51] Bluetooth: hci2: command tx timeout [ 96.378479][ T51] Bluetooth: hci4: command tx timeout [ 96.387528][ T51] Bluetooth: hci3: command tx timeout [ 97.202645][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.329744][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.340251][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.472272][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482354][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.504761][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.524471][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.593453][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.647038][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.658918][ T5973] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.7'. [ 97.716489][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.726824][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.419617][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.441146][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.502976][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.561131][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.844143][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.853864][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.886824][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.914739][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.563367][ T6020] syz.2.17 (6020): drop_caches: 2 [ 105.937771][ T6054] 9pnet_fd: Insufficient options for proto=fd [ 106.074046][ T6057] netlink: 'syz.2.29': attribute type 6 has an invalid length. [ 106.082219][ T6057] netlink: 'syz.2.29': attribute type 7 has an invalid length. [ 106.090210][ T6057] netlink: 'syz.2.29': attribute type 8 has an invalid length. [ 106.973163][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 106.980046][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 106.990027][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 106.996056][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 107.134520][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 107.140817][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 107.263948][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 107.289191][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 107.409517][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 107.431262][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 107.568049][ T6061] ceph: No mds server is up or the cluster is laggy [ 107.585909][ T6067] ceph: No mds server is up or the cluster is laggy [ 107.822189][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 108.198617][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 111.757987][ T6118] 9pnet_fd: Insufficient options for proto=fd [ 114.763897][ T6155] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.527721][ T6161] bridge1: entered allmulticast mode [ 116.528894][ T6168] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 116.812739][ T6168] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.910923][ T6168] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.441035][ T6180] 9pnet_fd: Insufficient options for proto=fd [ 117.861324][ T6193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.051823][ T6195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.57'. [ 118.495088][ T6193] sp0: Synchronizing with TNC [ 118.516268][ T6187] [U] ` [ 118.810876][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 120.805617][ T6225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.893917][ T6228] 9pnet_fd: Insufficient options for proto=fd [ 121.867463][ T6241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 123.165997][ T6258] 9pnet_fd: Insufficient options for proto=fd [ 123.319976][ T6260] mkiss: ax0: crc mode is auto. [ 123.715638][ T6270] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6270] [ 127.308505][ T5949] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.853767][ T5949] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.039712][ T5949] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.075441][ T5949] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.087200][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.403266][ T6289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.524931][ T5949] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.822300][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.832747][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.550531][ T5949] usb 4-1: USB disconnect, device number 2 [ 130.639697][ T6323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.647276][ T6323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.672677][ T6323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.696281][ T6323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.705265][ T6323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.978810][ T6323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.006993][ T6323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.019249][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.121325][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.439820][ T6323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.281074][ T6323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.350945][ T6323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.382565][ T6323] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.390099][ T6323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.622012][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629351][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.665637][ T6323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.680483][ T6333] tipc: Enabling of bearer rejected, failed to enable media [ 132.701046][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.777875][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.171991][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.517571][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.302336][ T6353] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[6353] [ 134.457560][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 134.798257][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.038640][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.258447][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.587649][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.076030][ T6378] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.537706][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 136.889327][ T6382] tipc: Enabling of bearer rejected, failed to enable media [ 136.897316][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.097836][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.347546][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.620423][ T5948] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.657750][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.861875][ T5948] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.005109][ T5948] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.047599][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.177552][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.224249][ T6393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.271146][ T5948] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.617665][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 138.884062][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.280549][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.738525][ T43] usb 3-1: USB disconnect, device number 2 [ 143.202322][ T6426] sp0: Synchronizing with TNC [ 143.546922][ T6421] [U] ` [ 145.707538][ T5948] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.884502][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 146.090469][ T5948] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 146.105331][ T5948] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 146.146570][ T5948] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.180262][ T5948] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.239766][ T5948] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.308908][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.400590][ T5948] usbtmc 4-1:16.0: bulk endpoints not found [ 147.745036][ T5948] usb 4-1: USB disconnect, device number 3 [ 148.086467][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.133'. [ 150.049185][ T6478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.276380][ T6481] netlink: 124 bytes leftover after parsing attributes in process `syz.2.139'. [ 150.375795][ T6483] netlink: 'syz.1.140': attribute type 29 has an invalid length. [ 150.399479][ T6483] netlink: 'syz.1.140': attribute type 29 has an invalid length. [ 151.309518][ T6498] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.997916][ T5893] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 152.267715][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 152.279528][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 152.317204][ T5893] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 152.377507][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.389407][ T5893] usb 5-1: config 0 descriptor?? [ 152.411889][ T6493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.646437][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.944933][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.282664][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 153.338335][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.380167][ T5893] usb 5-1: USB disconnect, device number 2 [ 153.797574][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.006467][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 154.025730][ T30] audit: type=1326 audit(1755578091.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 154.062544][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 154.128594][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 154.183947][ T30] audit: type=1326 audit(1755578091.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 154.257641][ T5893] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 154.274501][ T30] audit: type=1326 audit(1755578092.030:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde919c14a5 code=0x7ffc0000 [ 154.296116][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.299388][ T5893] usb 5-1: config 0 descriptor?? [ 154.376517][ T5893] hub 5-1:0.0: bad descriptor, ignoring hub [ 154.398680][ T30] audit: type=1326 audit(1755578092.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 154.423789][ T5893] hub 5-1:0.0: probe with driver hub failed with error -5 [ 154.530262][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 154.546169][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.641067][ T30] audit: type=1326 audit(1755578092.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 154.657993][ T5893] usb 5-1: USB disconnect, device number 3 [ 154.725262][ T30] audit: type=1326 audit(1755578092.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 154.776281][ T30] audit: type=1326 audit(1755578092.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 155.027731][ T30] audit: type=1326 audit(1755578092.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 155.117541][ T6541] Bluetooth: (null): Invalid header checksum [ 155.174277][ T30] audit: type=1326 audit(1755578092.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 155.195670][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.339761][ T30] audit: type=1326 audit(1755578092.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9198ebe9 code=0x7ffc0000 [ 155.348712][ T36] Bluetooth: (null): Invalid header checksum [ 155.578840][ T36] Bluetooth: (null): Invalid header checksum [ 155.585437][ T36] Bluetooth: (null): Invalid header checksum [ 155.629704][ T36] Bluetooth: (null): Invalid header checksum [ 155.656601][ T36] Bluetooth: (null): Invalid header checksum [ 156.277839][ T5949] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.423217][ T6568] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.397766][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 157.545696][ T5949] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.574554][ T5949] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.600497][ T5949] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.697455][ T5949] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.787553][ T5949] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.871962][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.895052][ T5949] usbtmc 4-1:16.0: bulk endpoints not found [ 157.937063][ T5948] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.105743][ T5949] usb 4-1: USB disconnect, device number 4 [ 158.220223][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 158.233096][ T5948] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.256261][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.279880][ T5948] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 158.306697][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.354425][ T5948] usb 1-1: config 0 descriptor?? [ 158.785620][ T5948] hid-retrode 0003:0403:97C1.0001: unknown main item tag 0x6 [ 158.940898][ T5948] hid-retrode 0003:0403:97C1.0001: item fetching failed at offset 4/5 [ 159.086713][ T5948] hid-retrode 0003:0403:97C1.0001: probe with driver hid-retrode failed with error -22 [ 159.645412][ T5948] usb 1-1: USB disconnect, device number 2 [ 159.973624][ T6595] netlink: 72 bytes leftover after parsing attributes in process `syz.2.172'. [ 159.987518][ T5893] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.177963][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 160.198069][ T5893] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 160.258304][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.282096][ T5893] usb 5-1: Product: syz [ 160.286897][ T5893] usb 5-1: Manufacturer: syz [ 160.305942][ T5893] usb 5-1: SerialNumber: syz [ 160.320579][ T5893] usb 5-1: config 0 descriptor?? [ 160.737131][ T6602] netlink: 'syz.3.175': attribute type 6 has an invalid length. [ 160.737635][ T5893] airspy 5-1:0.0: Board ID: 00 [ 160.867465][ T5893] airspy 5-1:0.0: Firmware version: [ 160.909833][ T6602] netlink: 'syz.3.175': attribute type 7 has an invalid length. [ 161.216501][ T6602] netlink: 'syz.3.175': attribute type 8 has an invalid length. [ 161.373811][ T5893] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 161.397532][ T5893] airspy 5-1:0.0: Registered as swradio24 [ 161.442478][ T5893] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 161.488436][ T5893] usb 5-1: USB disconnect, device number 4 [ 161.979373][ T6618] netlink: zone id is out of range [ 161.994966][ T6618] netlink: zone id is out of range [ 163.382754][ T6620] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 163.846778][ T6618] netlink: set zone limit has 4 unknown bytes [ 164.229115][ T6634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.186'. [ 164.468112][ T6642] netlink: 'syz.1.189': attribute type 6 has an invalid length. [ 164.484741][ T6642] netlink: 'syz.1.189': attribute type 7 has an invalid length. [ 164.597712][ T6642] netlink: 'syz.1.189': attribute type 8 has an invalid length. [ 164.846123][ T6644] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.434854][ T6656] syz.1.194 (6656) used greatest stack depth: 16496 bytes left [ 168.837101][ T6678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.212602][ T6683] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 169.219379][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.852852][ T6683] vhci_hcd vhci_hcd.0: Device attached [ 169.988847][ T6690] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 169.995502][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.037481][ T6683] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 170.044022][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.051604][ T24] vhci_hcd: vhci_device speed not set [ 170.102655][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 170.139951][ T6683] vhci_hcd vhci_hcd.0: Device attached [ 170.165310][ T6690] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 170.171983][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.172451][ T24] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 170.226962][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 170.244070][ T6683] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(10) [ 170.250705][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.264838][ T6683] vhci_hcd vhci_hcd.0: Device attached [ 170.362126][ T6690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.489684][ T6690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.526608][ T6683] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.754202][ T6683] vhci_hcd vhci_hcd.0: port 0 already used [ 170.807627][ T5901] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.816964][ T6704] vhci_hcd: connection closed [ 170.817669][ T6697] vhci_hcd: connection closed [ 170.819275][ T6691] vhci_hcd: connection closed [ 170.822467][ T6686] vhci_hcd: connection reset by peer [ 170.837487][ T1333] vhci_hcd: stop threads [ 170.842786][ T1333] vhci_hcd: release socket [ 170.853635][ T6689] vhci_hcd: connection closed [ 170.855017][ T1333] vhci_hcd: disconnect device [ 170.875031][ T1333] vhci_hcd: stop threads [ 170.886650][ T1333] vhci_hcd: release socket [ 170.907256][ T1333] vhci_hcd: disconnect device [ 170.961576][ T1333] vhci_hcd: stop threads [ 171.030047][ T5901] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.056547][ T5901] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.067265][ T1333] vhci_hcd: release socket [ 171.072368][ T1333] vhci_hcd: disconnect device [ 171.078085][ T1333] vhci_hcd: stop threads [ 171.089652][ T1333] vhci_hcd: release socket [ 171.095274][ T5901] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.145543][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.206898][ T1333] vhci_hcd: disconnect device [ 171.211142][ T6709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.265286][ T5901] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.265333][ T1333] vhci_hcd: stop threads [ 171.487214][ T1333] vhci_hcd: release socket [ 171.498284][ T1333] vhci_hcd: disconnect device [ 171.614071][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.717961][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.877895][ T5893] usb 4-1: USB disconnect, device number 5 [ 175.667481][ T24] vhci_hcd: vhci_device speed not set [ 175.785334][ T6743] overlayfs: overlapping lowerdir path [ 176.318562][ T6747] mkiss: ax0: crc mode is auto. [ 176.837271][ T6760] Bluetooth: MGMT ver 1.23 [ 178.898704][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 179.114160][ T6777] Bluetooth: (null): Invalid header checksum [ 179.219129][ T49] Bluetooth: (null): Invalid header checksum [ 179.225212][ T49] Bluetooth: (null): Invalid header checksum [ 179.327741][ T1315] Bluetooth: (null): Invalid header checksum [ 179.619026][ T6783] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 183.314099][ T6820] netlink: 'syz.3.239': attribute type 6 has an invalid length. [ 183.370726][ T6820] netlink: 'syz.3.239': attribute type 7 has an invalid length. [ 183.408944][ T6820] netlink: 'syz.3.239': attribute type 8 has an invalid length. [ 183.438224][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 183.760632][ T6827] Bluetooth: (null): Invalid header checksum [ 183.805950][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.821124][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.830279][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 183.859616][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.883359][ T10] usb 1-1: config 0 descriptor?? [ 183.883846][ T5962] Bluetooth: (null): Invalid header checksum [ 183.910888][ T5962] Bluetooth: (null): Invalid header checksum [ 183.946945][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 183.968085][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 183.995810][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 183.999432][ T1315] Bluetooth: (null): Invalid header checksum [ 184.025015][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 184.037239][ T10] usb 1-1: media controller created [ 184.045642][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.074243][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 184.084778][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 184.102690][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 184.121559][ T1315] Bluetooth: (null): Invalid header checksum [ 184.222811][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 184.230449][ T5962] Bluetooth: (null): Invalid header checksum [ 184.270321][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 184.768484][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 184.796502][ T5949] dvb-usb: error while querying for an remote control event. [ 185.051468][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 185.057414][ T10] dvb-usb: error while querying for an remote control event. [ 185.442410][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 185.452905][ T10] dvb-usb: error while querying for an remote control event. [ 185.627928][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 185.715852][ T10] dvb-usb: error while querying for an remote control event. [ 186.235172][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 186.241063][ T5949] dvb-usb: error while querying for an remote control event. [ 186.407499][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 186.477492][ T10] dvb-usb: error while querying for an remote control event. [ 187.432917][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 187.490451][ T10] dvb-usb: error while querying for an remote control event. [ 187.697453][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 187.703255][ T10] dvb-usb: error while querying for an remote control event. [ 188.534837][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 188.798949][ T6868] netlink: 'syz.4.255': attribute type 29 has an invalid length. [ 188.807583][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 188.836462][ T10] dvb-usb: error while querying for an remote control event. [ 188.836932][ T5893] usb 1-1: USB disconnect, device number 3 [ 188.858718][ T6868] netlink: 'syz.4.255': attribute type 29 has an invalid length. [ 189.017505][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 189.023614][ T10] dvb-usb: error while querying for an remote control event. [ 189.144706][ T6873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 189.151276][ T6873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.205340][ T6873] vhci_hcd vhci_hcd.0: Device attached [ 189.206022][ T5893] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 189.241099][ T6879] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 189.247717][ T6879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.443558][ T6879] vhci_hcd vhci_hcd.0: Device attached [ 189.449370][ T5948] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.457596][ T10] vhci_hcd: vhci_device speed not set [ 189.517490][ T6873] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 189.517583][ T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 189.524189][ T6873] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.578642][ T6887] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 189.585295][ T6887] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.625983][ T6873] vhci_hcd vhci_hcd.0: Device attached [ 189.641222][ T6879] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 189.647856][ T6879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.662886][ T5948] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.669985][ T6879] vhci_hcd vhci_hcd.0: Device attached [ 189.860869][ T6887] vhci_hcd vhci_hcd.0: Device attached [ 190.603200][ T5948] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.628658][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.647668][ T6896] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.649282][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.733530][ T6875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.750598][ T6879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.778320][ T6873] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.798693][ T5948] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.845890][ T6873] vhci_hcd vhci_hcd.0: port 0 already used [ 191.032232][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.041651][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.817482][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 191.957674][ T5948] usb 3-1: USB disconnect, device number 3 [ 192.001179][ T6876] vhci_hcd: connection reset by peer [ 192.006694][ T6885] vhci_hcd: connection closed [ 192.006750][ T6891] vhci_hcd: connection closed [ 192.007799][ T6881] vhci_hcd: connection closed [ 192.011519][ T6888] vhci_hcd: connection closed [ 192.017599][ T12] vhci_hcd: stop threads [ 192.045400][ T12] vhci_hcd: release socket [ 192.064356][ T12] vhci_hcd: disconnect device [ 192.086011][ T12] vhci_hcd: stop threads [ 192.105616][ T12] vhci_hcd: release socket [ 192.115179][ T12] vhci_hcd: disconnect device [ 192.116093][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.155318][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 192.159763][ T12] vhci_hcd: stop threads [ 192.178702][ T12] vhci_hcd: release socket [ 192.190106][ T12] vhci_hcd: disconnect device [ 192.195932][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 192.213418][ T12] vhci_hcd: stop threads [ 192.223407][ T12] vhci_hcd: release socket [ 192.238144][ T12] vhci_hcd: disconnect device [ 192.253998][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.279214][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.290592][ T12] vhci_hcd: stop threads [ 192.297230][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.306143][ T12] vhci_hcd: release socket [ 192.320360][ T12] vhci_hcd: disconnect device [ 192.351770][ T24] usb 1-1: Product: syz [ 192.394052][ T24] usb 1-1: Manufacturer: syz [ 192.414965][ T24] usb 1-1: SerialNumber: syz [ 193.915196][ T24] usb 1-1: 0:2 : does not exist [ 194.009593][ T24] usb 1-1: USB disconnect, device number 4 [ 194.063338][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.069769][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.397267][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.717486][ T10] vhci_hcd: vhci_device speed not set [ 196.598176][ T6959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 196.604741][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.627551][ T6959] vhci_hcd vhci_hcd.0: Device attached [ 196.807615][ T6959] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 196.814273][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.822579][ T6959] vhci_hcd vhci_hcd.0: Device attached [ 196.848138][ T5893] vhci_hcd: vhci_device speed not set [ 196.907614][ T5893] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 197.445904][ T6968] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 197.452564][ T6968] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.619882][ T6968] vhci_hcd vhci_hcd.0: Device attached [ 197.667163][ T6968] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.696515][ T6959] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 197.703155][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.797933][ T6959] vhci_hcd vhci_hcd.0: Device attached [ 198.239093][ T6973] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 198.245763][ T6973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.272102][ T6983] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.307297][ T6973] vhci_hcd vhci_hcd.0: Device attached [ 198.329238][ T6959] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.437572][ T6968] vhci_hcd vhci_hcd.0: port 0 already used [ 199.539294][ T6975] vhci_hcd: connection closed [ 199.539549][ T49] vhci_hcd: stop threads [ 199.548696][ T6971] vhci_hcd: connection closed [ 199.548970][ T6969] vhci_hcd: connection closed [ 199.553871][ T6960] vhci_hcd: connection reset by peer [ 199.567512][ T6963] vhci_hcd: connection closed [ 199.732569][ T49] vhci_hcd: release socket [ 199.797204][ T49] vhci_hcd: disconnect device [ 199.806931][ T49] vhci_hcd: stop threads [ 199.811500][ T49] vhci_hcd: release socket [ 199.816127][ T49] vhci_hcd: disconnect device [ 199.823349][ T49] vhci_hcd: stop threads [ 199.829057][ T49] vhci_hcd: release socket [ 199.833690][ T49] vhci_hcd: disconnect device [ 199.841733][ T49] vhci_hcd: stop threads [ 199.846138][ T49] vhci_hcd: release socket [ 199.857458][ T49] vhci_hcd: disconnect device [ 199.867720][ T49] vhci_hcd: stop threads [ 199.908503][ T49] vhci_hcd: release socket [ 199.913191][ T49] vhci_hcd: disconnect device [ 202.767561][ T5893] vhci_hcd: vhci_device speed not set [ 204.128443][ T7035] tipc: Started in network mode [ 204.201711][ T7035] tipc: Node identity 1e841af59e8a, cluster identity 4711 [ 204.379614][ T7035] tipc: Enabled bearer , priority 0 [ 204.699991][ T7035] tipc: Resetting bearer [ 205.008641][ T7033] tipc: Disabling bearer [ 206.865036][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 214.579367][ T7091] ======================================================= [ 214.579367][ T7091] WARNING: The mand mount option has been deprecated and [ 214.579367][ T7091] and is ignored by this kernel. Remove the mand [ 214.579367][ T7091] option from the mount to silence this warning. [ 214.579367][ T7091] ======================================================= [ 214.609812][ T7093] overlayfs: overlapping lowerdir path [ 221.189249][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 221.567425][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 221.644829][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 221.705899][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.757465][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.776079][ T24] usb 2-1: Product: syz [ 221.847984][ T24] usb 2-1: Manufacturer: syz [ 221.861100][ T24] usb 2-1: SerialNumber: syz [ 221.880111][ T24] usb 2-1: config 0 descriptor?? [ 221.915087][ T7146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.268628][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.296706][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.553219][ T24] usb 2-1: USB disconnect, device number 2 [ 224.553365][ T7184] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 225.189280][ T7189] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 233.203578][ T7241] Falling back ldisc for ptm0. [ 239.870981][ T7299] mkiss: ax0: crc mode is auto. [ 239.934979][ T7298] capability: warning: `syz.2.368' uses deprecated v2 capabilities in a way that may be insecure [ 245.045286][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 249.670292][ T7379] mkiss: ax0: crc mode is auto. [ 252.547463][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'. [ 254.210333][ T7436] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 255.048733][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 255.378790][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 255.526838][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.597652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.931536][ T7454] bond0: (slave bond_slave_1): Releasing backup interface [ 260.809747][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'. [ 261.872348][ T7498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 261.878906][ T7498] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.887509][ T7498] vhci_hcd vhci_hcd.0: Device attached [ 261.951633][ T7499] vhci_hcd: connection closed [ 261.983985][ T49] vhci_hcd: stop threads [ 262.017493][ T49] vhci_hcd: release socket [ 262.035942][ T49] vhci_hcd: disconnect device [ 262.067465][ T5870] vhci_hcd: vhci_device speed not set [ 264.089954][ T7521] syz.0.416 uses obsolete (PF_INET,SOCK_PACKET) [ 264.130485][ T7518] syzkaller0: entered promiscuous mode [ 264.162603][ T7518] syzkaller0: entered allmulticast mode [ 264.349061][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 264.459481][ T7529] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 33554431, id = 0 [ 264.469450][ T7526] IPVS: stopping master sync thread 7529 ... [ 265.711731][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.519898][ T7540] sp0: Synchronizing with TNC [ 267.628422][ T7536] [U] ` [ 267.668686][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.679828][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.688940][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.838852][ T7543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.422'. [ 268.015971][ T7545] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 269.952700][ T7557] block device autoloading is deprecated and will be removed. [ 270.471907][ T5893] usb 2-1: can't set config #27, error -71 [ 270.527640][ T5893] usb 2-1: USB disconnect, device number 3 [ 271.530477][ T7568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.124020][ T7597] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[7597] [ 275.469157][ T7603] netlink: 72 bytes leftover after parsing attributes in process `syz.3.440'. [ 275.528498][ T5948] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 275.772790][ T5948] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.783917][ T5948] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.819222][ T5948] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.842447][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.972159][ T7604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.096261][ T5948] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.464668][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.475293][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.539501][ T24] usb 2-1: USB disconnect, device number 4 [ 278.207723][ T7631] sp0: Synchronizing with TNC [ 278.742202][ T7626] [U] ` [ 279.144580][ T7636] Bluetooth: (null): Invalid header checksum [ 279.290099][ T7639] mmap: syz.2.445 (7639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 280.768597][ T7660] syz_tun: entered allmulticast mode [ 281.217071][ T7652] syz_tun: left allmulticast mode [ 283.277503][ T7694] netlink: 72 bytes leftover after parsing attributes in process `syz.3.454'. [ 284.795699][ T7704] sp0: Synchronizing with TNC [ 285.312488][ T7700] [U] ` [ 286.788126][ T7716] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 286.899596][ T7716] netlink: 'syz.1.461': attribute type 29 has an invalid length. [ 287.709323][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'. [ 288.271555][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'. [ 288.917757][ T7737] : entered promiscuous mode [ 289.161017][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.320327][ T7764] bridge_slave_0: left allmulticast mode [ 291.326157][ T7764] bridge_slave_0: left promiscuous mode [ 291.333773][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.394817][ T7764] bridge_slave_1: left allmulticast mode [ 291.400933][ T7764] bridge_slave_1: left promiscuous mode [ 291.407846][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.585522][ T7764] bond0: (slave bond_slave_0): Releasing backup interface [ 291.614602][ T7764] bond0: (slave bond_slave_1): Releasing backup interface [ 291.642831][ T7764] team0: Port device team_slave_0 removed [ 291.660363][ T7764] team0: Port device team_slave_1 removed [ 291.669150][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.677557][ T7764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.831348][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.858135][ T7764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.287803][ T7779] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 293.447900][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 294.184657][ T43] usb 3-1: device descriptor read/all, error -71 [ 295.937443][ T7806] mkiss: ax0: crc mode is auto. [ 299.573917][ T7836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.491'. [ 300.112102][ T7849] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 301.791636][ T7873] netlink: 72 bytes leftover after parsing attributes in process `syz.0.500'. [ 304.271430][ T7890] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 304.278019][ T7890] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.301858][ T7891] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 304.308529][ T7891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.324876][ T7891] vhci_hcd vhci_hcd.0: Device attached [ 304.334251][ T7890] vhci_hcd vhci_hcd.0: Device attached [ 304.351927][ T7890] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.362794][ T7890] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 304.369438][ T7890] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.378535][ T7890] vhci_hcd vhci_hcd.0: Device attached [ 304.398137][ T7890] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 304.404754][ T7890] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.437556][ T7890] vhci_hcd vhci_hcd.0: Device attached [ 304.451521][ T7891] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 304.458185][ T7891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.466738][ T7891] vhci_hcd vhci_hcd.0: Device attached [ 304.478171][ T7890] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.492811][ T7890] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.520539][ T7890] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.553283][ T7904] vhci_hcd: connection closed [ 304.553751][ T7900] vhci_hcd: connection closed [ 304.559596][ T7898] vhci_hcd: connection closed [ 304.565933][ T1315] vhci_hcd: stop threads [ 304.576755][ T1315] vhci_hcd: release socket [ 304.582464][ T1315] vhci_hcd: disconnect device [ 304.595468][ T7895] vhci_hcd: connection closed [ 304.595706][ T7894] vhci_hcd: connection closed [ 304.604344][ T1315] vhci_hcd: stop threads [ 304.624005][ T1315] vhci_hcd: release socket [ 304.629052][ T1315] vhci_hcd: disconnect device [ 304.634094][ T1315] vhci_hcd: stop threads [ 304.639806][ T1315] vhci_hcd: release socket [ 304.644382][ T1315] vhci_hcd: disconnect device [ 304.662742][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 304.670559][ T1315] vhci_hcd: stop threads [ 304.675084][ T1315] vhci_hcd: release socket [ 304.687703][ T5870] vhci_hcd: vhci_device speed not set [ 304.721013][ T1315] vhci_hcd: disconnect device [ 304.726059][ T1315] vhci_hcd: stop threads [ 304.731126][ T1315] vhci_hcd: release socket [ 304.735625][ T1315] vhci_hcd: disconnect device [ 304.787460][ T5870] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 304.795258][ T5870] usb 39-1: enqueue for inactive port 0 [ 304.832593][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.842888][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.851382][ T24] usb 3-1: Product: syz [ 304.855611][ T24] usb 3-1: Manufacturer: syz [ 304.860308][ T24] usb 3-1: SerialNumber: syz [ 304.867777][ T5870] vhci_hcd: vhci_device speed not set [ 304.877245][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.962718][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.930513][ T5949] usb 3-1: USB disconnect, device number 6 [ 305.979649][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 305.986918][ T43] ath9k_htc: Failed to initialize the device [ 306.489846][ T5949] usb 3-1: ath9k_htc: USB layer deinitialized [ 306.768488][ T7926] Zero length message leads to an empty skb [ 308.062125][ T7939] netlink: 72 bytes leftover after parsing attributes in process `syz.0.520'. [ 308.133728][ T7947] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 309.692400][ T7963] ptrace attach of ""[7964] was attempted by "./syz-executor exec"[7963] [ 311.150370][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.527'. [ 312.657666][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 313.797859][ T8011] netlink: 72 bytes leftover after parsing attributes in process `syz.3.538'. [ 315.226757][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 316.940741][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947106][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.224203][ T8028] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 318.344266][ T8050] tipc: Started in network mode [ 318.349799][ T8050] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 318.365068][ T8050] tipc: Enabled bearer , priority 10 [ 319.973681][ T5949] tipc: Node number set to 4269801488 [ 321.688107][ T8058] loop6: detected capacity change from 0 to 2560 [ 321.697560][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 321.705891][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 321.714654][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 321.722948][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 321.835868][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.016235][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.035530][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.141257][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.194527][ T8058] ldm_validate_partition_table(): Disk read failed. [ 323.185153][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.207581][ T8058] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.303174][ T8058] Dev loop6: unable to read RDB block 0 [ 323.336055][ T8058] loop6: unable to read partition table [ 323.372382][ T8058] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 326.803296][ T8130] Bluetooth: (null): Invalid header checksum [ 326.907947][ T13] Bluetooth: (null): Invalid header checksum [ 326.914194][ T13] Bluetooth: (null): Invalid header checksum [ 327.048008][ T3476] Bluetooth: (null): Invalid header checksum [ 327.128621][ T13] Bluetooth: (null): Invalid header checksum [ 327.322565][ T59] Bluetooth: (null): Invalid header checksum [ 327.366737][ T59] Bluetooth: (null): Invalid header checksum [ 327.563292][ T8139] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 331.073275][ T8178] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 331.518439][ T8188] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 331.720780][ T8191] netlink: 72 bytes leftover after parsing attributes in process `syz.1.586'. [ 333.008653][ T8199] syz_tun: entered allmulticast mode [ 333.552424][ T8196] syz_tun: left allmulticast mode [ 335.937387][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 336.106199][ T5901] usb 1-1: device descriptor read/64, error -71 [ 336.468002][ T5901] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 337.188072][ T8223] IPVS: stopping master sync thread 8224 ... [ 337.191396][ T8224] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 337.211740][ T5901] usb 1-1: device descriptor read/64, error -71 [ 337.337807][ T5901] usb usb1-port1: attempt power cycle [ 338.496211][ T8236] tipc: Started in network mode [ 338.501301][ T8236] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 338.512984][ T8236] tipc: Enabled bearer , priority 10 [ 339.956967][ T10] tipc: Node number set to 4269801488 [ 340.372136][ T8242] blktrace: Concurrent blktraces are not allowed on loop4 [ 340.380452][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 340.452172][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 340.547453][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 340.621052][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.625563][ T5893] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 340.642792][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 340.644447][ T5893] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 340.668273][ T5893] usb 4-1: config 0 has no interface number 0 [ 340.674568][ T5893] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 340.688678][ T5893] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.689778][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 340.714005][ T5893] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 340.756593][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.778871][ T10] usb 2-1: config 1 has no interface number 1 [ 340.788906][ T5893] usb 4-1: Product: syz [ 340.792659][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.793095][ T5893] usb 4-1: Manufacturer: syz [ 340.806199][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 340.826717][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.845237][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.062322][ T5893] usb 4-1: SerialNumber: syz [ 341.105719][ T5893] usb 4-1: config 0 descriptor?? [ 341.766820][ T10] usb 2-1: Product: syz [ 341.771587][ T10] usb 2-1: Manufacturer: syz [ 341.776227][ T10] usb 2-1: SerialNumber: syz [ 341.809816][ T5893] plusb 4-1:0.231: probe with driver plusb failed with error -22 [ 342.144856][ T10] usb 2-1: 2:1: invalid format type 0x1005 is detected, processed as PCM [ 342.165590][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 342.210650][ T10] usb 2-1: USB disconnect, device number 5 [ 342.411580][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.013919][ T24] usb 4-1: USB disconnect, device number 6 [ 346.276515][ T8291] : renamed from bridge_slave_0 (while UP) [ 351.857527][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 351.977631][ T8327] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 352.008147][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.285451][ T8327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.308213][ T8327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.322000][ T8327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.367442][ T8327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.057874][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.377664][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 354.386599][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 354.393131][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 355.367523][ T5948] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 355.802003][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.037701][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.059433][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.091523][ T5948] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 356.292777][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.312329][ T5948] usb 1-1: config 0 descriptor?? [ 356.730877][ T8377] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 356.924022][ T8377] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 357.153361][ T5948] dragonrise 0003:0079:0011.0002: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 357.959658][ T5948] usb 1-1: USB disconnect, device number 8 [ 358.900300][ T8396] loop6: detected capacity change from 0 to 2560 [ 358.912230][ T8396] buffer_io_error: 11 callbacks suppressed [ 358.912280][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.927108][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.935920][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.944972][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.955805][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.964760][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.974110][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.983028][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.991819][ T8396] ldm_validate_partition_table(): Disk read failed. [ 358.999318][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.008176][ T8396] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.018231][ T8396] Dev loop6: unable to read RDB block 0 [ 359.028397][ T8396] loop6: unable to read partition table [ 359.035655][ T8396] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 359.549768][ T8387] fido_id[8387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 360.879065][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 363.024523][ T5948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 363.269157][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.304937][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.328785][ T5948] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 363.347328][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.376285][ T5948] usb 2-1: config 0 descriptor?? [ 363.823252][ T5948] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 363.907541][ T5948] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 363.981362][ T5948] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 364.055453][ T5948] usb 2-1: USB disconnect, device number 6 [ 364.185009][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.650'. [ 364.354089][ T5948] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 365.004846][ T8441] fido_id[8441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 368.516314][ T8467] can0: slcan on ptm0. [ 369.070379][ T5949] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 369.247815][ T5949] usb 1-1: config 0 has no interfaces? [ 369.253336][ T5949] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 369.362955][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.458123][ T5949] usb 1-1: config 0 descriptor?? [ 369.587480][ T8477] netlink: 'syz.3.660': attribute type 29 has an invalid length. [ 369.629402][ T8477] netlink: 'syz.3.660': attribute type 29 has an invalid length. [ 370.011904][ T5949] usb 1-1: USB disconnect, device number 9 [ 370.139436][ T8465] can0 (unregistered): slcan off ptm0. [ 370.183108][ T8480] binder: 8479:8480 ioctl 40305828 0 returned -22 [ 370.612992][ T8492] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 373.567511][ T8541] block device autoloading is deprecated and will be removed. [ 374.884736][ T8545] syz.3.670 (8545): drop_caches: 2 [ 376.517440][ T8569] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 377.718903][ T8590] syz_tun: entered allmulticast mode [ 378.274000][ T8583] syz_tun: left allmulticast mode [ 378.400649][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.407185][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.107365][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 382.477467][ T8632] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 382.633544][ T5850] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.647411][ T5850] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.667952][ T5850] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.717321][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.775074][ T8623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.843350][ T5850] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.055107][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.088306][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.207742][ T5948] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 383.350702][ T5949] usb 2-1: USB disconnect, device number 7 [ 383.421549][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.478127][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 383.526551][ T5948] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 383.595300][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.672606][ T5948] usb 3-1: config 0 descriptor?? [ 384.712420][ T5948] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 385.377805][ T5948] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 385.431383][ T5948] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 385.518064][ T5948] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 385.695578][ T5948] usb 3-1: USB disconnect, device number 8 [ 386.648818][ T8662] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 386.684510][ T8624] syz.0.688 (8624): drop_caches: 2 [ 386.708045][ T8662] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 387.221274][ T8673] syz_tun: entered allmulticast mode [ 387.640283][ T8664] syz_tun: left allmulticast mode [ 388.029523][ T8683] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 391.246238][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.716'. [ 391.942546][ T8736] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 396.395112][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 397.470245][ T8799] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 398.579068][ T8813] netfs: Couldn't get user pages (rc=-14) [ 398.904739][ T5870] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 399.289122][ T5870] usb 4-1: config 0 has an invalid interface number: 171 but max is 0 [ 399.297621][ T5870] usb 4-1: config 0 has no interface number 0 [ 399.304965][ T5870] usb 4-1: config 0 interface 171 has no altsetting 0 [ 399.323492][ T5870] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 399.341179][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.351386][ T5870] usb 4-1: Product: syz [ 399.355631][ T5870] usb 4-1: Manufacturer: syz [ 399.365506][ T5870] usb 4-1: SerialNumber: syz [ 399.399450][ T5870] usb 4-1: config 0 descriptor?? [ 399.409729][ T5870] usb-storage 4-1:0.171: USB Mass Storage device detected [ 399.821672][ T8815] ubi31: attaching mtd0 [ 399.828138][ T8815] ubi31: scanning is finished [ 399.832817][ T8815] ubi31: empty MTD device detected [ 400.050474][ T8815] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 400.058171][ T8815] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 400.065468][ T8815] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 400.072568][ T8815] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 400.080054][ T8815] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 400.086901][ T8815] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 400.095001][ T8815] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2623847783 [ 400.105094][ T8815] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 400.121863][ T5948] usb 4-1: USB disconnect, device number 7 [ 400.123769][ T8832] ubi31: background thread "ubi_bgt31d" started, PID 8832 [ 401.649370][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.750'. [ 402.406744][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.750'. [ 405.228111][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 405.249491][ T8881] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 408.268392][ T5948] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 409.737461][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 410.917964][ T5948] usb 2-1: device descriptor read/all, error -71 [ 413.810331][ T8938] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 417.755952][ T8967] tipc: Enabling of bearer rejected, already enabled [ 419.336219][ T8979] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 420.302769][ T8992] mkiss: ax0: crc mode is auto. [ 425.295346][ T9031] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 427.032423][ T9047] mkiss: ax0: crc mode is auto. [ 427.538624][ T9053] tipc: Started in network mode [ 427.543589][ T9053] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 427.553160][ T9053] tipc: Enabled bearer , priority 10 [ 427.748838][ T9058] batman_adv: batadv0: Adding interface: dummy0 [ 427.847464][ T9058] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.086798][ T9058] batman_adv: batadv0: Interface activated: dummy0 [ 428.441518][ T9063] netlink: 72 bytes leftover after parsing attributes in process `syz.1.808'. [ 428.651510][ T9056] batadv0: mtu less than device minimum [ 428.677904][ T24] tipc: Node number set to 4269801488 [ 428.684990][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.696880][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.708745][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.720405][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.732379][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.744237][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.755986][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.767744][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 428.779484][ T9056] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 431.696816][ T9094] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 432.960497][ T9105] mkiss: ax0: crc mode is auto. [ 437.476712][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 438.947014][ T9139] net_ratelimit: 10 callbacks suppressed [ 438.947034][ T9139] sctp: failed to load transform for md5: -2 [ 440.058156][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.064519][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.126415][ T9161] mkiss: ax0: crc mode is auto. [ 445.150447][ T5949] IPVS: starting estimator thread 0... [ 445.267531][ T9212] IPVS: using max 43 ests per chain, 103200 per kthread [ 446.950438][ T9231] mkiss: ax0: crc mode is auto. [ 448.824338][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 453.312257][ T9274] mkiss: ax0: crc mode is auto. [ 454.199547][ T9275] tipc: Enabled bearer , priority 10 [ 455.271669][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 455.317507][ T5901] tipc: Node number set to 2148408053 [ 455.415916][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 455.422422][ T30] audit: type=1800 audit(1755578393.360:18): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.868" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 456.143899][ T24] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 456.190834][ T24] usb 2-1: config 0 has no interface number 0 [ 456.212087][ T24] usb 2-1: config 0 interface 171 has no altsetting 0 [ 456.256803][ T24] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 456.287097][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.571301][ T24] usb 2-1: Product: syz [ 457.316249][ T24] usb 2-1: Manufacturer: syz [ 457.386586][ T24] usb 2-1: SerialNumber: syz [ 457.437096][ T24] usb 2-1: config 0 descriptor?? [ 457.469152][ T24] usb-storage 2-1:0.171: USB Mass Storage device detected [ 457.762625][ T9308] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 457.805832][ T9309] ubi: mtd0 is already attached to ubi31 [ 459.183448][ T10] usb 2-1: USB disconnect, device number 10 [ 460.486081][ T13] Bluetooth: (null): Invalid header checksum [ 460.512994][ T13] Bluetooth: (null): Invalid header checksum [ 460.522353][ T13] Bluetooth: (null): Invalid header checksum [ 460.546216][ T13] Bluetooth: (null): Invalid header checksum [ 460.668323][ T13] Bluetooth: (null): Invalid header checksum [ 460.727768][ T5962] Bluetooth: (null): Invalid header checksum [ 461.922364][ T9353] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 464.742670][ T9359] syz.2.883 (9359): drop_caches: 2 [ 466.559439][ T5962] Bluetooth: (null): Invalid header checksum [ 466.583574][ T5962] Bluetooth: (null): Invalid header checksum [ 467.218905][ T5962] Bluetooth: (null): Invalid header checksum [ 467.387799][ T9394] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 472.040503][ T9429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.047402][ T9429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.746497][ T9429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.757594][ T9429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.766148][ T9429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 473.167876][ T5961] Bluetooth: (null): Invalid header checksum [ 473.218594][ T5961] Bluetooth: (null): Invalid header checksum [ 473.246832][ T5961] Bluetooth: (null): Invalid header checksum [ 473.263586][ T5961] Bluetooth: (null): Invalid header checksum [ 473.367667][ T7938] Bluetooth: (null): Invalid header checksum [ 473.585272][ T13] Bluetooth: (null): Invalid header checksum [ 473.612990][ T13] Bluetooth: (null): Invalid header checksum [ 473.706801][ T9446] syzkaller0: entered promiscuous mode [ 473.713555][ T9446] syzkaller0: entered allmulticast mode [ 474.067395][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.073464][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.147347][ T9431] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.547583][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 474.837404][ T9431] Bluetooth: hci3: command 0x0c1a tx timeout [ 474.837539][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 474.937426][ T43] usb 2-1: device descriptor read/64, error -71 [ 475.327356][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 475.467425][ T43] usb 2-1: device descriptor read/64, error -71 [ 475.579905][ T43] usb usb2-port1: attempt power cycle [ 475.927363][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 476.048034][ T43] usb 2-1: device descriptor read/8, error -71 [ 476.287410][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 476.327827][ T43] usb 2-1: device descriptor read/8, error -71 [ 476.439912][ T43] usb usb2-port1: unable to enumerate USB device [ 478.164520][ T7938] Bluetooth: (null): Invalid header checksum [ 478.175907][ T7938] Bluetooth: (null): Invalid header checksum [ 478.230601][ T7938] Bluetooth: (null): Invalid header checksum [ 478.254057][ T7938] Bluetooth: (null): Invalid header checksum [ 478.268780][ T9490] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 478.330873][ T8051] Bluetooth: (null): Invalid header checksum [ 478.438996][ T8051] Bluetooth: (null): Invalid header checksum [ 478.551844][ T8051] Bluetooth: (null): Invalid header checksum [ 478.917208][ T9496] netlink: 72 bytes leftover after parsing attributes in process `syz.1.921'. [ 481.087483][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 481.696647][ T9518] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 481.750013][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.780819][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.805737][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.825252][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.842646][ T9512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 481.864414][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.099207][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.136270][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.969768][ T10] usb 3-1: USB disconnect, device number 9 [ 484.090866][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 484.267449][ T5870] usb 4-1: device descriptor read/64, error -71 [ 484.887359][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 485.057390][ T5870] usb 4-1: device descriptor read/64, error -71 [ 485.173946][ T5870] usb usb4-port1: attempt power cycle [ 485.177497][ T9546] netlink: 72 bytes leftover after parsing attributes in process `syz.1.934'. [ 486.839690][ T9563] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 490.155461][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 490.902132][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 491.085100][ T5870] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 491.095181][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.106624][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.122604][ T9583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 491.262164][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.522326][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.669775][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.322152][ T5893] usb 4-1: USB disconnect, device number 11 [ 492.323030][ T9602] netlink: 72 bytes leftover after parsing attributes in process `syz.0.948'. [ 498.235497][ T9640] sp0: Synchronizing with TNC [ 498.691929][ T9632] [U] ` [ 498.827119][ T9641] mkiss: ax0: crc mode is auto. [ 499.605752][ T9646] syzkaller0: entered promiscuous mode [ 499.618846][ T9646] syzkaller0: entered allmulticast mode [ 499.640230][ T9653] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 500.117405][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 500.291464][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.304170][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 500.316945][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.330418][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.345974][ T9659] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 500.367125][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.571319][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.612325][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.667747][ T5949] usb 1-1: USB disconnect, device number 10 [ 501.630040][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.647318][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.776802][ T9686] sp0: Synchronizing with TNC [ 503.783731][ T9687] [U] ` [ 503.967201][ T9692] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 506.450304][ T9723] mkiss: ax0: crc mode is auto. [ 511.087159][ T9759] sp0: Synchronizing with TNC [ 511.620285][ T9752] [U] ` [ 513.197355][ T5949] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 513.947427][ T5949] usb 4-1: device descriptor read/64, error -71 [ 514.354284][ T5949] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 515.154162][ T5949] usb 4-1: device descriptor read/64, error -71 [ 515.411339][ T5949] usb usb4-port1: attempt power cycle [ 517.203183][ T9809] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 517.214591][ T9805] blktrace: Concurrent blktraces are not allowed on loop4 [ 522.403117][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'. [ 523.108857][ T9872] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 523.307317][ T5850] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 523.467351][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 523.480767][ T5850] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 523.493796][ T5850] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 523.522647][ T5850] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 523.546831][ T5850] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 523.568751][ T5850] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.584984][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.606483][ T5850] usbtmc 4-1:16.0: bulk endpoints not found [ 523.932127][ T5850] usb 4-1: USB disconnect, device number 15 [ 524.078331][ T9879] blktrace: Concurrent blktraces are not allowed on loop2 [ 531.087322][ T5893] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 531.337813][ T5893] usb 1-1: device descriptor read/64, error -71 [ 531.749859][ T9940] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 531.774730][ T5893] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 532.517425][ T5893] usb 1-1: device descriptor read/64, error -71 [ 532.628168][ T5893] usb usb1-port1: attempt power cycle [ 533.148871][ T9955] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 540.457417][ T5893] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 540.611858][ T5893] usb 3-1: device descriptor read/64, error -71 [ 540.857315][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 540.997352][ T5893] usb 3-1: device descriptor read/64, error -71 [ 541.107997][ T5893] usb usb3-port1: attempt power cycle [ 541.637584][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 541.678152][ T5893] usb 3-1: device descriptor read/8, error -71 [ 542.017435][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 542.078604][ T5893] usb 3-1: device descriptor read/8, error -71 [ 542.283691][ T5893] usb usb3-port1: unable to enumerate USB device [ 542.931479][T10039] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 546.187039][T10053] syzkaller0: entered promiscuous mode [ 546.215664][T10053] syzkaller0: entered allmulticast mode [ 548.620459][T10064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.628254][T10064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.663790][T10064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.761707][T10064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.923790][T10064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 550.275614][T10089] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 550.747515][ T9431] Bluetooth: hci2: command 0x0c1a tx timeout [ 550.754534][ T9431] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.768058][ T9431] Bluetooth: hci0: command 0x0c1a tx timeout [ 550.777331][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 551.460986][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 553.261402][T10109] netlink: 'syz.0.1072': attribute type 29 has an invalid length. [ 553.383896][T10111] netlink: 'syz.0.1072': attribute type 29 has an invalid length. [ 557.670257][T10145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 557.676800][T10145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.683533][T10145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.772391][T10145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 557.904538][T10145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 558.251881][T10151] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 559.587364][ T9431] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.708455][T10158] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 559.737396][ T9431] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.743477][ T9431] Bluetooth: hci2: command 0x0c1a tx timeout [ 559.817293][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 559.980267][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 562.705093][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.711649][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.919714][T10189] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 562.960655][T10189] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 564.522858][T10202] tipc: Enabled bearer , priority 0 [ 564.634396][T10202] tipc: Resetting bearer [ 564.703858][T10201] tipc: Disabling bearer [ 568.281203][T10228] loop6: detected capacity change from 0 to 2560 [ 568.289068][T10228] buffer_io_error: 6 callbacks suppressed [ 568.289083][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.321351][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.331258][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.340380][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.349866][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.359540][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.369037][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.378229][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.386592][T10228] ldm_validate_partition_table(): Disk read failed. [ 568.393952][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.402869][T10228] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.413529][T10228] Dev loop6: unable to read RDB block 0 [ 568.423297][T10228] loop6: unable to read partition table [ 568.437548][T10228] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 569.570407][T10253] netlink: 'syz.1.1109': attribute type 29 has an invalid length. [ 569.624802][T10253] netlink: 'syz.1.1109': attribute type 29 has an invalid length. [ 569.807604][T10257] tipc: Enabled bearer , priority 0 [ 569.837076][T10257] tipc: Resetting bearer [ 569.907461][T10254] tipc: Disabling bearer [ 576.582429][T10315] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 577.125056][T10325] netlink: 'syz.1.1126': attribute type 29 has an invalid length. [ 577.155673][T10325] netlink: 'syz.1.1126': attribute type 29 has an invalid length. [ 581.473552][T10364] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 583.896034][T10381] syz_tun: entered allmulticast mode [ 584.019688][T10372] syz_tun: left allmulticast mode [ 586.459552][T10403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 586.468340][T10403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 586.476096][T10403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.489783][T10403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.501508][T10403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.304953][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 588.537291][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 588.540968][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 588.543414][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 588.551844][ T9431] Bluetooth: hci4: command 0x0405 tx timeout [ 590.503805][T10438] syz_tun: entered allmulticast mode [ 591.068624][T10432] syz_tun: left allmulticast mode [ 591.617396][T10459] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 593.784463][T10477] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 594.736868][T10479] blktrace: Concurrent blktraces are not allowed on loop8 [ 595.606575][T10502] netlink: 'syz.3.1175': attribute type 29 has an invalid length. [ 595.671076][T10502] netlink: 'syz.3.1175': attribute type 29 has an invalid length. [ 600.114295][T10540] 9pnet: p9_errstr2errno: server reported unknown error  [ 603.096039][T10564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.164821][T10564] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 603.239899][T10568] tipc: Enabled bearer , priority 10 [ 603.630287][T10578] tipc: Started in network mode [ 603.635203][T10578] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 603.644861][T10578] tipc: Enabled bearer , priority 10 [ 603.786765][T10574] blktrace: Concurrent blktraces are not allowed on loop8 [ 604.647369][ T5901] tipc: Node number set to 4269801488 [ 606.097259][ T5901] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 606.480365][ T5901] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 606.490686][ T5901] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 606.500082][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.515822][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.783561][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.792407][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.833653][ T10] usb 2-1: USB disconnect, device number 15 [ 608.097476][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 608.247382][ T10] usb 3-1: device descriptor read/64, error -71 [ 608.517370][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 608.667707][ T10] usb 3-1: device descriptor read/64, error -71 [ 608.781772][ T10] usb usb3-port1: attempt power cycle [ 608.787591][ T5901] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 608.967429][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 608.994577][ T5901] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 609.006196][ T5901] usb 2-1: config 0 has no interface number 0 [ 609.037315][ T5901] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 609.048558][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.057541][ T5901] usb 2-1: Product: syz [ 609.065302][ T5901] usb 2-1: Manufacturer: syz [ 609.073740][ T5901] usb 2-1: SerialNumber: syz [ 609.126042][ T5901] usb 2-1: config 0 descriptor?? [ 609.137445][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 609.169830][ T5901] smsc95xx v2.0.0 [ 609.198559][ T10] usb 3-1: device descriptor read/8, error -71 [ 609.457726][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 609.537686][ T10] usb 3-1: device descriptor read/8, error -71 [ 609.597804][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 610.163381][ T10] usb usb3-port1: unable to enumerate USB device [ 610.200284][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 610.317632][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 610.779784][T10642] block device autoloading is deprecated and will be removed. [ 612.262560][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 612.279700][ T5901] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 613.230928][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1220'. [ 613.767450][ T5948] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 614.169397][ T10] usb 2-1: USB disconnect, device number 16 [ 614.227712][ T5948] usb 4-1: device descriptor read/64, error -71 [ 614.454566][T10679] binder: 10678:10679 ioctl c0306201 0 returned -14 [ 614.543330][ T5948] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 615.148338][T10681] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 615.178378][ T5948] usb 4-1: device descriptor read/64, error -71 [ 615.305644][ T5948] usb usb4-port1: attempt power cycle [ 615.697333][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 615.717532][ T5948] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 615.758885][ T5948] usb 4-1: device descriptor read/8, error -71 [ 615.956635][ T43] usb 3-1: config 0 has an invalid interface number: 171 but max is 0 [ 615.965064][ T43] usb 3-1: config 0 has no interface number 0 [ 615.971359][ T43] usb 3-1: config 0 interface 171 has no altsetting 0 [ 615.984991][ T43] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 615.995453][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.003891][ T43] usb 3-1: Product: syz [ 616.008330][ T43] usb 3-1: Manufacturer: syz [ 616.013111][ T43] usb 3-1: SerialNumber: syz [ 616.017507][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 616.066997][ T43] usb 3-1: config 0 descriptor?? [ 616.084409][ T43] usb-storage 3-1:0.171: USB Mass Storage device detected [ 616.099448][ T5948] usb 4-1: device descriptor read/8, error -71 [ 616.293377][ T5948] usb usb4-port1: unable to enumerate USB device [ 616.553438][T10699] ubi: mtd0 is already attached to ubi31 [ 617.431492][T10705] usb usb7: usbfs: process 10705 (syz.4.1232) did not claim interface 0 before use [ 618.506438][ T5870] usb 3-1: USB disconnect, device number 18 [ 618.937348][T10723] sp0: Synchronizing with TNC [ 619.454201][T10719] [U] ` [ 619.576767][T10725] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 620.300650][T10733] syz_tun: entered allmulticast mode [ 620.700167][T10727] syz_tun: left allmulticast mode [ 621.416089][T10740] Trying to write to read-only block-device nullb0 [ 621.708563][T10742] 9pnet: p9_errstr2errno: server reported unknown error @c [ 622.936322][ T7938] Bluetooth: hci5: Frame reassembly failed (-84) [ 623.347310][ T30] audit: type=1800 audit(1755578561.310:19): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1246" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 623.538103][T10767] sp0: Synchronizing with TNC [ 624.062956][T10761] [U] ` [ 624.183812][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.190312][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.777464][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 624.937337][T10425] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 624.937394][T10424] Bluetooth: hci5: command 0x1003 tx timeout [ 624.987269][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 625.021742][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 625.033050][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.057932][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.068302][T10779] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 625.129964][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.171956][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.185865][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 625.197279][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.628346][ T10] usb 2-1: usb_control_msg returned -32 [ 625.639059][ T10] usbtmc 2-1:16.0: can't read capabilities [ 626.329746][T10425] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 626.439773][T10803] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 5 [ 626.646284][ T43] usb 2-1: USB disconnect, device number 17 [ 627.769626][T10809] sp0: Synchronizing with TNC [ 627.782290][T10808] [U] ` [ 628.057316][ T5850] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 628.314247][ T5850] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 628.324127][ T5850] usb 3-1: config 0 has no interface number 0 [ 628.341760][ T5850] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 628.359740][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.384763][ T5850] usb 3-1: Product: syz [ 628.412786][ T5850] usb 3-1: Manufacturer: syz [ 628.447620][ T5850] usb 3-1: SerialNumber: syz [ 628.516217][ T5850] usb 3-1: config 0 descriptor?? [ 628.985698][ T5850] usb 3-1: Firmware: major: 5, minor: 221, hardware type: UNKNOWN (56) [ 629.201775][T10831] syzkaller1: entered promiscuous mode [ 629.207585][T10831] syzkaller1: entered allmulticast mode [ 629.387870][ T5850] usb 3-1: failed to fetch extended address, random address set [ 629.397539][ T5850] usb 3-1: atusb_probe: initialization failed, error = -524 [ 629.406848][ T5850] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 629.865992][ T5850] usb 3-1: USB disconnect, device number 19 [ 630.187019][T10840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1271'. [ 633.547339][ T5870] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 633.769675][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.790717][ T5870] usb 3-1: config 0 has no interface number 0 [ 633.818097][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 633.840715][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 633.871366][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 633.886130][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.913676][ T5870] usb 3-1: config 0 descriptor?? [ 633.931794][T10868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 633.968121][ T5870] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 634.031902][T10877] tipc: Enabled bearer , priority 0 [ 634.045105][T10877] syzkaller0: entered promiscuous mode [ 634.051131][T10877] syzkaller0: entered allmulticast mode [ 634.101472][T10877] tipc: Resetting bearer [ 634.128318][T10876] tipc: Resetting bearer [ 634.140419][T10879] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1284'. [ 634.181922][ T5870] usb 3-1: USB disconnect, device number 20 [ 634.194781][T10876] tipc: Disabling bearer [ 636.249856][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 636.580366][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.699582][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.780142][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.838073][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.307813][ T30] audit: type=1800 audit(1755578575.280:20): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1295" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 637.665623][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.690181][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.757640][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.795071][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.291444][T10931] syz.2.1299 (10931): drop_caches: 2 [ 640.058355][ T43] IPVS: starting estimator thread 0... [ 640.342712][ T5850] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 640.756376][T10963] IPVS: using max 30 ests per chain, 72000 per kthread [ 641.412799][ T5850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.424539][ T5850] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 641.593334][ T5850] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.604548][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.613045][ T5850] usb 3-1: Product: syz [ 641.617736][ T5850] usb 3-1: Manufacturer: syz [ 641.622361][ T5850] usb 3-1: SerialNumber: syz [ 641.681349][ T5850] cdc_mbim 3-1:1.0: skipping garbage [ 642.056933][T10957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 642.225453][T10973] syz_tun: entered allmulticast mode [ 642.233699][T10972] syz_tun: left allmulticast mode [ 643.384327][T10957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 643.398721][ T5850] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 643.406272][ T5850] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 643.603094][ T5850] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 643.632200][ T5850] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 643.678307][ T5850] wwan wwan0: port wwan0mbim0 attached [ 643.758596][ T5850] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7a:12:04:e2:01:57 [ 643.908892][ T5870] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 643.969322][ T5850] usb 3-1: USB disconnect, device number 21 [ 644.739463][ T5870] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 644.741667][ T5850] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 644.759524][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.829887][ T5870] usb 1-1: config 0 descriptor?? [ 644.987959][ T5850] wwan wwan0: port wwan0mbim0 disconnected [ 645.955761][T10991] kexec: Could not allocate control_code_buffer [ 647.183717][ T5870] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 647.219657][ T5870] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 647.233307][ T5870] asix 1-1:0.0: probe with driver asix failed with error -71 [ 647.273181][ T5870] usb 1-1: USB disconnect, device number 14 [ 648.817965][T11029] loop6: detected capacity change from 0 to 2560 [ 648.827760][T11029] buffer_io_error: 11 callbacks suppressed [ 648.827794][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.842040][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.850670][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.859240][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.867583][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.876026][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.884978][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.893288][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.901411][T11029] ldm_validate_partition_table(): Disk read failed. [ 648.908202][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.919379][T11029] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.928357][T11029] Dev loop6: unable to read RDB block 0 [ 648.935799][T11029] loop6: unable to read partition table [ 648.942391][T11029] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 650.127476][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 650.201155][T11042] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1331'. [ 650.327598][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 650.459454][ T43] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 650.472721][ T43] usb 3-1: config 0 has no interface number 0 [ 650.483473][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 650.504652][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.537214][ T43] usb 3-1: Product: syz [ 650.541452][ T43] usb 3-1: Manufacturer: syz [ 650.546068][ T43] usb 3-1: SerialNumber: syz [ 650.584105][ T43] usb 3-1: config 0 descriptor?? [ 650.626348][ T43] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 650.979478][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 651.472017][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 651.742247][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 651.758890][ T43] usb 3-1: USB disconnect, device number 22 [ 651.891293][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 651.954764][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 652.013794][ T43] quatech2 3-1:0.51: device disconnected [ 652.035563][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 652.883279][T11065] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 653.017055][T11067] netlink: 'syz.1.1343': attribute type 27 has an invalid length. [ 653.079405][T11067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.499730][ T5948] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 653.727717][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 653.833617][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.057281][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 654.283905][ T5948] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 654.297602][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.324906][ T5948] usb 3-1: config 0 descriptor?? [ 654.499056][ T43] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 654.513857][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.561930][ T43] usb 4-1: config 0 descriptor?? [ 654.592214][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 654.640299][ T5948] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 654.663919][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 655.072088][ T5948] usb 3-1: USB disconnect, device number 23 [ 655.089282][ T43] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 656.033935][T11113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.211709][ T43] gspca_cpia1: usb_control_msg 02, error -71 [ 656.220881][ T43] gspca_cpia1: usb_control_msg 05, error -71 [ 656.226967][ T43] cpia1 4-1:0.0: unexpected systemstate: 00 [ 656.240622][ T43] usb 4-1: USB disconnect, device number 20 [ 658.135082][ T30] audit: type=1800 audit(1755578596.100:21): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1363" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 658.232332][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 659.658377][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 659.829427][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.862204][ T43] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.884392][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 659.907423][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.943273][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.117770][ T43] usb 2-1: invalid MIDI out EP 0 [ 660.907597][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.984311][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.274700][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 662.027817][ T43] usb 2-1: USB disconnect, device number 18 [ 662.939331][T11181] syz_tun: entered allmulticast mode [ 662.948541][T11180] syz_tun: left allmulticast mode [ 666.044745][T11233] syz_tun: entered allmulticast mode [ 666.371498][T11227] syz_tun: left allmulticast mode [ 672.725867][T11301] mkiss: ax0: crc mode is auto. [ 674.215231][ T30] audit: type=1800 audit(1755578612.180:22): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1417" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 674.457833][T11323] netlink: 'syz.2.1418': attribute type 27 has an invalid length. [ 674.517271][T11323] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1418'. [ 675.458489][T11326] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 678.055274][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 679.097381][T10676] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 679.367709][T10676] usb 3-1: Using ep0 maxpacket: 8 [ 679.381717][T10676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.403655][T10676] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 679.878149][T10676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.890600][T10676] usb 3-1: config 0 descriptor?? [ 680.107477][T10676] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 680.309968][T10676] usb 3-1: USB disconnect, device number 24 [ 680.383831][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1437'. [ 680.982470][T11406] netlink: 'syz.2.1441': attribute type 2 has an invalid length. [ 681.031029][T11406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'. [ 682.830937][T11425] syz.2.1447 (11425): drop_caches: 2 [ 682.903912][T11425] syz.2.1447 (11425): drop_caches: 2 [ 683.018257][ T5870] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 683.051845][ T5870] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 683.457343][ T5870] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 684.304475][ T5870] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.362365][ T5870] usb 4-1: config 0 has no interface number 0 [ 684.385126][ T5870] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 684.429743][ T5870] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 684.444854][ T5870] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 684.459354][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.479415][ T5870] usb 4-1: config 0 descriptor?? [ 684.500092][T11437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 684.543373][ T5870] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 684.622352][T11452] tipc: Enabled bearer , priority 0 [ 684.634964][T11452] syzkaller0: entered promiscuous mode [ 684.643221][T11452] syzkaller0: entered allmulticast mode [ 684.662637][T11452] tipc: Resetting bearer [ 684.675137][T11451] tipc: Resetting bearer [ 684.700128][T11451] tipc: Disabling bearer [ 684.874409][ T5850] usb 4-1: USB disconnect, device number 21 [ 685.607788][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.615091][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.838528][T11463] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1460'. [ 689.045434][T11501] tipc: Enabled bearer , priority 0 [ 689.424792][T11503] syzkaller0: entered promiscuous mode [ 689.473299][T11503] syzkaller0: entered allmulticast mode [ 689.702217][T11501] tipc: Resetting bearer [ 689.723083][T11500] tipc: Resetting bearer [ 689.771603][T11500] tipc: Disabling bearer [ 690.977737][T11521] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 694.188779][T11558] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 694.221797][T11558] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 11558, name: syz.2.1488 [ 694.266190][T11558] 1 lock held by syz.2.1488/11558: [ 694.319117][T11558] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 694.397361][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.2.1488 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 694.397389][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.397408][T11558] Call Trace: [ 694.397420][T11558] [ 694.397429][T11558] dump_stack_lvl+0x189/0x250 [ 694.397458][T11558] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.397499][T11558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.397543][T11558] __cant_migrate+0x238/0x2e0 [ 694.397572][T11558] ? __pfx___cant_migrate+0x10/0x10 [ 694.397611][T11558] nf_hook_run_bpf+0x8f/0x1f0 [ 694.397632][T11558] ? __pfx_ipt_do_table+0x10/0x10 [ 694.397661][T11558] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 694.397682][T11558] ? iptable_mangle_hook+0x189/0x4c0 [ 694.397713][T11558] ? nf_hook+0x9d/0x380 [ 694.397731][T11558] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 694.397757][T11558] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 694.397780][T11558] nf_hook_slow+0xc5/0x220 [ 694.397815][T11558] nf_hook+0x217/0x380 [ 694.397840][T11558] ? nf_hook+0x9d/0x380 [ 694.397858][T11558] ? __pfx_nf_hook+0x10/0x10 [ 694.397881][T11558] ? __pfx_ip_finish_output+0x10/0x10 [ 694.397911][T11558] ? ip_fast_csum+0x1ee/0x2b0 [ 694.397952][T11558] ip_output+0x16c/0x220 [ 694.397973][T11558] ? __pfx_ip_finish_output+0x10/0x10 [ 694.398000][T11558] ip_send_skb+0x74/0x100 [ 694.398026][T11558] udp_send_skb+0xaf1/0x14c0 [ 694.398072][T11558] udp_sendmsg+0x196b/0x2180 [ 694.398113][T11558] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 694.398139][T11558] ? __pfx_udp_sendmsg+0x10/0x10 [ 694.398197][T11558] ? __local_bh_enable_ip+0x12d/0x1c0 [ 694.398230][T11558] ? inet_sendmsg+0x14f/0x370 [ 694.398256][T11558] ? inet_sendmsg+0x29c/0x370 [ 694.398284][T11558] __sock_sendmsg+0x19c/0x270 [ 694.398314][T11558] ____sys_sendmsg+0x505/0x830 [ 694.398354][T11558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.398399][T11558] ? import_iovec+0x74/0xa0 [ 694.398433][T11558] ___sys_sendmsg+0x21f/0x2a0 [ 694.398469][T11558] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.398562][T11558] ? __fget_files+0x2a/0x420 [ 694.398599][T11558] ? __fget_files+0x3a0/0x420 [ 694.398635][T11558] __x64_sys_sendmsg+0x19b/0x260 [ 694.398672][T11558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.398730][T11558] ? rcu_is_watching+0x15/0xb0 [ 694.398757][T11558] ? do_syscall_64+0xbe/0x3b0 [ 694.398785][T11558] do_syscall_64+0xfa/0x3b0 [ 694.398806][T11558] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.398827][T11558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.398847][T11558] ? clear_bhb_loop+0x60/0xb0 [ 694.398872][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.398892][T11558] RIP: 0033:0x7f813158ebe9 [ 694.398922][T11558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.398941][T11558] RSP: 002b:00007f8132370038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.398962][T11558] RAX: ffffffffffffffda RBX: 00007f81317b5fa0 RCX: 00007f813158ebe9 [ 694.398977][T11558] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000006 [ 694.398990][T11558] RBP: 00007f8131611e19 R08: 0000000000000000 R09: 0000000000000000 [ 694.399003][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.399015][T11558] R13: 00007f81317b6038 R14: 00007f81317b5fa0 R15: 00007ffc35b77d28 [ 694.399047][T11558]