last executing test programs: 7m2.27219897s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6456c6fa101e8c10d18a759023acdc938c9eab14910348ac0e2b7cde8f59f2c59690d89c9e7b0f911aaef7612061fbef38104ba0e16", 0xa4}], 0x1) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012042, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 7m1.182287s ago: executing program 0 (id=6): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="a243", 0x2}], 0x1, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000300)=0xe) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x1fd, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1f, 0x80000, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000002c0)=r2, 0x1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000108000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="c30000000000000008001b000000000014001680100001800c0004"], 0x3c}, 0x1, 0xffffa888}, 0x0) r7 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0xd67c, 0x10100, 0xd, 0xc8}, &(0x7f0000000280), &(0x7f0000000240)) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m57.377594451s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x138, 0x138, 0x3, [@struct={0x7, 0x9, 0x0, 0x4, 0x1, 0xbd07, [{0x0, 0x4, 0x93}, {0x3, 0x2, 0x7ff}, {0xa, 0x1, 0xb}, {0x0, 0x2, 0x2}, {0x7, 0x4, 0x5}, {0x8, 0x0, 0x6}, {0x1, 0x2, 0x5}, {0xc, 0x2, 0xe}, {0x8, 0x5, 0x7e619aab}]}, @struct={0xb, 0x7, 0x0, 0x4, 0x0, 0x48, [{0xc, 0x3, 0x6988}, {0x8, 0x1, 0x8}, {0x5, 0x3, 0x7}, {0x4, 0x3, 0x5f03}, {0x1, 0x0, 0x3}, {0x8, 0x0, 0x1}, {0xb, 0x2}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x1}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x6}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x1ff, [{0x5, 0x2, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/165, 0x153, 0xa5, 0x1, 0x2, 0x10000}, 0x28) fchmod(r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x9004) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b", 0x71, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4004800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x40, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r12, &(0x7f0000000340)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) 6m53.015741128s ago: executing program 0 (id=12): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$security_ima(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m50.015786427s ago: executing program 0 (id=16): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r0, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001d80)={0x2, 0x4}, 0x2) socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x200800000800078, 0x80501) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000180), 0x0, 0x7f) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000240), 0x4) sched_setattr(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) read$midi(0xffffffffffffffff, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) 6m42.394021841s ago: executing program 0 (id=19): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x780200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) pipe2$9p(0x0, 0x80800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f00000007c0)={0x400, 0x7, 0x0, [{0xc8, 0x40000000000, 0x4, 0xd, 0x6, 0x2, 0x3, '\x00', 0x2000000000000}, {0xfffffffffffffff9, 0x101, 0x2, 0x82, 0x9, 0x5f, 0x0, '\x00', 0x4}, {0x6641, 0xb63, 0x400, 0x0, 0x1, 0x2, 0x75, '\x00', 0x80000000}, {0x1, 0x3, 0x9, 0x5c, 0xd5, 0x14, 0x7, '\x00', 0x6}, {0x1, 0x1, 0x80, 0x0, 0x96, 0x5, 0x35, '\x00', 0x9}, {0x7ff, 0x9, 0xfffffffffffff2f3, 0x1, 0x9, 0x9b, 0x8, '\x00', 0x2}, {0xfffffffffffffa89, 0x400, 0x7, 0xe, 0x0, 0x9, 0x7f, '\x00', 0xd}]}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 6m25.822361419s ago: executing program 32 (id=19): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x780200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) pipe2$9p(0x0, 0x80800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f00000007c0)={0x400, 0x7, 0x0, [{0xc8, 0x40000000000, 0x4, 0xd, 0x6, 0x2, 0x3, '\x00', 0x2000000000000}, {0xfffffffffffffff9, 0x101, 0x2, 0x82, 0x9, 0x5f, 0x0, '\x00', 0x4}, {0x6641, 0xb63, 0x400, 0x0, 0x1, 0x2, 0x75, '\x00', 0x80000000}, {0x1, 0x3, 0x9, 0x5c, 0xd5, 0x14, 0x7, '\x00', 0x6}, {0x1, 0x1, 0x80, 0x0, 0x96, 0x5, 0x35, '\x00', 0x9}, {0x7ff, 0x9, 0xfffffffffffff2f3, 0x1, 0x9, 0x9b, 0x8, '\x00', 0x2}, {0xfffffffffffffa89, 0x400, 0x7, 0xe, 0x0, 0x9, 0x7f, '\x00', 0xd}]}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 42.135626768s ago: executing program 4 (id=929): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 41.650703325s ago: executing program 4 (id=931): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 39.813283951s ago: executing program 3 (id=938): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="13a38520f7be44fed70000fe08060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 39.498898863s ago: executing program 4 (id=939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x8080000, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff1000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60000010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) 39.122450326s ago: executing program 3 (id=941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0x900, 0x44, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @private1, 0x700, 0x10, 0x2, 0x5}}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pI4 \x00'}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, r1, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x10, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff949c}, {}, {}, [@alu={0x4, 0x0, 0x1, 0x3, 0x4, 0x18, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001180)='syzkaller\x00', 0x4, 0x17, &(0x7f00000011c0)=""/23, 0x41000, 0x62, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xc, 0x10000, 0x10000}, 0x10, 0x274f8, r0, 0x6, &(0x7f0000001440)=[r7, r1, 0xffffffffffffffff, r8], &(0x7f0000001480)=[{0x3, 0x2, 0x10, 0xa}, {0x3, 0x3, 0x2, 0x2}, {0x0, 0x3, 0x1, 0x7}, {0x2, 0x1, 0x0, 0xc}, {0x4, 0x2, 0xa, 0x8}, {0x0, 0x5, 0xf, 0x3}], 0x10, 0x8}, 0x94) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r10, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 37.505548667s ago: executing program 5 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0a, 0xfac01, 0xfac04, 0xfac0a]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 36.933307749s ago: executing program 3 (id=950): r0 = epoll_create(0x80) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x11}) epoll_wait(r0, &(0x7f0000002240)=[{}], 0x1, 0xfffffffb) 36.931660397s ago: executing program 1 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r0) 36.892076538s ago: executing program 5 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}}, 0x0) 36.507488836s ago: executing program 1 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d5063300b0000000ffffffffffff08"], 0x6f4}}, 0x0) 36.414395994s ago: executing program 5 (id=955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) 36.139155943s ago: executing program 1 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xdb}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 36.09667612s ago: executing program 2 (id=957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xab00000000000000, 0x10000, 0xe, 0x0, 0x3}) 35.863895926s ago: executing program 5 (id=958): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1) 35.83527204s ago: executing program 3 (id=959): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 35.671500399s ago: executing program 1 (id=960): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0x900, 0x44, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @private1, 0x700, 0x10, 0x2, 0x5}}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pI4 \x00'}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, r1, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x10, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff949c}, {}, {}, [@alu={0x4, 0x0, 0x1, 0x3, 0x4, 0x18, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001180)='syzkaller\x00', 0x4, 0x17, &(0x7f00000011c0)=""/23, 0x41000, 0x62, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xc, 0x10000, 0x10000}, 0x10, 0x274f8, r0, 0x6, &(0x7f0000001440)=[r7, r1, 0xffffffffffffffff, r8], &(0x7f0000001480)=[{0x3, 0x2, 0x10, 0xa}, {0x3, 0x3, 0x2, 0x2}, {0x0, 0x3, 0x1, 0x7}, {0x2, 0x1, 0x0, 0xc}, {0x4, 0x2, 0xa, 0x8}, {0x0, 0x5, 0xf, 0x3}], 0x10, 0x8}, 0x94) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r10, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 35.561555562s ago: executing program 2 (id=961): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 34.563107685s ago: executing program 3 (id=962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 34.562529s ago: executing program 4 (id=963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) getrusage(0x0, &(0x7f0000000700)) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 34.377950051s ago: executing program 2 (id=964): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000e7"], 0x10}}], 0x1, 0x4000000) 34.376835156s ago: executing program 5 (id=965): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 34.122950774s ago: executing program 3 (id=966): syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34.053944513s ago: executing program 4 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @action={{{}, {}, @device_b}, @addba_resp}}]}, 0x48}}, 0x0) 33.980939269s ago: executing program 2 (id=968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r2, 0x0, 0x3}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 33.910496368s ago: executing program 5 (id=969): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r5, 0x1) 32.934980196s ago: executing program 1 (id=970): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 32.862068259s ago: executing program 4 (id=971): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) listen(r0, 0x80000000) 32.823913605s ago: executing program 2 (id=972): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x4000}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 32.664097762s ago: executing program 1 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="0400340008001f01ef000000140055"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 32.504914509s ago: executing program 2 (id=974): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x20, @local, 0x9}, 0x1c) 0s ago: executing program 33 (id=969): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r5, 0x1) kernel console output (not intermixed with test programs): deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.768738][ T6201] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 156.811496][ T6201] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 156.893053][ T6202] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 158.374495][ T5846] Bluetooth: hci5: command tx timeout [ 158.509630][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.476727][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.533576][ T6194] chnl_net:caif_netlink_parms(): no params data found [ 159.845752][ T6220] Zero length message leads to an empty skb [ 160.460802][ T5846] Bluetooth: hci5: command tx timeout [ 161.549699][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.560526][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.588005][ T6237] veth0_to_team: entered promiscuous mode [ 161.593853][ T6237] veth0_to_team: entered allmulticast mode [ 162.886005][ T5846] Bluetooth: hci5: command tx timeout [ 163.098209][ T6249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.917465][ T6259] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.743024][ T30] audit: type=1326 audit(1752841746.673:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.3.58" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa73518e9a9 code=0x0 [ 165.590347][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.610880][ T5846] Bluetooth: hci5: command tx timeout [ 165.662097][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.920487][ T6263] Bluetooth: MGMT ver 1.23 [ 166.940199][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.972532][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.917207][ T6194] bridge_slave_0: entered allmulticast mode [ 167.940109][ T6194] bridge_slave_0: entered promiscuous mode [ 168.346407][ T6275] ======================================================= [ 168.346407][ T6275] WARNING: The mand mount option has been deprecated and [ 168.346407][ T6275] and is ignored by this kernel. Remove the mand [ 168.346407][ T6275] option from the mount to silence this warning. [ 168.346407][ T6275] ======================================================= [ 168.480893][ T6275] fuseblk: Bad value for 'fd' [ 168.851053][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.052231][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.090018][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.113796][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.126659][ T6194] bridge_slave_1: entered allmulticast mode [ 170.137043][ T6194] bridge_slave_1: entered promiscuous mode [ 172.591476][ T5856] Bluetooth: hci5: command 0x0405 tx timeout [ 174.233265][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.283170][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.778124][ T6194] team0: Port device team_slave_0 added [ 177.102139][ T6194] team0: Port device team_slave_1 added [ 177.600992][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.489907][ T6328] input: syz1 as /devices/virtual/input/input5 [ 179.057733][ T6328] batadv_slave_1: entered promiscuous mode [ 179.064136][ T6330] batadv_slave_1: left promiscuous mode [ 179.075818][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.776585][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 180.017452][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.234621][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.937383][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.944451][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.981892][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.046606][ T6341] random: crng reseeded on system resumption [ 181.553111][ T6344] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 181.563117][ T6344] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 183.422206][ T6194] hsr_slave_0: entered promiscuous mode [ 184.688994][ T6194] hsr_slave_1: entered promiscuous mode [ 184.715852][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.830415][ T6194] Cannot create hsr debugfs directory [ 184.848347][ T59] bridge_slave_1: left allmulticast mode [ 184.854193][ T59] bridge_slave_1: left promiscuous mode [ 185.037686][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.557967][ T59] bridge_slave_0: left allmulticast mode [ 185.723790][ T59] bridge_slave_0: left promiscuous mode [ 185.730403][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.996470][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.736073][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.784891][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.803046][ T59] bond0 (unregistering): Released all slaves [ 187.868779][ T6399] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 189.123651][ T6406] netlink: 'syz.2.86': attribute type 12 has an invalid length. [ 189.145953][ T6408] capability: warning: `syz.3.87' uses 32-bit capabilities (legacy support in use) [ 190.235077][ T36] Bluetooth: hci2: Frame reassembly failed (-84) [ 190.646653][ T6428] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 191.667435][ T6194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.683536][ T6194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.694934][ T6194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.711652][ T6194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.485890][ T5856] Bluetooth: hci2: command 0x1003 tx timeout [ 192.514499][ T5846] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 192.642873][ T6439] lo speed is unknown, defaulting to 1000 [ 192.750211][ T43] IPVS: starting estimator thread 0... [ 192.990539][ T6451] IPVS: using max 30 ests per chain, 72000 per kthread [ 193.027908][ T59] hsr_slave_0: left promiscuous mode [ 193.036265][ T59] hsr_slave_1: left promiscuous mode [ 193.923650][ T6459] Cannot find add_set index 0 as target [ 193.932362][ T6459] netlink: 'syz.2.95': attribute type 9 has an invalid length. [ 193.950921][ T6459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.255340][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.262819][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.373068][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392564][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.401228][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.407731][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.608232][ T59] veth1_macvtap: left promiscuous mode [ 194.638275][ T59] veth0_macvtap: left promiscuous mode [ 194.644007][ T59] veth1_vlan: left promiscuous mode [ 194.719768][ T59] veth0_vlan: left promiscuous mode [ 195.462794][ T6462] ALSA: seq fatal error: cannot create timer (-19) [ 196.408370][ T59] team0 (unregistering): Port device team_slave_1 removed [ 196.442549][ T59] team0 (unregistering): Port device team_slave_0 removed [ 196.745636][ T6439] lo speed is unknown, defaulting to 1000 [ 196.814598][ T6469] pim6reg: entered allmulticast mode [ 196.864041][ T6439] lo speed is unknown, defaulting to 1000 [ 196.873974][ T6439] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.887820][ T6439] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 196.918860][ T6439] lo speed is unknown, defaulting to 1000 [ 196.926528][ T6439] lo speed is unknown, defaulting to 1000 [ 196.933911][ T6439] lo speed is unknown, defaulting to 1000 [ 196.940908][ T6439] lo speed is unknown, defaulting to 1000 [ 196.947789][ T6439] lo speed is unknown, defaulting to 1000 [ 197.023879][ T6469] pim6reg: left allmulticast mode [ 197.807669][ T6483] unsupported nlmsg_type 40 [ 197.895495][ T5944] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.193430][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.227038][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 199.658480][ T5944] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.350539][ T6495] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.425789][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.433842][ T5944] usb 4-1: Product: syz [ 200.655474][ T5944] usb 4-1: Manufacturer: syz [ 200.660560][ T5944] usb 4-1: SerialNumber: syz [ 200.710259][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 200.730030][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 200.896931][ T5944] usb 4-1: config 0 descriptor?? [ 200.936692][ T5944] usb 4-1: can't set config #0, error -71 [ 200.952814][ T6491] ceph: No mds server is up or the cluster is laggy [ 200.980481][ T5944] usb 4-1: USB disconnect, device number 2 [ 200.981883][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.034996][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.052760][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.059998][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.884539][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.891731][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.138673][ T6513] Cannot find add_set index 0 as target [ 202.148472][ T6513] netlink: 'syz.4.106': attribute type 9 has an invalid length. [ 202.169347][ T6513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.445630][ T6520] sctp: [Deprecated]: syz.1.105 (pid 6520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.445630][ T6520] Use struct sctp_sack_info instead [ 203.199393][ T6531] netlink: 80 bytes leftover after parsing attributes in process `syz.2.108'. [ 203.567479][ T59] IPVS: stop unused estimator thread 0... [ 203.944768][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.966484][ T6537] siw: device registration error -23 [ 204.914782][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 204.925459][ T5925] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 204.933629][ T5925] usb 4-1: config 0 has no interface number 0 [ 204.984570][ T6546] siw: device registration error -23 [ 205.264211][ T5925] usb 4-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 205.773026][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.888179][ T6549] xt_recent: Unsupported userspace flags (000000b2) [ 205.962483][ T5925] usb 4-1: Product: syz [ 206.098074][ T5925] usb 4-1: Manufacturer: syz [ 206.231336][ T5925] usb 4-1: SerialNumber: syz [ 206.285272][ T5925] usb 4-1: config 0 descriptor?? [ 206.862131][ T5925] usb 4-1: can't set config #0, error -71 [ 206.975268][ T5925] usb 4-1: USB disconnect, device number 3 [ 208.904997][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 209.935834][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 210.237109][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 211.462810][ T30] audit: type=1326 audit(1752842052.176:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6581 comm="syz.2.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cdbd8e9a9 code=0x0 [ 212.254852][ T6601] IPv6: Can't replace route, no match found [ 214.095110][ T6600] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.130'. [ 214.193693][ T6611] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 214.238021][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.609967][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.269239][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.278598][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.290580][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.299012][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.413143][ T5944] IPVS: starting estimator thread 0... [ 216.524504][ T6632] IPVS: using max 27 ests per chain, 64800 per kthread [ 216.752836][ T6640] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 217.459766][ T6620] lo speed is unknown, defaulting to 1000 [ 217.474748][ T5856] Bluetooth: hci2: command tx timeout [ 217.486890][ T6640] Falling back ldisc for ttyprintk. [ 217.525115][ T6642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.587972][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 219.575826][ T5846] Bluetooth: hci2: command tx timeout [ 220.697691][ T5926] IPVS: starting estimator thread 0... [ 221.505211][ T6670] IPVS: using max 24 ests per chain, 57600 per kthread [ 221.737805][ T5842] Bluetooth: hci2: command tx timeout [ 222.137529][ T6684] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 222.167160][ T6684] CIFS: Unable to determine destination address [ 222.686891][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 222.692997][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 222.699102][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 222.705251][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 223.244534][ T6685] warning: `syz.3.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.799474][ T5850] Bluetooth: hci2: command tx timeout [ 223.857626][ T6689] ALSA: seq fatal error: cannot create timer (-19) [ 224.990267][ T6699] pim6reg: entered allmulticast mode [ 225.127450][ T6620] chnl_net:caif_netlink_parms(): no params data found [ 225.174285][ T6688] pim6reg: left allmulticast mode [ 227.694398][ T6722] ubi31: attaching mtd0 [ 227.735948][ T6722] ubi31: scanning is finished [ 227.740754][ T6722] ubi31: empty MTD device detected [ 228.825105][ T6722] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 228.832741][ T6722] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 228.840139][ T6722] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 228.847443][ T6722] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 228.854999][ T6722] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 228.861884][ T6722] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 228.870002][ T6722] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3331242966 [ 228.880140][ T6722] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 228.896047][ T6732] ubi31: background thread "ubi_bgt31d" started, PID 6732 [ 229.241411][ T6743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.399818][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.524413][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.713379][ T6620] bridge_slave_0: entered allmulticast mode [ 229.791720][ T6620] bridge_slave_0: entered promiscuous mode [ 229.875049][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.906124][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.944236][ T6620] bridge_slave_1: entered allmulticast mode [ 230.014784][ T6620] bridge_slave_1: entered promiscuous mode [ 231.079411][ T6759] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 231.204726][ T49] bridge_slave_1: left allmulticast mode [ 231.295176][ T49] bridge_slave_1: left promiscuous mode [ 231.301129][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.378178][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.856321][ T49] bridge_slave_0: left allmulticast mode [ 231.874481][ T49] bridge_slave_0: left promiscuous mode [ 231.893260][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.395539][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.484028][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.588066][ T49] bond0 (unregistering): Released all slaves [ 234.737052][ T6620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.817895][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.839321][ T6760] batadv_slave_0: entered promiscuous mode [ 234.923672][ T6620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.103812][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.156'. [ 235.437158][ T6797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 235.595982][ T49] hsr_slave_0: left promiscuous mode [ 235.864627][ T49] hsr_slave_1: left promiscuous mode [ 235.890529][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.025370][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.617654][ T49] team0 (unregistering): Port device team_slave_1 removed [ 237.814311][ T49] team0 (unregistering): Port device team_slave_0 removed [ 239.743364][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.156'. [ 239.752500][ T6787] tipc: Started in network mode [ 239.777222][ T6787] tipc: Node identity 7, cluster identity 5 [ 239.783192][ T6787] tipc: Node number set to 7 [ 239.890694][ T6620] team0: Port device team_slave_0 added [ 240.019943][ T6620] team0: Port device team_slave_1 added [ 240.308445][ T6838] netlink: 'syz.3.164': attribute type 3 has an invalid length. [ 240.316469][ T6838] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 240.324192][ T6838] netlink: 216 bytes leftover after parsing attributes in process `syz.3.164'. [ 240.333317][ T6838] NCSI netlink: No device for ifindex 33022 [ 240.446129][ T6839] hub 8-0:1.0: USB hub found [ 240.451762][ T6839] hub 8-0:1.0: 1 port detected [ 240.939733][ T6837] CIFS mount error: No usable UNC path provided in device string! [ 240.939733][ T6837] [ 240.950067][ T6837] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 241.299221][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.507400][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.370432][ T6620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.668119][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.800304][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.228348][ T6620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.254242][ T6864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.581990][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 245.001973][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.170'. [ 245.011219][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 245.160022][ T6868] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 245.430835][ T6868] evm: overlay not supported [ 245.923522][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.4.172'. [ 246.147020][ T6620] hsr_slave_0: entered promiscuous mode [ 246.153332][ T6620] hsr_slave_1: entered promiscuous mode [ 246.260593][ T6620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.291476][ T6620] Cannot create hsr debugfs directory [ 246.513415][ T6879] bond2: entered promiscuous mode [ 246.531356][ T6879] bond2: entered allmulticast mode [ 246.558126][ T6879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.576047][ T6883] netlink: 'syz.3.173': attribute type 12 has an invalid length. [ 246.815282][ T6883] kvm: emulating exchange as write [ 246.946265][ T6892] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 246.954176][ T6892] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 246.991533][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 249.023836][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 249.032969][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 250.905108][ T5944] IPVS: starting estimator thread 0... [ 251.104606][ T6921] IPVS: using max 41 ests per chain, 98400 per kthread [ 251.407734][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 252.414996][ T5971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.422863][ T5971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.434631][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.489325][ T6620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.602356][ T6620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.574733][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.582718][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.469647][ T6937] syz.1.185 (6937): drop_caches: 2 [ 254.975406][ T6620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.081736][ T6962] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 255.534744][ T6620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.799760][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813793][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.823599][ T6974] netlink: 'syz.1.189': attribute type 12 has an invalid length. [ 256.274528][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.277099][ T6985] kAFS: No cell specified [ 257.326003][ T6620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.341503][ T6986] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 257.632555][ T6620] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.909404][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.916576][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.249448][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.256664][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.861716][ T7000] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.048104][ T7000] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.057562][ T7000] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.068700][ T7000] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.143009][ T7013] trusted_key: encrypted_key: insufficient parameters specified [ 259.811377][ T7000] geneve2: entered allmulticast mode [ 260.849111][ T7031] netlink: 'syz.4.198': attribute type 39 has an invalid length. [ 261.404679][ T6048] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 261.435614][ T6620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.569206][ T6048] usb 5-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 261.664229][ T6048] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 261.685448][ T6048] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.695198][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.321364][ T6048] usb 5-1: Product: syz [ 262.327122][ T6048] usb 5-1: Manufacturer: syz [ 262.331752][ T6048] usb 5-1: SerialNumber: syz [ 262.402434][ T6048] cdc_ether 5-1:1.0: skipping garbage [ 262.441525][ T6048] usb 5-1: bad CDC descriptors [ 264.396192][ T6048] usb 5-1: USB disconnect, device number 2 [ 264.592836][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 264.754501][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.356793][ T7082] netlink: 80 bytes leftover after parsing attributes in process `syz.1.205'. [ 266.709413][ T7050] syz.3.200 (7050): drop_caches: 2 [ 267.445828][ T7090] syz.3.206 (7090): drop_caches: 2 [ 267.461885][ T7090] syz.3.206 (7090): drop_caches: 2 [ 268.440279][ T7102] No control pipe specified [ 269.190557][ T7106] overlay: Bad value for 'redirect_dir' [ 269.579877][ T30] audit: type=1326 audit(1752842115.284:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 270.374462][ T30] audit: type=1326 audit(1752842115.294:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 270.609153][ T30] audit: type=1326 audit(1752842116.004:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 270.676373][ T30] audit: type=1326 audit(1752842116.094:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 271.146199][ T30] audit: type=1326 audit(1752842116.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 271.173001][ T30] audit: type=1326 audit(1752842116.194:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 271.234452][ T30] audit: type=1326 audit(1752842116.194:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 271.382386][ T30] audit: type=1326 audit(1752842116.194:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 271.508337][ T7124] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.65538) [ 272.473128][ T30] audit: type=1326 audit(1752842116.194:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 272.524420][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.584520][ T30] audit: type=1326 audit(1752842116.194:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7108 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 272.854467][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 272.862578][ T5944] usb 4-1: config 0 has no interfaces? [ 272.870581][ T5944] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.879969][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.486920][ T5944] usb 4-1: Product: syz [ 273.500736][ T5944] usb 4-1: Manufacturer: syz [ 273.622538][ T5944] usb 4-1: SerialNumber: syz [ 273.628250][ T7135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.846697][ T5944] usb 4-1: config 0 descriptor?? [ 275.059927][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.080580][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.089724][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.098550][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.106279][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.255741][ T5927] usb 4-1: USB disconnect, device number 4 [ 276.383173][ T7161] syz.1.219 (7161): drop_caches: 2 [ 276.389958][ T7161] syz.1.219 (7161): drop_caches: 2 [ 276.868230][ T7138] lo speed is unknown, defaulting to 1000 [ 277.577530][ T7171] xt_hashlimit: size too large, truncated to 1048576 [ 277.714053][ T5856] Bluetooth: hci2: command tx timeout [ 279.804420][ T5850] Bluetooth: hci2: command tx timeout [ 280.738272][ T7195] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 280.759747][ T7195] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 280.875687][ T7204] siw: device registration error -23 [ 281.404765][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.884446][ T5850] Bluetooth: hci2: command tx timeout [ 281.966459][ T7209] overlayfs: failed to clone upperpath [ 284.035373][ T5850] Bluetooth: hci2: command tx timeout [ 284.146459][ T7228] program syz.3.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.208150][ T7229] program syz.3.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.328906][ T7231] netlink: 'syz.2.232': attribute type 5 has an invalid length. [ 284.351709][ T7229] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 284.545958][ T5971] bridge_slave_1: left allmulticast mode [ 284.551658][ T5971] bridge_slave_1: left promiscuous mode [ 284.698502][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.757937][ T5971] bridge_slave_0: left allmulticast mode [ 284.763634][ T5971] bridge_slave_0: left promiscuous mode [ 284.806557][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.831932][ T7246] tmpfs: Bad value for 'mpol' [ 286.720418][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 286.754855][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.767629][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.777616][ T5971] bond0 (unregistering): Released all slaves [ 286.791694][ T7138] chnl_net:caif_netlink_parms(): no params data found [ 286.803978][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 286.815716][ T7236] tipc: Enabling of bearer rejected, failed to enable media [ 287.081477][ T7258] overlayfs: failed to clone upperpath [ 287.190914][ T5971] hsr_slave_0: left promiscuous mode [ 287.208089][ T5971] hsr_slave_1: left promiscuous mode [ 287.224260][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.231618][ T6048] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 287.345842][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.504465][ T6048] usb 2-1: Using ep0 maxpacket: 32 [ 288.242450][ T6048] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 288.253154][ T6048] usb 2-1: config 0 has no interface number 0 [ 288.261696][ T6048] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 288.273474][ T6048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.284369][ T6048] usb 2-1: Product: syz [ 288.349129][ T7272] overlayfs: overlapping lowerdir path [ 288.539223][ T6048] usb 2-1: Manufacturer: syz [ 288.543869][ T6048] usb 2-1: SerialNumber: syz [ 288.552378][ T6048] usb 2-1: config 0 descriptor?? [ 288.612380][ T6048] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 288.805599][ T6048] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 288.844022][ T6048] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 291.284150][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 291.332153][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 291.784370][ T7290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.238'. [ 292.068808][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 292.086377][ T6048] usb 2-1: USB disconnect, device number 2 [ 292.285688][ T7314] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7314 comm: syz.4.243) [ 292.334222][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 292.404808][ T6048] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 292.470601][ T30] audit: type=1800 audit(1752842138.034:52): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.243" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=14343 res=0 errno=0 [ 292.773920][ T6048] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 292.830764][ T6048] quatech2 2-1:0.51: device disconnected [ 292.920906][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 292.979608][ T7322] SET target dimension over the limit! [ 293.008279][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 293.043254][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.060634][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.158299][ T7138] bridge_slave_0: entered allmulticast mode [ 293.528947][ T7138] bridge_slave_0: entered promiscuous mode [ 293.670657][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.698420][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.735891][ T7138] bridge_slave_1: entered allmulticast mode [ 293.768310][ T7138] bridge_slave_1: entered promiscuous mode [ 294.012894][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.090713][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.841498][ T7341] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 295.865887][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 297.874553][ T5856] Bluetooth: hci5: command 0x1003 tx timeout [ 298.195111][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 299.668067][ T7346] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 299.688063][ T7138] team0: Port device team_slave_0 added [ 299.806349][ T7138] team0: Port device team_slave_1 added [ 300.012919][ T7362] syz.4.251 (7362): drop_caches: 2 [ 300.019851][ T7362] syz.4.251 (7362): drop_caches: 2 [ 300.911410][ T7374] fuse: Bad value for 'fd' [ 301.836534][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 301.875717][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.882714][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.354451][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.385389][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.539920][ T979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 302.574493][ T979] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.576550][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.198061][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.352367][ T7383] : entered promiscuous mode [ 304.824599][ T30] audit: type=1326 audit(1752842149.464:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 304.871895][ T7385] fido_id[7385]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 305.092720][ T7397] No control pipe specified [ 305.410989][ T30] audit: type=1326 audit(1752842149.464:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.498907][ T30] audit: type=1326 audit(1752842149.464:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.530839][ T30] audit: type=1326 audit(1752842149.464:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.553559][ T30] audit: type=1326 audit(1752842149.464:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.664597][ T30] audit: type=1326 audit(1752842149.464:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.713604][ T7138] hsr_slave_0: entered promiscuous mode [ 305.754403][ T30] audit: type=1326 audit(1752842149.464:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.788224][ T7138] hsr_slave_1: entered promiscuous mode [ 305.848049][ T7138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.856066][ T30] audit: type=1326 audit(1752842149.464:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 305.905729][ T7138] Cannot create hsr debugfs directory [ 306.021001][ T30] audit: type=1326 audit(1752842149.464:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 306.277487][ T30] audit: type=1326 audit(1752842149.464:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7389 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 307.227874][ T7425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.779701][ T979] kernel write not supported for file /297/attr/sockcreate (pid: 979 comm: kworker/1:2) [ 308.437776][ T7439] syz.4.264 (7439): drop_caches: 2 [ 308.451055][ T7439] syz.4.264 (7439): drop_caches: 2 [ 310.072530][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 310.233912][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 312.987791][ T7475] ubi31: detaching mtd0 [ 313.394508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.021192][ T7475] ubi31: mtd0 is detached [ 316.461209][ T6048] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 317.056255][ T7494] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 317.067748][ T5850] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 317.110736][ T6048] usb 4-1: config 0 has an invalid interface number: 192 but max is 2 [ 317.128900][ T6048] usb 4-1: config 0 has an invalid interface number: 131 but max is 2 [ 317.137821][ T6048] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 317.475147][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.481576][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.423529][ T6048] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 318.432578][ T6048] usb 4-1: config 0 has no interface number 0 [ 318.438749][ T6048] usb 4-1: config 0 has no interface number 1 [ 318.444916][ T6048] usb 4-1: config 0 interface 192 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 318.455877][ T6048] usb 4-1: config 0 interface 192 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 318.494405][ T6048] usb 4-1: config 0 interface 192 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 318.544370][ T6048] usb 4-1: config 0 interface 192 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 318.601153][ T6048] usb 4-1: config 0 interface 192 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 318.686013][ T6048] usb 4-1: config 0 interface 192 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 319.798710][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 319.807638][ T6048] usb 4-1: config 0 interface 192 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 319.838411][ T6048] usb 4-1: config 0 interface 192 has no altsetting 0 [ 320.104427][ T6048] usb 4-1: config 0 interface 131 has no altsetting 0 [ 320.126465][ T6048] usb 4-1: string descriptor 0 read error: -71 [ 320.132796][ T6048] usb 4-1: Dual-Role OTG device on HNP port [ 320.337711][ T7138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.558429][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 321.226597][ T6048] usb 4-1: can't set HNP mode: -71 [ 321.330755][ T7138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.342486][ T7138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.375223][ T7138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.434100][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.708509][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.144731][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.151931][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.225764][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 323.225811][ T30] audit: type=1800 audit(1752842168.804:76): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.282" name="bus" dev="overlay" ino=396 res=0 errno=0 [ 323.630943][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.638133][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.719991][ T7138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.731624][ T7138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.307373][ T7571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.283'. [ 324.970806][ T7578] netlink: 80 bytes leftover after parsing attributes in process `syz.2.287'. [ 324.991581][ T7572] syz.1.284 (7572): drop_caches: 2 [ 325.019216][ T7572] syz.1.284 (7572): drop_caches: 2 [ 330.129990][ T7617] x_tables: duplicate underflow at hook 3 [ 331.953256][ T7632] overlayfs: failed to resolve './file0': -2 [ 333.021916][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.167233][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.176802][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.189404][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.199674][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.905259][ T7650] lo speed is unknown, defaulting to 1000 [ 334.608318][ T7670] netlink: 'syz.4.301': attribute type 4 has an invalid length. [ 334.616210][ T7670] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.301'. [ 335.234449][ T5850] Bluetooth: hci2: command tx timeout [ 335.464339][ T5822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 336.276298][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 336.385458][ T5822] usb 4-1: device descriptor read/all, error -71 [ 336.621714][ T7672] syz.1.300 (7672): drop_caches: 2 [ 337.324866][ T5850] Bluetooth: hci2: command tx timeout [ 338.736968][ T7672] syz.1.300 (7672): drop_caches: 2 [ 338.761575][ T7681] bridge0: port 3(gretap0) entered blocking state [ 338.768995][ T7681] bridge0: port 3(gretap0) entered disabled state [ 338.776001][ T7681] gretap0: entered allmulticast mode [ 338.784946][ T7681] gretap0: entered promiscuous mode [ 338.788194][ T7695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.791450][ T7681] bridge0: port 3(gretap0) entered blocking state [ 338.803637][ T7681] bridge0: port 3(gretap0) entered forwarding state [ 339.454335][ T5850] Bluetooth: hci2: command tx timeout [ 341.474655][ T5850] Bluetooth: hci2: command tx timeout [ 343.019839][ T7737] binder: 7730:7737 ioctl c018620c 200000000640 returned -22 [ 343.115513][ T7741] Invalid source name [ 343.119594][ T7741] UBIFS error (pid: 7741): cannot open "./file0", error -22 [ 343.131511][ T7741] binder: 7726:7741 ioctl 40046210 0 returned -14 [ 343.149631][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 343.732838][ T7741] team0: Port device team_slave_1 removed [ 346.241239][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.260239][ T7747] bond0: (slave rose0): Enslaving as an active interface with an up link [ 346.377113][ T3539] bridge_slave_1: left allmulticast mode [ 346.415965][ T3539] bridge_slave_1: left promiscuous mode [ 346.435725][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.764566][ T7764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.317'. [ 346.847611][ T7764] hub 8-0:1.0: USB hub found [ 346.854298][ T7764] hub 8-0:1.0: 1 port detected [ 346.891960][ T3539] bridge_slave_0: left allmulticast mode [ 346.897795][ T3539] bridge_slave_0: left promiscuous mode [ 346.904362][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.626461][ T7772] overlayfs: missing 'lowerdir' [ 348.388518][ T10] Process accounting resumed [ 348.855439][ T7780] new mount options do not match the existing superblock, will be ignored [ 348.866673][ T7780] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 349.209381][ T7771] syz.4.318 (7771): drop_caches: 2 [ 349.222624][ T7771] syz.4.318 (7771): drop_caches: 2 [ 350.433313][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 351.241388][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.252962][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.264076][ T3539] bond0 (unregistering): Released all slaves [ 351.339791][ T7774] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 352.262721][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 352.784613][ T5850] Bluetooth: hci0: ISO packet too small [ 352.946831][ T7819] capability: warning: `syz.1.327' uses deprecated v2 capabilities in a way that may be insecure [ 353.794766][ T3539] hsr_slave_0: left promiscuous mode [ 353.800865][ T3539] hsr_slave_1: left promiscuous mode [ 353.823118][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.899248][ T7832] syz.4.330: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 353.914622][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.4.330 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 353.914646][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.914661][ T7832] Call Trace: [ 353.914672][ T7832] [ 353.914680][ T7832] dump_stack_lvl+0x189/0x250 [ 353.914717][ T7832] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.914738][ T7832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.914774][ T7832] warn_alloc+0x214/0x310 [ 353.914795][ T7832] ? stack_depot_save_flags+0x429/0x900 [ 353.914817][ T7832] ? __pfx_warn_alloc+0x10/0x10 [ 353.914840][ T7832] ? kasan_save_track+0x4f/0x80 [ 353.914867][ T7832] ? xskq_create+0x56/0x170 [ 353.914883][ T7832] ? xsk_init_queue+0xb0/0x110 [ 353.914908][ T7832] ? xsk_setsockopt+0x43f/0x710 [ 353.914937][ T7832] ? do_sock_setsockopt+0x17c/0x1b0 [ 353.914961][ T7832] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 353.914984][ T7832] ? do_syscall_64+0xfa/0x3b0 [ 353.915001][ T7832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.915027][ T7832] __vmalloc_node_range_noprof+0x125/0x12f0 [ 353.915076][ T7832] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 353.915097][ T7832] ? preempt_schedule_thunk+0x16/0x30 [ 353.915125][ T7832] ? __kasan_kmalloc+0x93/0xb0 [ 353.915145][ T7832] vmalloc_user_noprof+0xad/0xf0 [ 353.915164][ T7832] ? xskq_create+0xbf/0x170 [ 353.915182][ T7832] xskq_create+0xbf/0x170 [ 353.915201][ T7832] xsk_init_queue+0xb0/0x110 [ 353.915237][ T7832] xsk_setsockopt+0x43f/0x710 [ 353.915267][ T7832] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.915297][ T7832] ? __fget_files+0x2a/0x420 [ 353.915320][ T7832] ? __fget_files+0x2a/0x420 [ 353.915339][ T7832] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 353.915357][ T7832] ? __pfx_xsk_setsockopt+0x10/0x10 [ 353.915385][ T7832] do_sock_setsockopt+0x17c/0x1b0 [ 353.915414][ T7832] __x64_sys_setsockopt+0x13f/0x1b0 [ 353.915443][ T7832] do_syscall_64+0xfa/0x3b0 [ 353.915463][ T7832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.915479][ T7832] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.915496][ T7832] ? clear_bhb_loop+0x60/0xb0 [ 353.915518][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.915535][ T7832] RIP: 0033:0x7fde9478e9a9 [ 353.915555][ T7832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.915569][ T7832] RSP: 002b:00007fde95688038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.915587][ T7832] RAX: ffffffffffffffda RBX: 00007fde949b6160 RCX: 00007fde9478e9a9 [ 353.915600][ T7832] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 353.915611][ T7832] RBP: 00007fde94810ca1 R08: 0000000000000004 R09: 0000000000000000 [ 353.915622][ T7832] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.915633][ T7832] R13: 0000000000000000 R14: 00007fde949b6160 R15: 00007fff5ada7b68 [ 353.915661][ T7832] [ 353.915695][ T7832] Mem-Info: [ 354.202262][ T7832] active_anon:3139 inactive_anon:11882 isolated_anon:0 [ 354.202262][ T7832] active_file:13443 inactive_file:39339 isolated_file:0 [ 354.202262][ T7832] unevictable:768 dirty:189 writeback:0 [ 354.202262][ T7832] slab_reclaimable:5616 slab_unreclaimable:98791 [ 354.202262][ T7832] mapped:35889 shmem:9950 pagetables:1385 [ 354.202262][ T7832] sec_pagetables:0 bounce:0 [ 354.202262][ T7832] kernel_misc_reclaimable:0 [ 354.202262][ T7832] free:1311420 free_pcp:14316 free_cma:0 [ 354.248249][ T7832] Node 0 active_anon:12556kB inactive_anon:47528kB active_file:53516kB inactive_file:157356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143508kB dirty:756kB writeback:0kB shmem:38264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12748kB pagetables:5424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 354.282093][ T7832] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 354.313845][ T7832] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.342921][ T7832] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 354.348950][ T7832] Node 0 DMA32 free:1333576kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12556kB inactive_anon:47528kB active_file:51748kB inactive_file:157288kB unevictable:1536kB writepending:756kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:39936kB local_pcp:9856kB free_cma:0kB [ 354.381598][ T7832] lowmem_reserve[]: 0 0 1 1 1 [ 354.386448][ T7832] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 354.415513][ T7832] lowmem_reserve[]: 0 0 0 0 0 [ 354.420254][ T7832] Node 1 Normal free:3896824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17312kB local_pcp:7072kB free_cma:0kB [ 354.451865][ T7832] lowmem_reserve[]: 0 0 0 0 0 [ 354.456635][ T7832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 354.469289][ T7832] Node 0 DMA32: 219*4kB (UME) 142*8kB (UE) 520*16kB (UME) 521*32kB (UME) 102*64kB (UME) 106*128kB (UME) 51*256kB (UME) 39*512kB (UME) 10*1024kB (UME) 7*2048kB (UME) 300*4096kB (M) = 1333500kB [ 354.488243][ T7832] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 354.499752][ T7832] Node 1 Normal: 192*4kB (UME) 49*8kB (UME) 51*16kB (UME) 126*32kB (UME) 34*64kB (UME) 4*128kB (UME) 2*256kB (M) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3896824kB [ 354.517918][ T7832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.527475][ T7832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.536774][ T7832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.546350][ T7832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.555914][ T7832] 62749 total pagecache pages [ 354.560587][ T7832] 0 pages in swap cache [ 354.564755][ T7832] Free swap = 124996kB [ 354.568896][ T7832] Total swap = 124996kB [ 354.573130][ T7832] 2097051 pages RAM [ 354.576961][ T7832] 0 pages HighMem/MovableOnly [ 354.581630][ T7832] 424693 pages reserved [ 354.585794][ T7832] 0 pages cma reserved [ 354.806906][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'. [ 355.373217][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.541893][ T7846] input: syz1 as /devices/virtual/input/input7 [ 359.390515][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 359.861139][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 364.358918][ T7910] netlink: 'syz.4.345': attribute type 3 has an invalid length. [ 364.766891][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 364.779159][ T7900] overlayfs: failed to clone upperpath [ 365.049290][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.347'. [ 365.059877][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 365.105276][ T7917] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 365.158461][ T7921] netlink: 304 bytes leftover after parsing attributes in process `syz.3.348'. [ 367.841611][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.598927][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.606945][ T7650] bridge_slave_0: entered allmulticast mode [ 368.661305][ T7650] bridge_slave_0: entered promiscuous mode [ 368.669957][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.678322][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.195234][ T7650] bridge_slave_1: entered allmulticast mode [ 369.202950][ T7650] bridge_slave_1: entered promiscuous mode [ 370.447949][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.563311][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.806279][ T7946] new mount options do not match the existing superblock, will be ignored [ 371.235105][ T7945] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 371.365739][ T7950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.662352][ T7650] team0: Port device team_slave_0 added [ 373.803349][ T7650] team0: Port device team_slave_1 added [ 374.833237][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.875425][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.004505][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.559792][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.599843][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.662164][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.678797][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.696076][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.702437][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.612893][ T7650] hsr_slave_0: entered promiscuous mode [ 379.634473][ T30] audit: type=1326 audit(1752842225.334:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 379.696319][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.730624][ T7650] hsr_slave_1: entered promiscuous mode [ 379.771741][ T7650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.816973][ T7650] Cannot create hsr debugfs directory [ 379.831763][ T30] audit: type=1326 audit(1752842225.404:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 379.913278][ T30] audit: type=1326 audit(1752842225.404:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 379.944122][ T30] audit: type=1326 audit(1752842225.404:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 379.992602][ T30] audit: type=1326 audit(1752842225.404:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 380.015237][ C1] hrtimer: interrupt took 1233441 ns [ 380.044584][ T30] audit: type=1326 audit(1752842225.404:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 380.130488][ T30] audit: type=1326 audit(1752842225.404:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 380.172565][ T30] audit: type=1326 audit(1752842225.444:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 380.196498][ T30] audit: type=1326 audit(1752842225.444:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 380.218294][ T30] audit: type=1326 audit(1752842225.444:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd92158e9a9 code=0x7ffc0000 [ 381.916881][ T8047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 381.923478][ T8047] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 384.021615][ T8047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.028056][ T8047] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 384.122328][ T8047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.128823][ T8047] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 384.150575][ T8047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 384.156897][ T8047] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 384.177377][ T8047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.183891][ T8047] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 386.474483][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 386.495791][ T8070] netlink: 'syz.4.383': attribute type 9 has an invalid length. [ 386.774307][ T6048] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 386.866418][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.878980][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 386.889192][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.901734][ T43] usb 2-1: config 0 descriptor?? [ 386.920027][ T43] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 387.141736][ T8086] x_tables: ip_tables: osf match: only valid for protocol 6 [ 387.438811][ T6048] usb 4-1: Using ep0 maxpacket: 8 [ 387.457308][ T6048] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 387.533795][ T43] pwc: send_video_command error -71 [ 387.554612][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 387.563239][ T43] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 387.634614][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.642662][ T6048] usb 4-1: Product: syz [ 387.656774][ T6048] usb 4-1: Manufacturer: syz [ 387.661423][ T6048] usb 4-1: SerialNumber: syz [ 387.673147][ T43] usb 2-1: USB disconnect, device number 3 [ 387.679606][ T6048] usb 4-1: config 0 descriptor?? [ 387.689260][ T6048] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 387.888952][ T6048] usb 4-1: USB disconnect, device number 9 [ 391.287816][ T59] bridge_slave_1: left allmulticast mode [ 391.328866][ T59] bridge_slave_1: left promiscuous mode [ 391.353459][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.401088][ T59] bridge_slave_0: left allmulticast mode [ 391.428302][ T59] bridge_slave_0: left promiscuous mode [ 391.434128][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.490023][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.518734][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.637407][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.667667][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.705548][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.736265][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.796692][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.911792][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 391.978867][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.000706][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.173223][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.329613][ T8139] syz.1.398 (8139): drop_caches: 2 [ 392.337821][ T8139] syz.1.398 (8139): drop_caches: 2 [ 393.432687][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.501450][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.520522][ T59] bond0 (unregistering): Released all slaves [ 394.194567][ T5850] Bluetooth: hci2: command tx timeout [ 394.215736][ T8140] lo speed is unknown, defaulting to 1000 [ 395.677818][ T59] hsr_slave_0: left promiscuous mode [ 395.698216][ T59] hsr_slave_1: left promiscuous mode [ 395.730140][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.756824][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.274400][ T5850] Bluetooth: hci2: command tx timeout [ 396.953117][ T59] team0 (unregistering): Port device team_slave_1 removed [ 397.015030][ T59] team0 (unregistering): Port device team_slave_0 removed [ 398.954947][ T5850] Bluetooth: hci2: command tx timeout [ 399.825185][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 401.165842][ T5850] Bluetooth: hci2: command tx timeout [ 402.137572][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 402.492848][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 402.492866][ T30] audit: type=1326 audit(1752842248.224:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.549602][ T30] audit: type=1326 audit(1752842248.224:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.571509][ T30] audit: type=1326 audit(1752842248.224:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.595686][ T30] audit: type=1326 audit(1752842248.224:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.618257][ T30] audit: type=1326 audit(1752842248.224:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.758499][ T30] audit: type=1326 audit(1752842248.224:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.849742][ T30] audit: type=1326 audit(1752842248.224:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 402.925515][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.932773][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.971707][ T8244] netlink: 'syz.1.424': attribute type 3 has an invalid length. [ 402.989911][ T8140] bridge_slave_0: entered allmulticast mode [ 403.001353][ T30] audit: type=1326 audit(1752842248.224:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 403.023341][ T8244] netlink: 'syz.1.424': attribute type 3 has an invalid length. [ 403.035396][ T8140] bridge_slave_0: entered promiscuous mode [ 403.135459][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 403.239488][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.246763][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.253941][ T8140] bridge_slave_1: entered allmulticast mode [ 403.259977][ T30] audit: type=1326 audit(1752842248.224:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 404.166711][ T8140] bridge_slave_1: entered promiscuous mode [ 404.182069][ T30] audit: type=1326 audit(1752842248.224:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8235 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73518e9a9 code=0x7ffc0000 [ 404.686817][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.485744][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.620754][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 405.705626][ T8140] team0: Port device team_slave_0 added [ 405.738225][ T8279] syz.4.435 (8279): drop_caches: 2 [ 405.745565][ T8279] syz.4.435 (8279): drop_caches: 2 [ 405.777246][ T8140] team0: Port device team_slave_1 added [ 405.814527][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 405.845934][ T5925] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 405.872788][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.918624][ T5925] usb 4-1: Product: syz [ 405.941774][ T5925] usb 4-1: Manufacturer: syz [ 405.971301][ T5925] usb 4-1: SerialNumber: syz [ 406.013311][ T5925] usb 4-1: config 0 descriptor?? [ 406.020874][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.029701][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.125039][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.197810][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.216295][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.277441][ T6048] usb 4-1: USB disconnect, device number 10 [ 406.318243][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.432298][ T8140] hsr_slave_0: entered promiscuous mode [ 406.450759][ T8140] hsr_slave_1: entered promiscuous mode [ 406.646816][ T8140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.654743][ T8140] Cannot create hsr debugfs directory [ 407.454708][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.765078][ T6048] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.000959][ T8140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.126164][ T8140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.230990][ T8140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.406011][ T8140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 409.758745][ T5944] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 410.595369][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.603746][ T8356] trusted_key: encrypted_key: insufficient parameters specified [ 410.712583][ T5944] usb 5-1: config 2 has an invalid interface number: 1 but max is 0 [ 410.730664][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.765607][ T5944] usb 5-1: config 2 has no interface number 0 [ 410.772126][ T5944] usb 5-1: config 2 interface 1 has no altsetting 0 [ 410.800330][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.807505][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.858266][ T5944] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 410.873481][ T8364] xt_connbytes: Forcing CT accounting to be enabled [ 410.875712][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.915881][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.923544][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.924254][ T5944] usb 5-1: Product: syz [ 410.945425][ T8364] Cannot find del_set index 1 as target [ 410.971265][ T5944] usb 5-1: Manufacturer: syz [ 410.994700][ T5944] usb 5-1: SerialNumber: syz [ 411.422793][ T5944] snd-usb-audio 5-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 412.245984][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 412.411066][ T8390] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 413.371366][ T5944] snd-usb-us122l 5-1:2.1: usb_set_interface error [ 413.546128][ T8390] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 414.199740][ T8390] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.463'. [ 414.876663][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.028437][ T5944] snd-usb-us122l 5-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 415.040745][ T5944] usb 5-1: USB disconnect, device number 3 [ 415.216252][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.668194][ T8427] IPv6: Can't replace route, no match found [ 416.187838][ T8140] veth0_vlan: entered promiscuous mode [ 416.234784][ T8140] veth1_vlan: entered promiscuous mode [ 416.362535][ T8140] veth0_macvtap: entered promiscuous mode [ 416.433419][ T8140] veth1_macvtap: entered promiscuous mode [ 416.482281][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.550407][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.591107][ T8140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.661086][ T8140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.704266][ T8140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.743737][ T8140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.083242][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.091340][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.290369][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.317442][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.497832][ T6048] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 418.278402][ T6048] usb 2-1: unable to get BOS descriptor or descriptor too short [ 418.291623][ T6048] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 418.304532][ T6048] usb 2-1: can't read configurations, error -71 [ 418.547582][ T8502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.003352][ T8520] smc: net device bond0 applied user defined pnetid SYZ2 [ 423.327776][ T8564] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0) [ 425.330079][ T8595] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.444422][ T8607] ALSA: mixer_oss: invalid OSS volume 'w' [ 426.883231][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 426.933371][ T8619] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 426.997561][ T8619] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.130008][ T8647] netlink: 'syz.5.548': attribute type 1 has an invalid length. [ 429.465995][ T8640] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 433.243586][ T8697] xt_HMARK: spi-set and port-set can't be combined [ 433.454338][ T43] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 433.633177][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.651732][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.670216][ T43] usb 2-1: config 0 has no interface number 0 [ 433.694058][ T43] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 433.749114][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.794158][ T43] usb 2-1: config 0 descriptor?? [ 433.808506][ T43] usb 2-1: selecting invalid altsetting 1 [ 433.826178][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 433.836421][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 433.859474][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 434.026030][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.048238][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.073704][ T5926] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 434.094300][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.127893][ T43] DVB: Unable to find symbol cx22700_attach() [ 434.732539][ T5926] usb 6-1: config 0 descriptor?? [ 434.900910][ T8740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.954543][ T43] DVB: Unable to find symbol tda10046_attach() [ 434.961202][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 435.036765][ T43] usb 2-1: USB disconnect, device number 6 [ 435.105871][ T5944] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 435.247851][ T5926] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 435.290123][ T5944] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 435.294604][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 435.300189][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.344596][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.378311][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.387941][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.404674][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.422265][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.433002][ T5822] usb 6-1: USB disconnect, device number 2 [ 435.439819][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 435.466618][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.491945][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.501495][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 435.523018][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.526644][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.540709][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.545348][ T24] usb 4-1: Product: syz [ 435.555759][ T24] usb 4-1: Manufacturer: syz [ 435.560677][ T24] usb 4-1: SerialNumber: syz [ 435.561204][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.587047][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.595451][ T24] usb 4-1: config 0 descriptor?? [ 435.601829][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.614074][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.623207][ T24] usb 4-1: interface 1 not found [ 435.630336][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.631688][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.640613][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 435.657457][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.664282][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.674685][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.691322][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 435.702144][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.720781][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.733324][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.737354][ T43] usb 2-1: config 0 descriptor?? [ 435.743258][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.764048][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.778278][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.788251][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.807491][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.820128][ T5944] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 435.837665][ T5944] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 435.853123][ T6048] usb 4-1: USB disconnect, device number 11 [ 435.868285][ T5944] usb 5-1: Product: syz [ 435.881507][ T5944] usb 5-1: Manufacturer: syz [ 435.887093][ T5944] usb 5-1: SerialNumber: syz [ 435.899414][ T5944] usb 5-1: config 0 descriptor?? [ 435.925988][ T5944] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 436.177941][ T43] logitech-hidpp-device 0003:046D:C343.0003: unbalanced delimiter at end of report description [ 436.220867][ T6048] usb 5-1: USB disconnect, device number 4 [ 436.230062][ T43] logitech-hidpp-device 0003:046D:C343.0003: hidpp_probe:parse failed [ 436.250544][ T6048] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 436.258935][ T43] logitech-hidpp-device 0003:046D:C343.0003: probe with driver logitech-hidpp-device failed with error -22 [ 436.387200][ T43] usb 2-1: USB disconnect, device number 7 [ 437.949991][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 437.992421][ T8794] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 438.060013][ T8794] netlink: 120 bytes leftover after parsing attributes in process `syz.4.587'. [ 438.144281][ T5944] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 438.394918][ T5944] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.462441][ T5944] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.516597][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 438.545205][ T5944] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 438.566646][ T8806] Driver unsupported XDP return value 0 on prog (id 151) dev N/A, expect packet loss! [ 438.575113][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.825178][ T5944] usb 2-1: config 0 descriptor?? [ 439.554369][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 439.667898][ T5944] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 439.748823][ T5944] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 439.815662][ T5944] hid-steam 0003:28DE:1102.0004: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 439.858028][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.889449][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.926389][ T5944] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 439.936135][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 439.968188][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.978690][ T5944] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0004/input/input9 [ 440.020121][ T5926] usb 5-1: config 0 descriptor?? [ 440.118397][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.124873][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.137259][ T5944] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 440.207117][ T5944] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 440.275058][ T5944] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 440.355823][ T5944] usb 2-1: USB disconnect, device number 8 [ 440.480346][ T5926] lg-g15 0003:046D:C222.0006: unknown main item tag 0x0 [ 440.489934][ T6048] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 440.613464][ T8844] fido_id[8844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 440.622264][ T5926] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 440.668463][ T5926] usb 5-1: USB disconnect, device number 5 [ 440.940075][ T5944] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 440.964593][ T6048] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 440.996182][ T6048] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 441.494429][ T6048] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 441.494454][ T6048] usb 4-1: config 8 has no interface number 0 [ 441.494490][ T6048] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 441.494514][ T6048] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.496884][ T6048] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 441.496907][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.496925][ T6048] usb 4-1: Product: syz [ 441.496938][ T6048] usb 4-1: Manufacturer: syz [ 441.496951][ T6048] usb 4-1: SerialNumber: syz [ 441.732016][ T6048] usb 4-1: USB disconnect, device number 12 [ 441.816289][ T8860] fido_id[8860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 442.114406][ T5926] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 442.391454][ T5926] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.272917][ T5926] usb 5-1: config 0 has no interface number 0 [ 443.284619][ T5926] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 443.293691][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.306028][ T5926] usb 5-1: config 0 descriptor?? [ 443.318722][ T5926] usb 5-1: selecting invalid altsetting 1 [ 443.334361][ T5926] dvb_ttusb_budget: ttusb_init_controller: error [ 443.340828][ T5926] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 443.431301][ T5926] DVB: Unable to find symbol cx22700_attach() [ 443.573515][ T5926] DVB: Unable to find symbol tda10046_attach() [ 443.614455][ T5926] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 443.678068][ T5926] usb 5-1: USB disconnect, device number 6 [ 444.944959][ T8907] netlink: 'syz.1.620': attribute type 29 has an invalid length. [ 444.985147][ T8907] netlink: 'syz.1.620': attribute type 29 has an invalid length. [ 445.294431][ T5944] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 445.484659][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 445.515832][ T5944] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 445.535430][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.570789][ T5944] usb 6-1: Product: syz [ 445.574905][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 445.581911][ T5944] usb 6-1: Manufacturer: syz [ 445.606233][ T5944] usb 6-1: SerialNumber: syz [ 445.665163][ T5944] usb 6-1: config 0 descriptor?? [ 445.676269][ T5944] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 445.722441][ T5944] usb 6-1: setting power ON [ 445.733033][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 445.763383][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.793747][ T5944] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 445.806685][ T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.841692][ T5944] usb 6-1: media controller created [ 445.864825][ T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.876250][ T8914] dvb-usb: bulk message failed: -22 (3/0) [ 445.876297][ T8914] cxusb: i2c rd: len=138 is too big! [ 445.876297][ T8914] [ 445.942899][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.945357][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 446.014824][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 446.033405][ T5944] usb 6-1: selecting invalid altsetting 6 [ 446.042125][ T8944] netlink: 'syz.3.630': attribute type 4 has an invalid length. [ 446.134287][ T8944] netlink: 17 bytes leftover after parsing attributes in process `syz.3.630'. [ 446.151976][ T5944] usb 6-1: digital interface selection failed (-22) [ 446.246372][ T5944] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 446.449969][ T5944] usb 6-1: setting power OFF [ 446.552006][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 446.667538][ T5944] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 446.817772][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.894558][ T5944] (NULL device *): no alternate interface [ 446.917780][ T24] usb 2-1: config 0 descriptor?? [ 447.012221][ T5944] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 447.375223][ T5944] usb 6-1: USB disconnect, device number 3 [ 447.494944][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 447.643686][ T5944] usb 2-1: USB disconnect, device number 9 [ 447.667076][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.689488][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.719158][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 447.743585][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.776443][ T5822] usb 5-1: config 0 descriptor?? [ 448.920701][ T5822] logitech 0003:046D:C293.0008: unbalanced collection at end of report description [ 448.932115][ T5822] logitech 0003:046D:C293.0008: parse failed [ 448.939479][ T5822] logitech 0003:046D:C293.0008: probe with driver logitech failed with error -22 [ 449.029331][ T5822] usb 5-1: USB disconnect, device number 7 [ 449.446931][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 449.644275][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 449.670512][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.712025][ T43] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 449.758958][ T43] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 449.808052][ T43] usb 4-1: config 4 has no interface number 0 [ 449.839631][ T43] usb 4-1: string descriptor 0 read error: -22 [ 449.871569][ T43] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 449.885108][ T5944] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 449.945473][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.003466][ T43] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 450.044956][ T43] usb 4-1: No valid video chain found. [ 450.068988][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.098233][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.181032][ T5944] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 450.245800][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.303019][ T5944] usb 6-1: config 0 descriptor?? [ 450.314456][ T43] usb 4-1: USB disconnect, device number 13 [ 451.200411][ T5944] isku 0003:1E7D:319C.0009: unknown global tag 0xc [ 451.271607][ T5944] isku 0003:1E7D:319C.0009: item 0 0 1 12 parsing failed [ 451.323210][ T5944] isku 0003:1E7D:319C.0009: parse failed [ 451.359572][ T5944] isku 0003:1E7D:319C.0009: probe with driver isku failed with error -22 [ 451.460820][ T5944] usb 6-1: USB disconnect, device number 4 [ 452.034426][ T43] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 452.217164][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.242770][ T43] usb 4-1: config 0 has no interface number 0 [ 452.270059][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 452.299420][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.329919][ T43] usb 4-1: config 0 descriptor?? [ 452.371287][ T43] usb 4-1: selecting invalid altsetting 1 [ 452.398411][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 452.428543][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 452.740538][ T9041] syz.1.663 (9041): drop_caches: 2 [ 452.757123][ T43] DVB: Unable to find symbol cx22700_attach() [ 452.792679][ T9041] syz.1.663 (9041): drop_caches: 2 [ 453.017418][ T43] DVB: Unable to find symbol tda10046_attach() [ 453.041747][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 453.124126][ T43] usb 4-1: USB disconnect, device number 14 [ 454.594329][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 454.604099][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 454.764318][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 454.774290][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 454.791541][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 454.806911][ T43] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.828516][ T24] usb 5-1: config 0 has no interface number 0 [ 454.848770][ T43] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.863119][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.884314][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.895162][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 454.902276][ T43] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 454.924046][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.945549][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 454.965871][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 454.978044][ T43] usb 4-1: config 0 descriptor?? [ 454.994302][ T24] usb 5-1: Product: syz [ 455.002893][ T24] usb 5-1: SerialNumber: syz [ 455.023599][ T24] usb 5-1: config 0 descriptor?? [ 455.133322][ T24] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 455.290580][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 455.588352][ T5926] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 455.645105][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.654063][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.662031][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.669616][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.677288][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.684810][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.692206][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.699925][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.707627][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.715235][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 455.765778][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.787037][ T5926] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 455.793724][ T43] asus 0003:048D:CE50.000A: item fetching failed at offset 2/5 [ 455.801942][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.829140][ T5926] usb 2-1: config 0 descriptor?? [ 455.914472][ T6048] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 456.074779][ T24] usb 5-1: USB disconnect, device number 8 [ 456.074847][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 456.097883][ T6048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.106077][ T43] asus 0003:048D:CE50.000A: Asus hid parse failed: -22 [ 456.135022][ T43] asus 0003:048D:CE50.000A: probe with driver asus failed with error -22 [ 456.145690][ T6048] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.152009][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 456.166217][ T43] usb 4-1: USB disconnect, device number 15 [ 456.219611][ T6048] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 456.242178][ T6048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 456.279359][ T6048] usb 6-1: SerialNumber: syz [ 456.309885][ T5926] zeroplus 0003:0C12:0005.000B: report_id 0 is invalid [ 456.346662][ T5926] zeroplus 0003:0C12:0005.000B: item 0 0 1 8 parsing failed [ 456.367085][ T5926] zeroplus 0003:0C12:0005.000B: parse failed [ 456.373187][ T5926] zeroplus 0003:0C12:0005.000B: probe with driver zeroplus failed with error -22 [ 456.533573][ T6048] usb 6-1: 0:2 : does not exist [ 456.547833][ T5926] usb 2-1: USB disconnect, device number 10 [ 456.708444][ T6048] usb 6-1: USB disconnect, device number 5 [ 456.753607][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.024311][ T5927] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 457.214280][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 457.239926][ T5927] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 457.267612][ T5927] usb 4-1: config 0 has no interface number 0 [ 457.285946][ T9121] netlink: 'syz.5.688': attribute type 2 has an invalid length. [ 457.306528][ T5927] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 457.334783][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.359809][ T9122] vlan2: entered promiscuous mode [ 457.363025][ T5927] usb 4-1: Product: syz [ 457.369330][ T5927] usb 4-1: Manufacturer: syz [ 457.373959][ T5927] usb 4-1: SerialNumber: syz [ 457.386026][ T9122] macvlan1: entered promiscuous mode [ 457.417260][ T5927] usb 4-1: config 0 descriptor?? [ 457.453447][ T5927] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.503793][ T24] IPVS: starting estimator thread 0... [ 457.624579][ T9126] IPVS: using max 29 ests per chain, 69600 per kthread [ 457.671310][ T5927] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 457.761423][ T5927] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 457.918344][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 458.130699][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 458.131326][ T24] usb 4-1: USB disconnect, device number 16 [ 458.195425][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 458.261192][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 458.297779][ T24] quatech2 4-1:0.51: device disconnected [ 459.544853][ T9161] nbd0: detected capacity change from 0 to 127 [ 459.558361][ T5856] block nbd0: Receive control failed (result -104) [ 459.764279][ T5822] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 459.927083][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 459.964016][ T5822] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 460.002041][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.045417][ T5822] usb 5-1: config 0 descriptor?? [ 460.092031][ T5822] gspca_main: sunplus-2.14.0 probing 041e:400b [ 460.611889][ T9192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.645186][ T5927] lo speed is unknown, defaulting to 1000 [ 460.874714][ T6048] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 460.919006][ T5822] gspca_sunplus: reg_r err -71 [ 460.927738][ T5822] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 460.940099][ T5822] usb 5-1: USB disconnect, device number 9 [ 460.974327][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 461.034555][ T6048] usb 6-1: Using ep0 maxpacket: 32 [ 461.046245][ T6048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.057901][ T6048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.067767][ T6048] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 461.077368][ T6048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.089694][ T6048] usb 6-1: config 0 descriptor?? [ 461.103937][ T6048] hub 6-1:0.0: USB hub found [ 461.108733][ T5926] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 461.134591][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 461.146612][ T5927] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.160314][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 461.167087][ T5927] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 461.176715][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.188476][ T5927] usb 2-1: config 0 descriptor?? [ 461.264979][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 461.271911][ T5926] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 461.280350][ T5926] usb 4-1: config 0 has no interface number 0 [ 461.286532][ T5926] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.297495][ T5926] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 461.309288][ T5926] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 461.320658][ T5926] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.334450][ T6048] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 461.353906][ T5926] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 461.364964][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.373085][ T5926] usb 4-1: Product: syz [ 461.377390][ T5926] usb 4-1: Manufacturer: syz [ 461.382037][ T5926] usb 4-1: SerialNumber: syz [ 461.390034][ T5926] usb 4-1: config 0 descriptor?? [ 461.655172][ T5927] hid-u2fzero 0003:20A0:4287.000C: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.1-1/input0 [ 461.668745][ T5926] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 461.713284][ T5927] hid-u2fzero 0003:20A0:4287.000C: NitroKey U2F LED initialised [ 461.728067][ T5927] hid-u2fzero 0003:20A0:4287.000C: NitroKey U2F RNG initialised [ 461.750437][ T6048] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 461.787751][ T6048] hid-generic 0003:046D:C31C.000D: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 461.828999][ T5927] usb 2-1: USB disconnect, device number 11 [ 461.844577][ T5944] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 461.875721][ T9216] fido_id[9216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20A0:4287.000C/report_descriptor': No such device [ 461.906399][ T6048] usb 4-1: USB disconnect, device number 17 [ 462.035163][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 462.046000][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.057308][ T5944] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 462.068231][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.081627][ T5944] usb 5-1: config 0 descriptor?? [ 462.089164][ T5926] usb 6-1: USB disconnect, device number 6 [ 462.545091][ T5944] logitech-djreceiver 0003:046D:C513.000E: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.4-1/input0 [ 462.562507][ T9226] sp0: Synchronizing with TNC [ 462.686702][ T9228] Falling back ldisc for ttyS3. [ 462.694472][ T6048] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 462.723377][ T5926] usb 5-1: USB disconnect, device number 10 [ 462.854563][ T6048] usb 2-1: Using ep0 maxpacket: 8 [ 462.891549][ T6048] usb 2-1: unable to get BOS descriptor or descriptor too short [ 462.918821][ T6048] usb 2-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 462.943310][ T6048] usb 2-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 462.983271][ T6048] usb 2-1: config 4 interface 0 has no altsetting 0 [ 463.017555][ T6048] usb 2-1: string descriptor 0 read error: -22 [ 463.023851][ T6048] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 463.150816][ T6048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.171950][ T6048] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 463.227250][ T9236] syz.3.737 (9236): drop_caches: 2 [ 463.340984][ T9236] syz.3.737 (9236): drop_caches: 2 [ 463.884865][ T6048] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 463.895510][ T6048] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 463.902689][ T6048] usb 2-1: media controller created [ 463.927057][ T6048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.037192][ T6048] zl10353_read_register: readreg error (reg=127, ret==0) [ 464.198761][ T6048] usb 2-1: USB disconnect, device number 12 [ 464.290903][ T9258] input: syz0 as /devices/virtual/input/input11 [ 464.388951][ T5822] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 464.487821][ T5926] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 464.586264][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.604900][ T5822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.640228][ T5822] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.651242][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.654495][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 464.660147][ T5822] usb 4-1: Product: syz [ 464.669833][ T5822] usb 4-1: Manufacturer: syz [ 464.674862][ T5822] usb 4-1: SerialNumber: syz [ 464.682902][ T5926] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 464.693131][ T5926] usb 5-1: config 0 has no interface number 0 [ 464.708493][ T5926] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 464.723699][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.732109][ T5926] usb 5-1: Product: syz [ 464.743136][ T5926] usb 5-1: Manufacturer: syz [ 464.773674][ T5926] usb 5-1: SerialNumber: syz [ 464.813735][ T5926] usb 5-1: config 0 descriptor?? [ 464.839120][ T5926] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 464.881658][ T9274] netlink: 60 bytes leftover after parsing attributes in process `syz.5.753'. [ 464.892723][ T9273] netlink: 60 bytes leftover after parsing attributes in process `syz.5.753'. [ 464.904066][ T9273] netlink: 60 bytes leftover after parsing attributes in process `syz.5.753'. [ 465.011972][ T9278] program syz.5.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.045132][ T5926] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 465.077036][ T5926] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 465.087050][ T6048] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 465.129056][ T5822] usb 4-1: 0:2 : does not exist [ 465.285807][ T6048] usb 2-1: config 0 has an invalid interface number: 186 but max is 1 [ 465.309211][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 138 [ 465.324312][ T6048] usb 2-1: config 0 has no interface number 1 [ 465.340307][ T6048] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 465.362951][ T6048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.374091][ T6048] usb 2-1: Product: syz [ 465.378569][ T6048] usb 2-1: Manufacturer: syz [ 465.383449][ T6048] usb 2-1: SerialNumber: syz [ 465.415417][ T6048] usb 2-1: config 0 descriptor?? [ 465.527571][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 465.536981][ T6048] usb 5-1: USB disconnect, device number 11 [ 465.572144][ T6048] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 465.620301][ T5822] usb 4-1: USB disconnect, device number 18 [ 465.627491][ T6048] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 465.685299][ T6048] quatech2 5-1:0.51: device disconnected [ 465.691792][ T43] usb 2-1: USB disconnect, device number 13 [ 466.064419][ T5926] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 466.076851][ T9302] 9pnet_fd: Insufficient options for proto=fd [ 466.225195][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 466.235419][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.253075][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.282596][ T5926] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 466.321659][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.374910][ T5926] usb 6-1: config 0 descriptor?? [ 466.802191][ T5926] hid_mf 0003:0079:1801.000F: item fetching failed at offset 0/2 [ 466.823385][ T5926] hid_mf 0003:0079:1801.000F: HID parse failed. [ 466.854425][ T5926] hid_mf 0003:0079:1801.000F: probe with driver hid_mf failed with error -22 [ 467.008014][ T5926] usb 6-1: USB disconnect, device number 7 [ 467.187526][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 467.364856][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 467.376811][ T43] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 467.398164][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.432820][ T43] usb 4-1: config 0 descriptor?? [ 468.106166][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 468.149199][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 468.186899][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 468.213078][ T43] usb 4-1: media controller created [ 468.315834][ T9331] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 468.406232][ T9361] syz.4.793 uses obsolete (PF_INET,SOCK_PACKET) [ 468.411784][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.446125][ T43] az6027: usb out operation failed. (-71) [ 468.453364][ T43] az6027: usb out operation failed. (-71) [ 468.460031][ T43] stb0899_attach: Driver disabled by Kconfig [ 468.476018][ T43] az6027: no front-end attached [ 468.476018][ T43] [ 468.494711][ T43] az6027: usb out operation failed. (-71) [ 468.504735][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 468.573601][ T9363] syz.5.792 (9363): drop_caches: 2 [ 468.579390][ T9363] syz.5.792 (9363): drop_caches: 2 [ 468.584980][ T5926] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 468.629777][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 468.692830][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 468.728160][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 468.765612][ T43] usb 4-1: USB disconnect, device number 19 [ 468.774794][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.818104][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 468.879608][ T5926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.906827][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.929844][ T5926] usb 2-1: Product: syz [ 468.942039][ T5926] usb 2-1: Manufacturer: syz [ 468.957362][ T5926] usb 2-1: SerialNumber: syz [ 468.986938][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 468.996744][ T5926] usb 2-1: selecting invalid altsetting 1 [ 469.210732][ T5926] cdc_ncm 2-1:1.0: bind() failure [ 469.233297][ T5926] cdc_ncm 2-1:1.1: skipping garbage [ 469.244490][ T5926] cdc_ncm 2-1:1.1: invalid descriptor buffer length [ 469.251117][ T5926] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 469.297141][ T5926] cdc_ncm 2-1:1.1: bind() failure [ 469.344720][ T5926] usb 2-1: USB disconnect, device number 14 [ 469.435334][ T9386] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 469.441391][ T9386] dvmrp1: linktype set to 776 [ 469.584376][ T6048] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 470.217666][ T6048] usb 5-1: Using ep0 maxpacket: 32 [ 470.862718][ T6048] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 470.874279][ T6048] usb 5-1: config 0 has no interface number 0 [ 470.893808][ T6048] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 470.911239][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.920157][ T6048] usb 5-1: Product: syz [ 470.927233][ T6048] usb 5-1: Manufacturer: syz [ 470.931944][ T6048] usb 5-1: SerialNumber: syz [ 470.971003][ T6048] usb 5-1: config 0 descriptor?? [ 471.000035][ T6048] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 472.021601][ T6048] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 472.070764][ T6048] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 472.201427][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 472.402510][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 472.412439][ T6048] usb 5-1: USB disconnect, device number 12 [ 472.467027][ T6048] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 472.592503][ T6048] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 472.691490][ T6048] quatech2 5-1:0.51: device disconnected [ 475.144757][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 475.474789][ T5926] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 475.818498][ T5926] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 475.924953][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.983030][ T5926] usb 4-1: config 0 descriptor?? [ 476.037685][ T5926] cp210x 4-1:0.0: cp210x converter detected [ 476.452248][ T5926] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 476.496116][ T5926] usb 4-1: cp210x converter now attached to ttyUSB0 [ 476.671386][ T5926] usb 4-1: USB disconnect, device number 20 [ 476.683825][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.874211][ T5926] cp210x 4-1:0.0: device disconnected [ 478.270007][ T9536] lo speed is unknown, defaulting to 1000 [ 479.381679][ T9574] program syz.4.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.914382][ T5944] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 480.070786][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.092989][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.353157][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 480.984268][ T9600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.885'. [ 481.011348][ T9600] hub 8-0:1.0: USB hub found [ 481.024541][ T9600] hub 8-0:1.0: 1 port detected [ 481.055625][ T9600] netlink: 68 bytes leftover after parsing attributes in process `syz.3.885'. [ 481.556977][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=4d.40 [ 481.584240][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.592361][ T5944] usb 5-1: Product: syz [ 481.618470][ T5944] usb 5-1: Manufacturer: syz [ 481.623118][ T5944] usb 5-1: SerialNumber: syz [ 481.672294][ T9582] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.774441][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 481.946216][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 481.975833][ T43] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.000284][ T43] usb 6-1: config 0 has no interface number 0 [ 482.016089][ T43] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.025849][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.045848][ T43] usb 6-1: Product: syz [ 482.050377][ T43] usb 6-1: Manufacturer: syz [ 482.064426][ T6048] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 482.069057][ T43] usb 6-1: SerialNumber: syz [ 482.092297][ T43] usb 6-1: config 0 descriptor?? [ 482.117089][ T43] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.228957][ T6048] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 482.251920][ T6048] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 482.264128][ T6048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 482.288566][ T6048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 482.304598][ T6048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 482.349927][ T6048] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 482.352548][ T43] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.362436][ T6048] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 482.388898][ T6048] usb 2-1: Product: syz [ 482.393129][ T6048] usb 2-1: Manufacturer: syz [ 482.411726][ T43] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.432573][ T6048] cdc_wdm 2-1:1.0: skipping garbage [ 482.439221][ T6048] cdc_wdm 2-1:1.0: skipping garbage [ 482.459606][ T6048] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 482.496952][ T6048] cdc_wdm 2-1:1.0: Unknown control protocol [ 482.528752][ T5944] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 482.558168][ T5944] cdc_ncm 5-1:1.0: bind() failure [ 482.587705][ T5944] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 482.634878][ T5944] cdc_ncm 5-1:1.1: bind() failure [ 482.695152][ T5944] usb 5-1: USB disconnect, device number 13 [ 482.725015][ T5926] usb 2-1: USB disconnect, device number 15 [ 482.782064][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 482.790929][ T43] usb 6-1: USB disconnect, device number 8 [ 483.227446][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.279052][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.318425][ T43] quatech2 6-1:0.51: device disconnected [ 483.722981][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.902'. [ 484.355586][ T43] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 485.306592][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.347395][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.424415][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.541604][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.873160][ T43] usb 2-1: GET_CAPABILITIES returned 0 [ 485.908153][ T43] usbtmc 2-1:16.0: can't read capabilities [ 486.065336][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'. [ 486.102277][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'. [ 486.128002][ T43] usb 2-1: USB disconnect, device number 16 [ 486.133998][ T5944] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 486.771096][ T5944] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 486.796108][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.819438][ T5944] usb 4-1: Product: syz [ 486.851413][ T5944] usb 4-1: Manufacturer: syz [ 487.022971][ T5944] usb 4-1: SerialNumber: syz [ 487.655320][ T5944] usb 4-1: config 0 descriptor?? [ 488.198993][ T5944] usb 4-1: Firmware: major: 217, minor: 21, hardware type: ATUSB (2) [ 488.429014][ T5944] usb 4-1: failed to fetch extended address, random address set [ 488.840412][ T5944] usb 4-1: USB disconnect, device number 21 [ 489.016186][ T9722] 9pnet_fd: Insufficient options for proto=fd [ 490.325774][ T98] block nbd0: Possible stuck request ffff8880253de000: control (read@0,1024B). Runtime 30 seconds [ 490.338954][ T98] block nbd0: Possible stuck request ffff8880253de1c0: control (read@1024,1024B). Runtime 30 seconds [ 490.350813][ T98] block nbd0: Possible stuck request ffff8880253de380: control (read@2048,1024B). Runtime 30 seconds [ 490.363593][ T98] block nbd0: Possible stuck request ffff8880253de540: control (read@3072,1024B). Runtime 30 seconds [ 496.044157][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.963'. [ 496.434456][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.644430][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 496.653796][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 497.406928][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 497.547870][ T43] usb 4-1: config 0 has no interfaces? [ 497.553803][ T43] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 497.610807][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.665405][ T43] usb 4-1: config 0 descriptor?? [ 501.711004][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729302][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.774170][ C0] sched: DL replenish lagged too much [ 520.978150][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 546.408248][ T98] block nbd0: Possible stuck request ffff8880253de000: control (read@0,1024B). Runtime 60 seconds [ 548.338029][ T98] block nbd0: Possible stuck request ffff8880253de1c0: control (read@1024,1024B). Runtime 60 seconds [ 548.787786][ T98] block nbd0: Possible stuck request ffff8880253de380: control (read@2048,1024B). Runtime 60 seconds [ 552.860522][ T98] block nbd0: Possible stuck request ffff8880253de540: control (read@3072,1024B). Runtime 60 seconds [ 564.228860][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.252773][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.634332][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.655616][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.394887][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.597455][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.644023][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 724.651024][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5581/1:b..l [ 724.659564][ C0] rcu: (detected by 0, t=10503 jiffies, g=32501, q=1207069 ncpus=2) [ 724.667669][ C0] task:crond state:R running task stack:24104 pid:5581 tgid:5581 ppid:1 task_flags:0x400000 flags:0x00004002 [ 724.682279][ C0] Call Trace: [ 724.685590][ C0] [ 724.688550][ C0] __schedule+0x16a2/0x4cb0 [ 724.693101][ C0] ? call_rcu+0x157/0x9c0 [ 724.697462][ C0] ? kmem_cache_free+0x309/0x400 [ 724.702426][ C0] ? do_filp_open+0x1fa/0x410 [ 724.707131][ C0] ? do_sys_openat2+0x121/0x1c0 [ 724.712006][ C0] ? __x64_sys_openat+0x138/0x170 [ 724.717080][ C0] ? do_syscall_64+0xfa/0x3b0 [ 724.721776][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 724.727089][ C0] ? __pfx___schedule+0x10/0x10 [ 724.731987][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 724.737307][ C0] preempt_schedule_irq+0xb5/0x150 [ 724.742436][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 724.748183][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 724.754015][ C0] irqentry_exit+0x6f/0x90 [ 724.758463][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 724.764469][ C0] RIP: 0010:unwind_next_frame+0xabc/0x2390 [ 724.770302][ C0] Code: 76 01 83 e6 07 83 fe 04 4c 89 64 24 10 0f 84 49 04 00 00 83 fe 03 0f 84 f3 01 00 00 83 fe 02 0f 85 a1 07 00 00 4c 89 7c 24 28 <4d> 8d 7e 08 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 80 [ 724.789931][ C0] RSP: 0018:ffffc90003c4f778 EFLAGS: 00000246 [ 724.796021][ C0] RAX: 0000000000000000 RBX: ffffffff903e95b9 RCX: ffffffff8fbe2848 [ 724.804016][ C0] RDX: ffffffff903e95b4 RSI: 0000000000000002 RDI: ffffffff8be1b860 [ 724.812017][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8172aae5 [ 724.820012][ C0] R10: ffffc90003c4f898 R11: ffffffff81acff40 R12: ffffc90003c4fdc0 [ 724.828006][ C0] R13: ffffc90003c4f898 R14: ffffc90003c4f848 R15: 1ffffffff207d2b7 [ 724.836011][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 724.842194][ C0] ? unwind_next_frame+0xa5/0x2390 [ 724.847334][ C0] ? unwind_next_frame+0xd4/0x2390 [ 724.852470][ C0] ? unwind_next_frame+0xa5/0x2390 [ 724.857620][ C0] ? getname_flags+0xb8/0x540 [ 724.862327][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 724.868507][ C0] arch_stack_walk+0x11c/0x150 [ 724.873299][ C0] ? getname_flags+0xb8/0x540 [ 724.878007][ C0] stack_trace_save+0x9c/0xe0 [ 724.882714][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 724.888124][ C0] save_stack+0xf7/0x1f0 [ 724.892392][ C0] ? __pfx_save_stack+0x10/0x10 [ 724.897265][ C0] ? __free_frozen_pages+0xc65/0xe60 [ 724.902607][ C0] ? __put_partials+0x161/0x1c0 [ 724.907477][ C0] ? put_cpu_partial+0x17c/0x250 [ 724.912436][ C0] ? __slab_free+0x2f7/0x400 [ 724.917058][ C0] ? qlist_free_all+0x97/0x140 [ 724.921846][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 724.927507][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 724.932572][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 724.938226][ C0] ? getname_flags+0xb8/0x540 [ 724.942980][ C0] __reset_page_owner+0x71/0x1f0 [ 724.947944][ C0] __free_frozen_pages+0xc65/0xe60 [ 724.953089][ C0] __put_partials+0x161/0x1c0 [ 724.957796][ C0] put_cpu_partial+0x17c/0x250 [ 724.962588][ C0] ? put_cpu_partial+0x6d/0x250 [ 724.967464][ C0] __slab_free+0x2f7/0x400 [ 724.971914][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 724.978274][ C0] ? __phys_addr+0xd3/0x180 [ 724.982820][ C0] qlist_free_all+0x97/0x140 [ 724.987445][ C0] kasan_quarantine_reduce+0x148/0x160 [ 724.992936][ C0] __kasan_slab_alloc+0x22/0x80 [ 724.997827][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 725.003303][ C0] ? getname_flags+0xb8/0x540 [ 725.008006][ C0] getname_flags+0xb8/0x540 [ 725.012539][ C0] do_sys_openat2+0xbc/0x1c0 [ 725.017155][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 725.022392][ C0] ? rcu_is_watching+0x15/0xb0 [ 725.027178][ C0] __x64_sys_openat+0x138/0x170 [ 725.032064][ C0] do_syscall_64+0xfa/0x3b0 [ 725.036588][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.042729][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.048906][ C0] ? clear_bhb_loop+0x60/0xb0 [ 725.053613][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.059527][ C0] RIP: 0033:0x7f3b1298dc3a [ 725.063967][ C0] RSP: 002b:00007ffdc2b17e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 725.072406][ C0] RAX: ffffffffffffffda RBX: 0000564494c192a0 RCX: 00007f3b1298dc3a [ 725.080483][ C0] RDX: 0000000000080000 RSI: 00007f3b12a2a45a RDI: 00000000ffffff9c [ 725.088472][ C0] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 725.096465][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f3b12a287f4 [ 725.104455][ C0] R13: 00007f3b12a287f4 R14: 0000000000000001 R15: 0000000000000033 [ 725.112460][ C0] [ 725.115497][ C0] rcu: rcu_preempt kthread starved for 1322 jiffies! g32501 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 725.126621][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 725.136606][ C0] rcu: RCU grace-period kthread stack dump: [ 725.142541][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 725.156053][ C0] Call Trace: [ 725.159347][ C0] [ 725.162295][ C0] __schedule+0x16a2/0x4cb0 [ 725.166848][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.172067][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 725.177988][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 725.183316][ C0] ? __pfx___schedule+0x10/0x10 [ 725.188197][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 725.194820][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 725.200126][ C0] preempt_schedule_irq+0xb5/0x150 [ 725.205260][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 725.211003][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 725.216831][ C0] irqentry_exit+0x6f/0x90 [ 725.221265][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.227265][ C0] RIP: 0010:lock_release+0x63/0x3e0 [ 725.232479][ C0] Code: 00 89 c0 48 0f a3 05 7c 61 02 0e 73 16 e8 d5 df 08 00 84 c0 75 0d f6 05 72 4c ec 0d 01 0f 84 ad 02 00 00 83 3d 9d 92 02 0e 00 <0f> 84 44 02 00 00 65 8b 05 a0 64 fe 10 85 c0 0f 85 35 02 00 00 65 [ 725.252136][ C0] RSP: 0018:ffffc900001572b0 EFLAGS: 00000202 [ 725.258222][ C0] RAX: 0000000000000001 RBX: ffffffff9033c801 RCX: 591a088101ee4400 [ 725.266211][ C0] RDX: ffffc90000157401 RSI: ffffffff8be1b8a0 RDI: ffffffff8be1b860 [ 725.274214][ C0] RBP: dffffc0000000000 R08: ffffc90000157d90 R09: 0000000000000000 [ 725.282218][ C0] R10: ffffc90000157438 R11: fffff5200002ae89 R12: ffffc90000157da0 [ 725.290210][ C0] R13: ffffffff8172aae5 R14: ffffffff8e13f0e0 R15: ffffffff8172aae5 [ 725.298199][ C0] ? unwind_next_frame+0xa5/0x2390 [ 725.303338][ C0] ? unwind_next_frame+0xa5/0x2390 [ 725.308491][ C0] ? deref_stack_reg+0x19f/0x230 [ 725.313453][ C0] ? unwind_next_frame+0xa5/0x2390 [ 725.318581][ C0] unwind_next_frame+0x19a9/0x2390 [ 725.323736][ C0] ? unwind_next_frame+0xa5/0x2390 [ 725.328884][ C0] ? rcu_gp_kthread+0x99/0x390 [ 725.333676][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.339875][ C0] arch_stack_walk+0x11c/0x150 [ 725.344667][ C0] ? kthread+0x711/0x8a0 [ 725.348944][ C0] stack_trace_save+0x9c/0xe0 [ 725.353655][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 725.359093][ C0] kasan_save_track+0x3e/0x80 [ 725.363801][ C0] ? kasan_save_track+0x3e/0x80 [ 725.368679][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 725.373737][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 725.379389][ C0] ? fill_pool+0x100/0x570 [ 725.383833][ C0] ? debug_object_assert_init+0x2b1/0x380 [ 725.389582][ C0] ? __try_to_del_timer_sync+0x29/0x3a0 [ 725.395153][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 725.400459][ C0] ? schedule_timeout+0x133/0x270 [ 725.405508][ C0] ? rcu_gp_fqs_loop+0x301/0x1540 [ 725.410551][ C0] ? rcu_gp_kthread+0x99/0x390 [ 725.415378][ C0] __kasan_slab_alloc+0x6c/0x80 [ 725.420260][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 725.425749][ C0] ? fill_pool+0x100/0x570 [ 725.430202][ C0] fill_pool+0x100/0x570 [ 725.434477][ C0] ? __pfx_fill_pool+0x10/0x10 [ 725.439279][ C0] ? debug_object_assert_init+0x288/0x380 [ 725.445026][ C0] debug_object_assert_init+0x2b1/0x380 [ 725.450642][ C0] __try_to_del_timer_sync+0x29/0x3a0 [ 725.456054][ C0] ? __timer_delete_sync+0x133/0x2d0 [ 725.461373][ C0] __timer_delete_sync+0x1fe/0x2d0 [ 725.466510][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 725.472165][ C0] ? schedule+0x91/0x360 [ 725.476440][ C0] ? schedule+0x16f/0x360 [ 725.480801][ C0] schedule_timeout+0x133/0x270 [ 725.485677][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 725.491072][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 725.497001][ C0] ? __pfx_process_timeout+0x10/0x10 [ 725.502315][ C0] ? prepare_to_swait_event+0x341/0x380 [ 725.507893][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 725.512783][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 725.518961][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 725.524286][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 725.529529][ C0] rcu_gp_kthread+0x99/0x390 [ 725.534139][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 725.539354][ C0] ? __kthread_parkme+0x7b/0x200 [ 725.544326][ C0] ? __kthread_parkme+0x1a1/0x200 [ 725.549376][ C0] kthread+0x711/0x8a0 [ 725.553494][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 725.558725][ C0] ? __pfx_kthread+0x10/0x10 [ 725.563381][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.568609][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.573830][ C0] ? __pfx_kthread+0x10/0x10 [ 725.578462][ C0] ret_from_fork+0x3fc/0x770 [ 725.583081][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 725.588216][ C0] ? __switch_to_asm+0x39/0x70 [ 725.593010][ C0] ? __switch_to_asm+0x33/0x70 [ 725.597800][ C0] ? __pfx_kthread+0x10/0x10 [ 725.602415][ C0] ret_from_fork_asm+0x1a/0x30 [ 725.607220][ C0] [ 725.610253][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 725.616594][ C0] Sending NMI from CPU 0 to CPUs 1: [ 725.621820][ C1] NMI backtrace for cpu 1 [ 725.621839][ C1] CPU: 1 UID: 0 PID: 6451 Comm: ipvs-e:3:0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 725.621860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 725.621869][ C1] RIP: 0010:check_preemption_disabled+0x49/0x120 [ 725.621889][ C1] Code: 8b 0d eb ed 35 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d cb ed 35 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f <5d> c3 cc cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 [ 725.621902][ C1] RSP: 0018:ffffc90000a07b08 EFLAGS: 00000086 [ 725.621915][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c6ab5c258603a400 [ 725.621925][ C1] RDX: 0000000000000000 RSI: ffffffff8db6f200 RDI: ffffffff8be1b8c0 [ 725.621935][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 725.621945][ C1] R10: ffffc90000a07cd8 R11: ffffffff81acff40 R12: 0000000000000002 [ 725.621955][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 725.621965][ C1] FS: 0000000000000000(0000) GS:ffff888125d59000(0000) knlGS:0000000000000000 [ 725.621984][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.621994][ C1] CR2: 00007febff0903d0 CR3: 0000000030c70000 CR4: 00000000003526f0 [ 725.622007][ C1] Call Trace: [ 725.622013][ C1] [ 725.622018][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.622033][ C1] lock_acquire+0x130/0x360 [ 725.622049][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.622063][ C1] ? NF_HOOK+0x30c/0x3a0 [ 725.622082][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.622096][ C1] unwind_next_frame+0xc2/0x2390 [ 725.622110][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.622126][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.622141][ C1] ? NF_HOOK+0x206/0x3a0 [ 725.622160][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.622178][ C1] arch_stack_walk+0x11c/0x150 [ 725.622197][ C1] ? NF_HOOK+0x30c/0x3a0 [ 725.622215][ C1] stack_trace_save+0x9c/0xe0 [ 725.622233][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 725.622253][ C1] ? unwind_next_frame+0xa5/0x2390 [ 725.622268][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 725.622286][ C1] kasan_save_track+0x3e/0x80 [ 725.622307][ C1] ? kasan_save_track+0x3e/0x80 [ 725.622327][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 725.622339][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 725.622353][ C1] ? __alloc_skb+0x112/0x2d0 [ 725.622371][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 725.622391][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 725.622404][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 725.622417][ C1] ? nft_do_chain+0x409/0x1920 [ 725.622437][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 725.622459][ C1] ? nf_hook_slow+0xc2/0x220 [ 725.622475][ C1] ? NF_HOOK+0x206/0x3a0 [ 725.622492][ C1] ? NF_HOOK+0x30c/0x3a0 [ 725.622524][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 725.622540][ C1] __kasan_slab_alloc+0x6c/0x80 [ 725.622570][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 725.622586][ C1] ? __alloc_skb+0x112/0x2d0 [ 725.622607][ C1] __alloc_skb+0x112/0x2d0 [ 725.622628][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 725.622653][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 725.622674][ C1] ? nft_synproxy_eval_v6+0x300/0x560 [ 725.622688][ C1] ? synproxy_pernet+0x45/0x270 [ 725.622704][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 725.622721][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 725.622738][ C1] ? nf_ip_checksum+0x13c/0x510 [ 725.622762][ C1] nft_synproxy_do_eval+0x345/0x570 [ 725.622778][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 725.622794][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 725.622822][ C1] nft_do_chain+0x409/0x1920 [ 725.622846][ C1] ? ktime_get+0x3e/0x1f0 [ 725.622866][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 725.622892][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 725.622921][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 725.622937][ C1] nft_do_chain_inet+0x25d/0x340 [ 725.622960][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 725.622988][ C1] ? ipt_do_table+0x2a3/0x1630 [ 725.623008][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 725.623027][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 725.623050][ C1] nf_hook_slow+0xc2/0x220 [ 725.623072][ C1] NF_HOOK+0x206/0x3a0 [ 725.623091][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 725.623110][ C1] ? NF_HOOK+0x9a/0x3a0 [ 725.623128][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 725.623144][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 725.623165][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 725.623185][ C1] ? skb_dst+0x4f/0xd0 [ 725.623204][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 725.623224][ C1] NF_HOOK+0x30c/0x3a0 [ 725.623243][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 725.623261][ C1] ? NF_HOOK+0x9a/0x3a0 [ 725.623278][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 725.623296][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 725.623315][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 725.623338][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 725.623355][ C1] __netif_receive_skb+0x143/0x380 [ 725.623374][ C1] ? process_backlog+0x2d5/0x14f0 [ 725.623393][ C1] process_backlog+0x60e/0x14f0 [ 725.623418][ C1] ? __pfx_process_backlog+0x10/0x10 [ 725.623436][ C1] ? taprio_dequeue+0x26/0x550 [ 725.623456][ C1] ? taprio_dequeue+0x26/0x550 [ 725.623477][ C1] __napi_poll+0xc7/0x480 [ 725.623493][ C1] ? net_rx_action+0x46d/0xe30 [ 725.623512][ C1] net_rx_action+0x707/0xe30 [ 725.623538][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 725.623570][ C1] handle_softirqs+0x283/0x870 [ 725.623587][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 725.623605][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 725.623622][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 725.623644][ C1] __irq_exit_rcu+0xca/0x1f0 [ 725.623670][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 725.623688][ C1] irq_exit_rcu+0x9/0x30 [ 725.623720][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 725.623745][ C1] [ 725.623763][ C1] [ 725.623769][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.623784][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 725.623806][ C1] Code: 74 05 e8 eb bd 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 33 ec 27 f6 65 8b 05 fc 79 33 07 85 c0 74 40 48 c7 04 24 0e 36 [ 725.623818][ C1] RSP: 0018:ffffc900034a78c0 EFLAGS: 00000206 [ 725.623830][ C1] RAX: c6ab5c258603a400 RBX: 0000000000000a06 RCX: c6ab5c258603a400 [ 725.623840][ C1] RDX: 0000000000000000 RSI: ffffffff8d9827b9 RDI: 0000000000000001 [ 725.623850][ C1] RBP: ffffc900034a7950 R08: ffffffff8fa0acf7 R09: 1ffffffff1f4159e [ 725.623860][ C1] R10: dffffc0000000000 R11: fffffbfff1f4159f R12: dffffc0000000000 [ 725.623871][ C1] R13: dead000000000122 R14: ffffffff99cb9cd0 R15: 1ffff92000694f18 [ 725.623890][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 725.623913][ C1] ? __timer_delete_sync+0x218/0x2d0 [ 725.623934][ C1] debug_object_free+0x29a/0x340 [ 725.623959][ C1] schedule_timeout+0x13b/0x270 [ 725.623983][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 725.624003][ C1] ? __pfx_process_timeout+0x10/0x10 [ 725.624025][ C1] ip_vs_estimation_kthread+0x2a31/0x3a00 [ 725.624047][ C1] ? ip_vs_estimation_kthread+0x285f/0x3a00 [ 725.624079][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 725.624099][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 725.624123][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 725.624148][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 725.624167][ C1] ? __kthread_parkme+0x7b/0x200 [ 725.624183][ C1] ? __kthread_parkme+0x1a1/0x200 [ 725.624201][ C1] kthread+0x711/0x8a0 [ 725.624220][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 725.624240][ C1] ? __pfx_kthread+0x10/0x10 [ 725.624259][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.624280][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.624292][ C1] ? __pfx_kthread+0x10/0x10 [ 725.624310][ C1] ret_from_fork+0x3fc/0x770 [ 725.624324][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 725.624340][ C1] ? __switch_to_asm+0x39/0x70 [ 725.624356][ C1] ? __switch_to_asm+0x33/0x70 [ 725.624373][ C1] ? __pfx_kthread+0x10/0x10 [ 725.624391][ C1] ret_from_fork_asm+0x1a/0x30 [ 725.624415][ C1]