last executing test programs: 6m24.878078372s ago: executing program 3 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, 0x0, 0x0, 0x40008022, 0x0) 6m24.240110627s ago: executing program 3 (id=33): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x20008880) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 6m12.527301155s ago: executing program 3 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0) 6m12.105381374s ago: executing program 3 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x18, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) 6m11.586365518s ago: executing program 3 (id=59): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m9.966165521s ago: executing program 3 (id=67): r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0xfffc, 0x2, 0x0, 0x0, 0x73}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0x1, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x2, 0x6, 0x6, 0xfffffffd, 0x4}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507020004"], 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xb, 0x4) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1008, 0x0, 0x13, r0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) 5m54.801165848s ago: executing program 32 (id=67): r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0xfffc, 0x2, 0x0, 0x0, 0x73}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0x1, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x2, 0x6, 0x6, 0xfffffffd, 0x4}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507020004"], 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xb, 0x4) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1008, 0x0, 0x13, r0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) 2m51.354466709s ago: executing program 4 (id=539): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x1de, 0x6) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=']) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x5, 0x4, &(0x7f00000000c0), 0x0, 0x1, 0x27a, 0x0, 0x10, 0xe, 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) r7 = dup(r5) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x1000) ioctl$BLKZEROOUT(r8, 0x127f, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@private}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, 0x0) 2m49.956174547s ago: executing program 4 (id=542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1d, 0x1, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf256300000008000300", @ANYRES32, @ANYBLOB="0c00990000040000750000008d7039521c37fb2ed10500808d7a91dfb9eb02ceb32470f4eacb"], 0x28}, 0x1, 0x0, 0x0, 0x4040880}, 0x800) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m49.409736824s ago: executing program 4 (id=546): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x40, 0x17, 0x1, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m48.34577392s ago: executing program 4 (id=552): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a000000030000000500000f0100000004000000010000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000081000000000100ffff0300"/120], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40018) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000cc0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "0f03c8c7e8da000000000004d6ffff9d2bc76054cdc077b300000000000040000000000000000083eb0000090000a06100", 0x1e}, 0x60) sendmsg$sock(r5, &(0x7f0000001b40)={&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="8a", 0x1}], 0x1}, 0x4) 2m43.958410639s ago: executing program 4 (id=557): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x1de, 0x6) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=']) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x5, 0x4, &(0x7f00000000c0), 0x0, 0x1, 0x27a, 0x0, 0x10, 0xe, 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) r7 = dup(r5) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x1000) ioctl$BLKZEROOUT(r8, 0x127f, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@private}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, 0x0) 2m42.833405939s ago: executing program 4 (id=560): syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000180)=0x58, 0xa) 2m27.402294966s ago: executing program 33 (id=560): syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000180)=0x58, 0xa) 1m40.993999667s ago: executing program 6 (id=684): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m39.741699219s ago: executing program 6 (id=688): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@hopopts={{0x68, 0x29, 0x36, {0x3a, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x93a}, @pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xbeed}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x6e}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3b, 0x5, '\x00', [@pad1, @ra={0x5, 0x2, 0xf2c8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0xd, 0x10, "561f3979ed0555705da5c33e39c6db7a"}]}}}], 0xe0}}], 0x1, 0x4000) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1m38.03581624s ago: executing program 6 (id=691): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003b80)={0x10000001}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m26.247796529s ago: executing program 6 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m23.88292579s ago: executing program 6 (id=716): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1m22.303486107s ago: executing program 6 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000006f0e0000"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000380)={0x0, 0xb0, 0xfffb, 0xd, 0x800}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) sync() ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2804, 0xd59f83, 0x19f2, 0x42, 0xdd7, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) 1m5.952872075s ago: executing program 34 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000006f0e0000"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000380)={0x0, 0xb0, 0xfffb, 0xd, 0x800}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) sync() ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2804, 0xd59f83, 0x19f2, 0x42, 0xdd7, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) 12.450087971s ago: executing program 0 (id=856): semtimedop(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.924429209s ago: executing program 7 (id=861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 9.450760455s ago: executing program 7 (id=863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0d12800b000100677265744fe8887f320585d9dca951617000000c00028006000200202000001400030064696376663000000000010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006000000af756b831e85bca1fe4311b5b96e37be"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ec432c8021", 0x5, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) recvmmsg$unix(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x222, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x1, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84040}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) 9.282229217s ago: executing program 0 (id=864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x81, 0x10000, 0x1000, 0xf7fc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 9.232809727s ago: executing program 1 (id=865): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.54396208s ago: executing program 5 (id=867): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) socket$netlink(0x10, 0x3, 0x0) 7.427201418s ago: executing program 0 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, 0x0, 0x0) landlock_restrict_self(r1, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=@ocfs2={0xc, 0x300fe, {0x1, 0x0, 0x2}}, 0x88800) landlock_restrict_self(r1, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 5.75102058s ago: executing program 5 (id=870): close(0x3) 5.673986035s ago: executing program 2 (id=871): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) unshare(0x2a020480) r3 = socket(0xa, 0x3, 0x3a) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC], 0x38}}, 0x0) write$cgroup_pid(r0, &(0x7f0000000280)=r2, 0x12) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [0x0, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'virt_wifi0\x00', 'veth0_to_batadv\x00', {}, {}, 0x62, 0x3, 0x3, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x40, 0x8, 0x530, 'syz1\x00', 'syz1\x00', {0x2}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0x0, 0xffffffff, 0xff], [0x0, 0x0, 0xff, 0xff000000], 'syz_tun\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x7, 0xa, 0x5e}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x2e, 0xc, 0x8, 0x4, 0xe, 0x1000, 0xc1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r10, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 5.404816841s ago: executing program 5 (id=872): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.351170768s ago: executing program 1 (id=873): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r3 = syz_io_uring_setup(0x19b7, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 4.325994172s ago: executing program 5 (id=874): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) unshare(0x2a020480) r2 = socket(0xa, 0x3, 0x3a) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC], 0x38}}, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [0x0, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'virt_wifi0\x00', 'veth0_to_batadv\x00', {}, {}, 0x62, 0x3, 0x3, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x40, 0x8, 0x530, 'syz1\x00', 'syz1\x00', {0x2}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0x0, 0xffffffff, 0xff], [0x0, 0x0, 0xff, 0xff000000], 'syz_tun\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x7, 0xa, 0x5e}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x2e, 0xc, 0x8, 0x4, 0xe, 0x1000, 0xc1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r9, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 4.161530358s ago: executing program 2 (id=875): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 4.017169681s ago: executing program 1 (id=876): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) socket(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x10000) socket(0x2a, 0x800, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) 3.905232333s ago: executing program 2 (id=877): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x2, 0x4, 0x201a, 0x2, 0x8, 0x0, 0x3, 0xdd2fcb245114ab72}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getpgrp(0xffffffffffffffff) getgid() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.633154736s ago: executing program 5 (id=878): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2002) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) 3.456384715s ago: executing program 0 (id=879): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.201897106s ago: executing program 0 (id=880): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0d12800b000100677265744fe8887f320585d9dca951617000000c00028006000200202000001400030064696376663000000000010000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006000000af756b831e85bca1fe4311b5b96e37be"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7810, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x222, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x1, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84040}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x6, 0x0, 0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) 2.967128575s ago: executing program 1 (id=881): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.95382651s ago: executing program 7 (id=882): close(0x3) 2.735932907s ago: executing program 5 (id=883): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003b80)={0x10000001}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.606366653s ago: executing program 1 (id=884): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 2.450176398s ago: executing program 7 (id=885): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5249162b, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x2, 0x4, 0x201a, 0x2, 0x8, 0x0, 0x3, 0xdd2fcb245114ab72}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getpgrp(0xffffffffffffffff) getgid() syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 1.455049292s ago: executing program 0 (id=886): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 1.375088324s ago: executing program 2 (id=887): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 970.238376ms ago: executing program 2 (id=888): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@hopopts={{0x60, 0x29, 0x36, {0x3a, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x93a}, @pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xbeed}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x6e}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3b, 0x5, '\x00', [@pad1, @ra={0x5, 0x2, 0xf2c8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0xd, 0x12, "561f3979ed0555705da5c33e39c6db7ac367"}]}}}], 0xd8}}], 0x1, 0x4000) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 774.293017ms ago: executing program 7 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, &(0x7f0000000180)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 687.882999ms ago: executing program 2 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000ff07"], 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 718.603µs ago: executing program 7 (id=891): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socket(0x2b, 0x80400, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)}, {&(0x7f00000003c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81a", 0x1b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)="d8f386", 0x3}], 0x1}}], 0x2, 0xc0) sendto$inet(r5, 0x0, 0x0, 0x11, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, r1, 0x38d97000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_LBT_MODE(r10, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bfacd5608c7c318}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8) nanosleep(&(0x7f0000000040), 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route(r1, 0x0, 0x0) shutdown(r0, 0x1) socket$packet(0x11, 0x3, 0x300) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) 0s ago: executing program 1 (id=892): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000102000000000000000002000009", @ANYRES32=r1, @ANYBLOB="000000000a0001"], 0x30}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3db1e30dec6e0467) r6 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000003000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) r7 = openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x1ff, 0x12) kernel console output (not intermixed with test programs): 66][ T6207] syz_tun: tun_net_xmit 42 [ 157.774431][ T918] pwc: recv_control_msg error -32 req 02 val 2000 [ 157.794563][ T918] pwc: recv_control_msg error -32 req 02 val 2100 [ 157.801524][ T6207] syz_tun: tun_net_xmit 42 [ 157.829939][ T6207] syz_tun: tun_net_xmit 42 [ 157.837780][ T918] pwc: recv_control_msg error -32 req 04 val 1500 [ 157.846996][ T6207] syz_tun: tun_net_xmit 42 [ 157.852143][ T6207] syz_tun: tun_net_xmit 42 [ 157.885452][ T918] pwc: recv_control_msg error -32 req 02 val 2500 [ 157.886903][ T6207] syz_tun: tun_net_xmit 42 [ 157.917086][ T918] pwc: recv_control_msg error -32 req 02 val 2400 [ 157.948106][ T918] pwc: recv_control_msg error -32 req 02 val 2600 [ 157.956581][ T6207] syz_tun: tun_net_xmit 42 [ 157.961559][ T6207] syz_tun: tun_net_xmit 42 [ 157.971063][ T918] pwc: recv_control_msg error -32 req 02 val 2900 [ 158.009375][ T6207] syz_tun: tun_net_xmit 42 [ 158.068666][ T6207] syz_tun: tun_net_xmit 42 [ 158.133173][ T6207] syz_tun: tun_net_xmit 42 [ 158.220475][ T918] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.284554][ T918] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.304371][ T6207] syz_tun: tun_net_xmit 42 [ 158.317736][ T6207] syz_tun: tun_net_xmit 42 [ 158.318969][ T918] pwc: Registered as video103. [ 158.322511][ T6207] syz_tun: tun_net_xmit 42 [ 158.488217][ T51] Bluetooth: hci5: command tx timeout [ 158.505068][ T6207] syz_tun: tun_net_xmit 42 [ 158.578539][ T918] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 158.641879][ T6207] syz_tun: tun_net_xmit 42 [ 158.686588][ T6207] syz_tun: tun_net_xmit 42 [ 158.760755][ T6207] syz_tun: tun_net_xmit 42 [ 158.804400][ T918] usb 5-1: USB disconnect, device number 2 [ 158.815144][ T6207] syz_tun: tun_net_xmit 42 [ 158.821362][ T6207] syz_tun: tun_net_xmit 42 [ 158.914312][ T6207] syz_tun: tun_net_xmit 42 [ 158.929530][ T6207] syz_tun: tun_net_xmit 42 [ 158.994563][ T6207] syz_tun: tun_net_xmit 42 [ 158.999287][ T6207] syz_tun: tun_net_xmit 42 [ 159.018879][ T6207] syz_tun: tun_net_xmit 42 [ 159.023613][ T6207] syz_tun: tun_net_xmit 42 [ 159.065733][ T6207] syz_tun: tun_net_xmit 42 [ 159.070464][ T6207] syz_tun: tun_net_xmit 42 [ 159.154352][ T6207] syz_tun: tun_net_xmit 42 [ 159.159160][ T6207] syz_tun: tun_net_xmit 42 [ 159.294292][ T6207] syz_tun: tun_net_xmit 42 [ 159.299146][ T6207] syz_tun: tun_net_xmit 42 [ 159.314885][ T6207] syz_tun: tun_net_xmit 42 [ 159.319601][ T6207] syz_tun: tun_net_xmit 42 [ 159.961794][ T6207] syz_tun: tun_net_xmit 42 [ 159.978110][ T6207] syz_tun: tun_net_xmit 42 [ 160.001678][ T6207] syz_tun: tun_net_xmit 42 [ 160.006780][ T6207] syz_tun: tun_net_xmit 42 [ 160.011636][ T6207] syz_tun: tun_net_xmit 42 [ 160.016551][ T6207] syz_tun: tun_net_xmit 42 [ 160.021522][ T6207] syz_tun: tun_net_xmit 42 [ 160.028315][ T6207] syz_tun: tun_net_xmit 42 [ 160.033322][ T6207] syz_tun: tun_net_xmit 42 [ 160.050953][ T6207] syz_tun: tun_net_xmit 42 [ 160.084144][ T6207] syz_tun: tun_net_xmit 42 [ 160.096862][ T6207] syz_tun: tun_net_xmit 42 [ 160.134257][ T6207] syz_tun: tun_net_xmit 42 [ 160.138957][ T6207] syz_tun: tun_net_xmit 42 [ 160.143606][ T6207] syz_tun: tun_net_xmit 42 [ 160.214644][ T6207] syz_tun: tun_net_xmit 42 [ 160.219358][ T6207] syz_tun: tun_net_xmit 42 [ 160.257499][ T6207] syz_tun: tun_net_xmit 42 [ 160.262229][ T6207] syz_tun: tun_net_xmit 42 [ 160.405930][ T6207] syz_tun: tun_net_xmit 42 [ 160.410639][ T6207] syz_tun: tun_net_xmit 42 [ 160.488517][ T6207] syz_tun: tun_net_xmit 42 [ 160.554149][ T51] Bluetooth: hci5: command tx timeout [ 160.564083][ T6207] syz_tun: tun_net_xmit 42 [ 160.568806][ T6207] syz_tun: tun_net_xmit 42 [ 160.944386][ T6207] syz_tun: tun_net_xmit 42 [ 160.949158][ T6207] syz_tun: tun_net_xmit 42 [ 160.953857][ T6207] syz_tun: tun_net_xmit 42 [ 160.977533][ T6416] netlink: 'syz.0.111': attribute type 11 has an invalid length. [ 160.983628][ T6360] chnl_net:caif_netlink_parms(): no params data found [ 160.985466][ T6416] netlink: 224 bytes leftover after parsing attributes in process `syz.0.111'. [ 161.017627][ T6207] syz_tun: tun_net_xmit 42 [ 161.022342][ T6207] syz_tun: tun_net_xmit 42 [ 161.047632][ T6207] syz_tun: tun_net_xmit 42 [ 161.080890][ T6207] syz_tun: tun_net_xmit 42 [ 161.128237][ T6207] syz_tun: tun_net_xmit 42 [ 161.234406][ T6207] syz_tun: tun_net_xmit 42 [ 161.239363][ T6207] syz_tun: tun_net_xmit 42 [ 161.342618][ T6207] syz_tun: tun_net_xmit 42 [ 161.347655][ T6207] syz_tun: tun_net_xmit 42 [ 161.352529][ T6207] syz_tun: tun_net_xmit 42 [ 161.404609][ T6207] syz_tun: tun_net_xmit 42 [ 161.409297][ T6207] syz_tun: tun_net_xmit 42 [ 161.444883][ T6207] syz_tun: tun_net_xmit 42 [ 161.621609][ T6207] syz_tun: tun_net_xmit 42 [ 161.630906][ T6207] syz_tun: tun_net_xmit 42 [ 161.636132][ T6207] syz_tun: tun_net_xmit 42 [ 161.641100][ T6207] syz_tun: tun_net_xmit 42 [ 161.646465][ T6207] syz_tun: tun_net_xmit 42 [ 161.652175][ T6207] syz_tun: tun_net_xmit 42 [ 161.662481][ T6207] syz_tun: tun_net_xmit 42 [ 161.669472][ T6207] syz_tun: tun_net_xmit 42 [ 161.692984][ T6207] syz_tun: tun_net_xmit 42 [ 161.697856][ T6207] syz_tun: tun_net_xmit 42 [ 161.702516][ T6207] syz_tun: tun_net_xmit 42 [ 161.709050][ T6207] syz_tun: tun_net_xmit 42 [ 161.713807][ T6207] syz_tun: tun_net_xmit 42 [ 161.719847][ T6207] syz_tun: tun_net_xmit 42 [ 161.724742][ T6207] syz_tun: tun_net_xmit 42 [ 161.729613][ T6207] syz_tun: tun_net_xmit 42 [ 161.734705][ T6207] syz_tun: tun_net_xmit 42 [ 161.739829][ T6207] syz_tun: tun_net_xmit 42 [ 161.744707][ T6207] syz_tun: tun_net_xmit 42 [ 161.749294][ T6207] syz_tun: tun_net_xmit 42 [ 161.780907][ T6207] syz_tun: tun_net_xmit 42 [ 161.794207][ T6207] syz_tun: tun_net_xmit 42 [ 161.855214][ T6207] syz_tun: tun_net_xmit 42 [ 161.937072][ T6207] syz_tun: tun_net_xmit 42 [ 161.959730][ T6207] syz_tun: tun_net_xmit 42 [ 161.968512][ T6207] syz_tun: tun_net_xmit 42 [ 161.973608][ T6207] syz_tun: tun_net_xmit 42 [ 161.978597][ T6207] syz_tun: tun_net_xmit 42 [ 161.998913][ T6207] syz_tun: tun_net_xmit 42 [ 162.003837][ T6207] syz_tun: tun_net_xmit 42 [ 162.027070][ T6207] syz_tun: tun_net_xmit 42 [ 162.096923][ T6207] syz_tun: tun_net_xmit 42 [ 162.115997][ T6207] syz_tun: tun_net_xmit 42 [ 162.122348][ T6207] syz_tun: tun_net_xmit 42 [ 162.191068][ T6207] syz_tun: tun_net_xmit 42 [ 162.224173][ T6207] syz_tun: tun_net_xmit 42 [ 162.224972][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'. [ 162.228942][ T6207] syz_tun: tun_net_xmit 42 [ 162.464391][ T6207] syz_tun: tun_net_xmit 42 [ 162.469118][ T6207] syz_tun: tun_net_xmit 42 [ 162.558258][ T6207] syz_tun: tun_net_xmit 42 [ 162.568104][ T6207] syz_tun: tun_net_xmit 42 [ 162.573845][ T6207] syz_tun: tun_net_xmit 42 [ 163.133498][ T51] Bluetooth: hci5: command tx timeout [ 163.245077][ T6207] syz_tun: tun_net_xmit 42 [ 164.274205][ T6207] syz_tun: tun_net_xmit 42 [ 164.278935][ T6207] syz_tun: tun_net_xmit 42 [ 164.283630][ T6207] syz_tun: tun_net_xmit 42 [ 164.554234][ T6207] syz_tun: tun_net_xmit 42 [ 164.595851][ T6207] syz_tun: tun_net_xmit 42 [ 164.614243][ T6207] syz_tun: tun_net_xmit 42 [ 164.626197][ T6207] syz_tun: tun_net_xmit 42 [ 164.635861][ T6207] syz_tun: tun_net_xmit 42 [ 164.640565][ T6207] syz_tun: tun_net_xmit 42 [ 164.651479][ T6207] syz_tun: tun_net_xmit 42 [ 164.688341][ T6207] syz_tun: tun_net_xmit 42 [ 164.723375][ T6207] syz_tun: tun_net_xmit 42 [ 164.749510][ T6207] syz_tun: tun_net_xmit 42 [ 164.789947][ T6207] syz_tun: tun_net_xmit 42 [ 164.816823][ T6207] syz_tun: tun_net_xmit 42 [ 164.830574][ T6207] syz_tun: tun_net_xmit 42 [ 164.841192][ T6207] syz_tun: tun_net_xmit 42 [ 164.861589][ T6207] syz_tun: tun_net_xmit 42 [ 164.888321][ T6207] syz_tun: tun_net_xmit 42 [ 164.996764][ T6207] syz_tun: tun_net_xmit 42 [ 165.005061][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.030989][ T6207] syz_tun: tun_net_xmit 42 [ 165.038810][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.049030][ T6207] syz_tun: tun_net_xmit 42 [ 165.053935][ T6207] syz_tun: tun_net_xmit 42 [ 165.058711][ T6207] syz_tun: tun_net_xmit 42 [ 165.092783][ T6360] bridge_slave_0: entered allmulticast mode [ 165.099361][ T6207] syz_tun: tun_net_xmit 42 [ 165.114164][ T6207] syz_tun: tun_net_xmit 42 [ 165.119004][ T6207] syz_tun: tun_net_xmit 42 [ 165.126029][ T6360] bridge_slave_0: entered promiscuous mode [ 165.146750][ T6207] syz_tun: tun_net_xmit 42 [ 165.153157][ T6207] syz_tun: tun_net_xmit 42 [ 165.165927][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.173420][ T6207] syz_tun: tun_net_xmit 42 [ 165.180703][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.200234][ T6360] bridge_slave_1: entered allmulticast mode [ 165.206820][ T6207] syz_tun: tun_net_xmit 42 [ 165.210724][ T6207] syz_tun: tun_net_xmit 42 [ 165.237332][ T6207] syz_tun: tun_net_xmit 42 [ 165.239823][ T6360] bridge_slave_1: entered promiscuous mode [ 165.253438][ T6207] syz_tun: tun_net_xmit 42 [ 165.270713][ T6207] syz_tun: tun_net_xmit 42 [ 165.293436][ T6207] syz_tun: tun_net_xmit 42 [ 165.320365][ T6207] syz_tun: tun_net_xmit 42 [ 165.336583][ T6207] syz_tun: tun_net_xmit 42 [ 165.348240][ T6207] syz_tun: tun_net_xmit 42 [ 165.360771][ T6207] syz_tun: tun_net_xmit 42 [ 165.372633][ T6207] syz_tun: tun_net_xmit 42 [ 165.384263][ T6207] syz_tun: tun_net_xmit 42 [ 165.398541][ T6207] syz_tun: tun_net_xmit 42 [ 165.433654][ T6207] syz_tun: tun_net_xmit 42 [ 165.460228][ T6207] syz_tun: tun_net_xmit 42 [ 165.529349][ T6207] syz_tun: tun_net_xmit 42 [ 165.534620][ T51] Bluetooth: hci5: command tx timeout [ 165.562585][ T6207] syz_tun: tun_net_xmit 42 [ 165.600228][ T6207] syz_tun: tun_net_xmit 42 [ 165.621930][ T6207] syz_tun: tun_net_xmit 42 [ 165.644356][ T6207] syz_tun: tun_net_xmit 42 [ 165.662219][ T6207] syz_tun: tun_net_xmit 42 [ 165.694294][ T6207] syz_tun: tun_net_xmit 42 [ 165.701514][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.717208][ T6207] syz_tun: tun_net_xmit 42 [ 165.721922][ T6207] syz_tun: tun_net_xmit 42 [ 165.756735][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.766453][ T6207] syz_tun: tun_net_xmit 42 [ 165.771321][ T6207] syz_tun: tun_net_xmit 42 [ 165.814181][ T6207] syz_tun: tun_net_xmit 42 [ 165.819072][ T6207] syz_tun: tun_net_xmit 42 [ 165.924318][ T6207] syz_tun: tun_net_xmit 42 [ 165.939130][ T6207] syz_tun: tun_net_xmit 42 [ 165.974210][ T6207] syz_tun: tun_net_xmit 42 [ 165.979088][ T6207] syz_tun: tun_net_xmit 42 [ 166.033429][ T6207] syz_tun: tun_net_xmit 42 [ 166.063779][ T6207] syz_tun: tun_net_xmit 42 [ 166.118211][ T6207] syz_tun: tun_net_xmit 42 [ 166.380613][ T6479] 9pnet_fd: Insufficient options for proto=fd [ 166.420095][ T6479] siw: device registration error -23 [ 166.594171][ T6207] syz_tun: tun_net_xmit 42 [ 167.069667][ T6207] syz_tun: tun_net_xmit 42 [ 167.084224][ T6207] syz_tun: tun_net_xmit 42 [ 167.101755][ T6207] syz_tun: tun_net_xmit 42 [ 167.144187][ T6207] syz_tun: tun_net_xmit 42 [ 167.169371][ T6207] syz_tun: tun_net_xmit 42 [ 167.204214][ T6207] syz_tun: tun_net_xmit 42 [ 167.222739][ T6207] syz_tun: tun_net_xmit 42 [ 167.254284][ T6207] syz_tun: tun_net_xmit 42 [ 167.258990][ T6207] syz_tun: tun_net_xmit 42 [ 167.314356][ T6207] syz_tun: tun_net_xmit 42 [ 167.319247][ T6207] syz_tun: tun_net_xmit 42 [ 167.334409][ T6207] syz_tun: tun_net_xmit 42 [ 167.376905][ T6360] team0: Port device team_slave_0 added [ 167.410262][ T6360] team0: Port device team_slave_1 added [ 167.450418][ T6207] syz_tun: tun_net_xmit 42 [ 167.479268][ T6207] syz_tun: tun_net_xmit 42 [ 167.497127][ T6207] syz_tun: tun_net_xmit 42 [ 167.562414][ T6207] syz_tun: tun_net_xmit 42 [ 167.581007][ T6207] syz_tun: tun_net_xmit 42 [ 167.600649][ T6207] syz_tun: tun_net_xmit 42 [ 167.613388][ T6207] syz_tun: tun_net_xmit 42 [ 167.650837][ T6207] syz_tun: tun_net_xmit 42 [ 167.684581][ T6207] syz_tun: tun_net_xmit 42 [ 167.689326][ T6207] syz_tun: tun_net_xmit 42 [ 167.765828][ T6207] syz_tun: tun_net_xmit 42 [ 167.771049][ T6207] syz_tun: tun_net_xmit 42 [ 167.782369][ T6207] syz_tun: tun_net_xmit 42 [ 167.794478][ T6207] syz_tun: tun_net_xmit 42 [ 167.799154][ T6207] syz_tun: tun_net_xmit 42 [ 167.835054][ T6207] syz_tun: tun_net_xmit 42 [ 167.839856][ T6207] syz_tun: tun_net_xmit 42 [ 167.859131][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.869285][ T6207] syz_tun: tun_net_xmit 42 [ 167.879725][ T6207] syz_tun: tun_net_xmit 42 [ 167.886166][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.922745][ T6207] syz_tun: tun_net_xmit 42 [ 167.928316][ T6207] syz_tun: tun_net_xmit 42 [ 167.938263][ T6207] syz_tun: tun_net_xmit 42 [ 168.012516][ T6207] syz_tun: tun_net_xmit 42 [ 168.015375][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.423478][ T6207] syz_tun: tun_net_xmit 42 [ 168.450877][ T6207] syz_tun: tun_net_xmit 42 [ 168.509168][ T6207] syz_tun: tun_net_xmit 42 [ 168.675379][ T6207] syz_tun: tun_net_xmit 42 [ 168.754209][ T6207] syz_tun: tun_net_xmit 42 [ 168.758914][ T6207] syz_tun: tun_net_xmit 42 [ 168.832206][ T6207] syz_tun: tun_net_xmit 42 [ 168.854348][ T6207] syz_tun: tun_net_xmit 42 [ 168.859059][ T6207] syz_tun: tun_net_xmit 42 [ 168.895146][ T6207] syz_tun: tun_net_xmit 42 [ 168.907027][ T6207] syz_tun: tun_net_xmit 42 [ 168.913658][ T6207] syz_tun: tun_net_xmit 42 [ 168.919752][ T6207] syz_tun: tun_net_xmit 42 [ 168.971693][ T6207] syz_tun: tun_net_xmit 42 [ 168.978555][ T6207] syz_tun: tun_net_xmit 42 [ 168.984093][ T6207] syz_tun: tun_net_xmit 42 [ 168.990126][ T6207] syz_tun: tun_net_xmit 42 [ 169.000899][ T6207] syz_tun: tun_net_xmit 42 [ 169.006446][ T6207] syz_tun: tun_net_xmit 42 [ 169.011356][ T6207] syz_tun: tun_net_xmit 42 [ 169.016632][ T6207] syz_tun: tun_net_xmit 42 [ 169.022163][ T6207] syz_tun: tun_net_xmit 42 [ 169.071990][ T6207] syz_tun: tun_net_xmit 42 [ 169.083082][ T6207] syz_tun: tun_net_xmit 42 [ 169.088295][ T6207] syz_tun: tun_net_xmit 42 [ 169.093174][ T6207] syz_tun: tun_net_xmit 42 [ 169.098628][ T6207] syz_tun: tun_net_xmit 42 [ 169.103515][ T6207] syz_tun: tun_net_xmit 42 [ 169.114850][ T6207] syz_tun: tun_net_xmit 42 [ 169.119641][ T6207] syz_tun: tun_net_xmit 42 [ 169.126727][ T6207] syz_tun: tun_net_xmit 42 [ 169.177101][ T6207] syz_tun: tun_net_xmit 42 [ 169.182890][ T6207] syz_tun: tun_net_xmit 42 [ 169.188576][ T6207] syz_tun: tun_net_xmit 42 [ 169.194891][ T6207] syz_tun: tun_net_xmit 42 [ 169.199787][ T6207] syz_tun: tun_net_xmit 42 [ 169.204909][ T6207] syz_tun: tun_net_xmit 42 [ 169.209825][ T6207] syz_tun: tun_net_xmit 42 [ 169.220757][ T6207] syz_tun: tun_net_xmit 42 [ 169.225599][ T6207] syz_tun: tun_net_xmit 42 [ 169.230715][ T6207] syz_tun: tun_net_xmit 42 [ 169.237174][ T6207] syz_tun: tun_net_xmit 42 [ 169.249958][ T6207] syz_tun: tun_net_xmit 42 [ 169.259341][ T6207] syz_tun: tun_net_xmit 42 [ 169.269976][ T6207] syz_tun: tun_net_xmit 42 [ 169.284476][ T6207] syz_tun: tun_net_xmit 42 [ 169.295127][ T6207] syz_tun: tun_net_xmit 42 [ 169.305853][ T6207] syz_tun: tun_net_xmit 42 [ 169.316762][ T6207] syz_tun: tun_net_xmit 42 [ 169.334348][ T6207] syz_tun: tun_net_xmit 42 [ 169.345218][ T6207] syz_tun: tun_net_xmit 42 [ 169.355571][ T6207] syz_tun: tun_net_xmit 42 [ 169.365882][ T6207] syz_tun: tun_net_xmit 42 [ 169.383020][ T6502] block nbd0: NBD_DISCONNECT [ 169.462187][ T6207] syz_tun: tun_net_xmit 42 [ 169.493236][ T6207] syz_tun: tun_net_xmit 42 [ 169.518797][ T6207] syz_tun: tun_net_xmit 42 [ 169.529726][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.540564][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.639129][ T6207] syz_tun: tun_net_xmit 42 [ 169.643843][ T6207] syz_tun: tun_net_xmit 42 [ 169.689302][ T6207] syz_tun: tun_net_xmit 42 [ 169.737037][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.755234][ T6207] syz_tun: tun_net_xmit 42 [ 169.759964][ T6207] syz_tun: tun_net_xmit 42 [ 169.814172][ T6207] syz_tun: tun_net_xmit 42 [ 169.818890][ T6207] syz_tun: tun_net_xmit 42 [ 169.823608][ T6207] syz_tun: tun_net_xmit 42 [ 169.871000][ T6207] syz_tun: tun_net_xmit 42 [ 169.884674][ T6207] syz_tun: tun_net_xmit 42 [ 169.889384][ T6207] syz_tun: tun_net_xmit 42 [ 169.914347][ T6207] syz_tun: tun_net_xmit 42 [ 169.935154][ T6207] syz_tun: tun_net_xmit 42 [ 169.952993][ T6207] syz_tun: tun_net_xmit 42 [ 169.974671][ T6207] syz_tun: tun_net_xmit 42 [ 170.002459][ T6207] syz_tun: tun_net_xmit 42 [ 170.019340][ T6207] syz_tun: tun_net_xmit 42 [ 170.044388][ T6207] syz_tun: tun_net_xmit 42 [ 170.084553][ T6207] syz_tun: tun_net_xmit 42 [ 170.110370][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 170.110957][ T6207] syz_tun: tun_net_xmit 42 [ 170.143158][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 170.149030][ T6207] syz_tun: tun_net_xmit 42 [ 170.173427][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 170.183617][ T6207] syz_tun: tun_net_xmit 42 [ 170.207328][ T6207] syz_tun: tun_net_xmit 42 [ 170.221697][ T6360] hsr_slave_0: entered promiscuous mode [ 170.234933][ T6207] syz_tun: tun_net_xmit 42 [ 170.256954][ T6207] syz_tun: tun_net_xmit 42 [ 170.269304][ T51] block nbd0: Receive control failed (result -107) [ 170.284437][ T6207] syz_tun: tun_net_xmit 42 [ 170.301239][ T6360] hsr_slave_1: entered promiscuous mode [ 170.316553][ T6207] syz_tun: tun_net_xmit 42 [ 170.326716][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.332814][ T6512] nbd0: detected capacity change from 0 to 256 [ 170.343829][ T6360] Cannot create hsr debugfs directory [ 170.345033][ T6207] syz_tun: tun_net_xmit 42 [ 170.385465][ T6426] block nbd0: Dead connection, failed to find a fallback [ 170.392755][ T6426] block nbd0: shutting down sockets [ 170.405624][ T6207] syz_tun: tun_net_xmit 42 [ 170.432467][ T6207] syz_tun: tun_net_xmit 42 [ 170.447928][ T6426] blk_print_req_error: 136 callbacks suppressed [ 170.447950][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.475101][ T6207] syz_tun: tun_net_xmit 42 [ 170.479931][ T6207] syz_tun: tun_net_xmit 42 [ 170.517739][ T6207] syz_tun: tun_net_xmit 42 [ 170.535742][ T6426] buffer_io_error: 138 callbacks suppressed [ 170.535762][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 170.560918][ T6207] syz_tun: tun_net_xmit 42 [ 170.572088][ T6207] syz_tun: tun_net_xmit 42 [ 170.587997][ T6207] syz_tun: tun_net_xmit 42 [ 170.604231][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.618820][ T6207] syz_tun: tun_net_xmit 42 [ 170.623539][ T6207] syz_tun: tun_net_xmit 42 [ 170.674522][ T6207] syz_tun: tun_net_xmit 42 [ 170.679299][ T6207] syz_tun: tun_net_xmit 42 [ 170.684315][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 170.692296][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.740343][ T6207] syz_tun: tun_net_xmit 42 [ 170.774177][ T6207] syz_tun: tun_net_xmit 42 [ 170.778987][ T6207] syz_tun: tun_net_xmit 42 [ 170.787914][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 170.859511][ T6207] syz_tun: tun_net_xmit 42 [ 170.875511][ T6207] syz_tun: tun_net_xmit 42 [ 170.880216][ T6207] syz_tun: tun_net_xmit 42 [ 170.956870][ T6207] syz_tun: tun_net_xmit 42 [ 171.000483][ T6207] syz_tun: tun_net_xmit 42 [ 171.009476][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.019381][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 171.028858][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.038032][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 171.046685][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.057142][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 171.066534][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.094199][ T6207] syz_tun: tun_net_xmit 42 [ 171.099115][ T6207] syz_tun: tun_net_xmit 42 [ 171.103811][ T6207] syz_tun: tun_net_xmit 42 [ 171.111289][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 171.743062][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.774436][ T6207] syz_tun: tun_net_xmit 42 [ 171.794261][ T6207] syz_tun: tun_net_xmit 42 [ 171.798990][ T6207] syz_tun: tun_net_xmit 42 [ 171.813807][ T6524] nbd2: detected capacity change from 0 to 63 [ 171.820803][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 171.884072][ T6526] block nbd2: NBD_DISCONNECT [ 171.890176][ T6207] syz_tun: tun_net_xmit 42 [ 171.906582][ T6426] ldm_validate_partition_table(): Disk read failed. [ 171.933992][ T6207] syz_tun: tun_net_xmit 42 [ 171.938706][ T6207] syz_tun: tun_net_xmit 42 [ 171.946423][ T6526] block nbd2: Disconnected due to user request. [ 171.979990][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.991464][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'. [ 172.016053][ T6526] block nbd2: shutting down sockets [ 172.026405][ T6207] syz_tun: tun_net_xmit 42 [ 172.040010][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 172.054312][ T6207] syz_tun: tun_net_xmit 42 [ 172.100957][ T6197] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 172.110281][ T6197] Buffer I/O error on dev nbd2, logical block 0, async page read [ 172.123674][ T6423] ldm_validate_partition_table(): Disk read failed. [ 172.135679][ T6207] syz_tun: tun_net_xmit 42 [ 172.145064][ T6426] Dev nbd0: unable to read RDB block 0 [ 172.154707][ T6207] syz_tun: tun_net_xmit 42 [ 172.163952][ T6207] syz_tun: tun_net_xmit 42 [ 172.169109][ T6207] syz_tun: tun_net_xmit 42 [ 172.177762][ T6426] nbd0: unable to read partition table [ 172.184120][ T6207] syz_tun: tun_net_xmit 42 [ 172.189276][ T6207] syz_tun: tun_net_xmit 42 [ 172.194032][ T6207] syz_tun: tun_net_xmit 42 [ 172.198671][ T6207] syz_tun: tun_net_xmit 42 [ 172.203325][ T6207] syz_tun: tun_net_xmit 42 [ 172.208070][ T6207] syz_tun: tun_net_xmit 42 [ 172.212705][ T6207] syz_tun: tun_net_xmit 42 [ 172.217463][ T6207] syz_tun: tun_net_xmit 42 [ 172.222101][ T6207] syz_tun: tun_net_xmit 42 [ 172.227147][ T6207] syz_tun: tun_net_xmit 42 [ 172.231792][ T6207] syz_tun: tun_net_xmit 42 [ 172.236474][ T6207] syz_tun: tun_net_xmit 42 [ 172.241102][ T6207] syz_tun: tun_net_xmit 42 [ 172.249113][ T6423] Dev nbd2: unable to read RDB block 0 [ 172.273121][ T6207] syz_tun: tun_net_xmit 42 [ 172.310082][ T6423] nbd2: unable to read partition table [ 172.326514][ T6207] syz_tun: tun_net_xmit 42 [ 172.358047][ T6207] syz_tun: tun_net_xmit 42 [ 172.386902][ T6207] syz_tun: tun_net_xmit 42 [ 172.443857][ T6207] syz_tun: tun_net_xmit 42 [ 172.451295][ T6207] syz_tun: tun_net_xmit 42 [ 172.485916][ T6207] syz_tun: tun_net_xmit 42 [ 172.513146][ T6207] syz_tun: tun_net_xmit 42 [ 172.545075][ T6207] syz_tun: tun_net_xmit 42 [ 172.570227][ T6207] syz_tun: tun_net_xmit 42 [ 172.588646][ T6207] syz_tun: tun_net_xmit 42 [ 172.611400][ T6207] syz_tun: tun_net_xmit 42 [ 172.647815][ T6207] syz_tun: tun_net_xmit 42 [ 172.652537][ T6207] syz_tun: tun_net_xmit 42 [ 172.705060][ T6207] syz_tun: tun_net_xmit 42 [ 172.724310][ T6207] syz_tun: tun_net_xmit 42 [ 172.728998][ T6207] syz_tun: tun_net_xmit 42 [ 172.791042][ T6207] syz_tun: tun_net_xmit 42 [ 172.804438][ T6207] syz_tun: tun_net_xmit 42 [ 172.809132][ T6207] syz_tun: tun_net_xmit 42 [ 172.813772][ T6207] syz_tun: tun_net_xmit 42 [ 172.891142][ T6207] syz_tun: tun_net_xmit 42 [ 173.020572][ T6207] syz_tun: tun_net_xmit 42 [ 173.031254][ T6207] syz_tun: tun_net_xmit 42 [ 173.076913][ T6207] syz_tun: tun_net_xmit 42 [ 173.081732][ T6207] syz_tun: tun_net_xmit 42 [ 173.155467][ T6207] syz_tun: tun_net_xmit 42 [ 173.160917][ T6207] syz_tun: tun_net_xmit 42 [ 173.178356][ T6423] ldm_validate_partition_table(): Disk read failed. [ 173.196325][ T6426] ldm_validate_partition_table(): Disk read failed. [ 173.209086][ T6207] syz_tun: tun_net_xmit 42 [ 173.241156][ T6426] Dev nbd0: unable to read RDB block 0 [ 173.256785][ T6423] Dev nbd2: unable to read RDB block 0 [ 173.853761][ T6207] syz_tun: tun_net_xmit 42 [ 173.876113][ T6207] syz_tun: tun_net_xmit 42 [ 173.954799][ T6207] syz_tun: tun_net_xmit 42 [ 173.959552][ T6207] syz_tun: tun_net_xmit 42 [ 174.027261][ T6207] syz_tun: tun_net_xmit 42 [ 174.060329][ T6207] syz_tun: tun_net_xmit 42 [ 174.102516][ T6207] syz_tun: tun_net_xmit 42 [ 174.131403][ T6207] syz_tun: tun_net_xmit 42 [ 174.173386][ T6207] syz_tun: tun_net_xmit 42 [ 174.186930][ T6426] nbd0: unable to read partition table [ 174.197885][ T6423] nbd2: unable to read partition table [ 174.220756][ T6207] syz_tun: tun_net_xmit 42 [ 174.230848][ T6561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.797622][ T6207] syz_tun: tun_net_xmit 42 [ 174.835590][ T6207] syz_tun: tun_net_xmit 42 [ 174.840362][ T6207] syz_tun: tun_net_xmit 42 [ 174.906158][ T6207] syz_tun: tun_net_xmit 42 [ 174.910936][ T6207] syz_tun: tun_net_xmit 42 [ 174.938912][ T6207] syz_tun: tun_net_xmit 42 [ 174.960017][ T6207] syz_tun: tun_net_xmit 42 [ 174.979003][ T6207] syz_tun: tun_net_xmit 42 [ 174.983755][ T6207] syz_tun: tun_net_xmit 42 [ 175.044553][ T6207] syz_tun: tun_net_xmit 42 [ 175.061494][ T6207] syz_tun: tun_net_xmit 42 [ 175.344157][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.511934][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 175.536989][ T10] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 175.571143][ T10] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 175.640127][ T10] usb 2-1: config 6 has no interface number 0 [ 175.671371][ T10] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 175.696690][ T6360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.746372][ T10] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 175.814202][ T10] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.850977][ T6360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.927401][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 175.955136][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.983614][ T10] usb 2-1: Product: syz [ 175.994894][ T10] usb 2-1: Manufacturer: syz [ 175.999987][ T10] usb 2-1: SerialNumber: syz [ 176.035468][ T6360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.058385][ T10] hso 2-1:6.2: Failed to find INT IN ep [ 176.093191][ T6360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.241897][ T43] usb 2-1: USB disconnect, device number 2 [ 176.668992][ T6593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.553769][ T10] usb 4-1: USB disconnect, device number 2 [ 177.640729][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 177.670237][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 178.355618][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.623834][ T6117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.675278][ T10] keyspan 4-1:0.11: device disconnected [ 178.849632][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.915423][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.922643][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.077666][ T6117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.142061][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.149389][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.252764][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'. [ 179.299426][ T6360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.333963][ T6360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.363747][ T6613] lo speed is unknown, defaulting to 1000 [ 179.707050][ T6117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.852937][ T6117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.909666][ T6631] netlink: 788 bytes leftover after parsing attributes in process `syz.0.151'. [ 181.158956][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.385929][ T6117] bridge_slave_1: left allmulticast mode [ 181.391905][ T6117] bridge_slave_1: left promiscuous mode [ 181.494843][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.013213][ T6117] bridge_slave_0: left allmulticast mode [ 182.045151][ T6117] bridge_slave_0: left promiscuous mode [ 182.051739][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.281390][ T6653] Bluetooth: MGMT ver 1.23 [ 182.723865][ T6117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.736698][ T6117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.746793][ T6117] bond0 (unregistering): Released all slaves [ 182.774439][ T1216] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.948002][ T1216] usb 1-1: Using ep0 maxpacket: 8 [ 182.961131][ T1216] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 182.989512][ T1216] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 183.022912][ T1216] usb 1-1: config 6 has no interface number 0 [ 183.039154][ T1216] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 183.052932][ T1216] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 183.068143][ T1216] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.102316][ T1216] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 183.133613][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.158532][ T1216] usb 1-1: Product: syz [ 183.169773][ T1216] usb 1-1: Manufacturer: syz [ 183.182918][ T1216] usb 1-1: SerialNumber: syz [ 183.269688][ T1216] hso 1-1:6.2: Failed to find INT IN ep [ 183.391463][ T6674] 9pnet_fd: Insufficient options for proto=fd [ 183.408401][ T6674] siw: device registration error -23 [ 185.418212][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 185.668270][ T6117] hsr_slave_0: left promiscuous mode [ 185.681343][ T6693] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 185.700085][ T1216] usb 1-1: USB disconnect, device number 2 [ 185.722497][ T6117] hsr_slave_1: left promiscuous mode [ 185.758203][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.777526][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.789025][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.814593][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.851275][ T6117] veth1_macvtap: left promiscuous mode [ 185.884128][ T6117] veth0_macvtap: left promiscuous mode [ 185.890050][ T6117] veth1_vlan: left promiscuous mode [ 185.898400][ T6117] veth0_vlan: left promiscuous mode [ 186.449488][ T6707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.165'. [ 186.913009][ T6117] team0 (unregistering): Port device team_slave_1 removed [ 186.947428][ T6117] team0 (unregistering): Port device team_slave_0 removed [ 187.264165][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.276207][ T6693] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 187.448003][ T6360] veth0_vlan: entered promiscuous mode [ 187.501157][ T6360] veth1_vlan: entered promiscuous mode [ 187.673825][ T6360] veth0_macvtap: entered promiscuous mode [ 187.689698][ T6360] veth1_macvtap: entered promiscuous mode [ 187.738038][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.759383][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.798318][ T6360] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.820970][ T6360] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.845342][ T6360] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.858987][ T6360] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.381620][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.435435][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.424659][ T6738] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 189.754049][ T6743] Zero length message leads to an empty skb [ 189.834328][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.843423][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.977997][ T6744] syzkaller0: entered promiscuous mode [ 189.983605][ T6744] syzkaller0: entered allmulticast mode [ 190.164788][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 190.869374][ T6767] netlink: 'syz.5.177': attribute type 27 has an invalid length. [ 191.169916][ T6771] syz.1.179 uses obsolete (PF_INET,SOCK_PACKET) [ 191.746199][ T1216] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.961697][ T1216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.975541][ T1216] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 191.986133][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.000522][ T1216] usb 5-1: config 0 descriptor?? [ 192.019068][ T1216] pwc: Askey VC010 type 2 USB webcam detected. [ 192.420148][ T1216] pwc: recv_control_msg error -32 req 02 val 2b00 [ 192.426793][ T6758] lo speed is unknown, defaulting to 1000 [ 192.429516][ T6758] lo speed is unknown, defaulting to 1000 [ 192.441337][ T6758] lo speed is unknown, defaulting to 1000 [ 192.469862][ T1216] pwc: recv_control_msg error -32 req 02 val 2700 [ 192.502201][ T1216] pwc: recv_control_msg error -32 req 02 val 2c00 [ 192.529620][ T1216] pwc: recv_control_msg error -32 req 04 val 1000 [ 192.769139][ T1216] pwc: recv_control_msg error -32 req 04 val 1400 [ 192.799348][ T1216] pwc: recv_control_msg error -32 req 02 val 2000 [ 192.846791][ T1216] pwc: recv_control_msg error -32 req 02 val 2100 [ 192.885565][ T1216] pwc: recv_control_msg error -32 req 04 val 1500 [ 192.913195][ T1216] pwc: recv_control_msg error -32 req 02 val 2500 [ 192.946889][ T1216] pwc: recv_control_msg error -32 req 02 val 2400 [ 192.976367][ T1216] pwc: recv_control_msg error -32 req 02 val 2600 [ 193.004633][ T6758] infiniband sz1: set active [ 193.009556][ T6758] infiniband sz1: added lo [ 193.015685][ T6758] sz1: rxe_create_cq: returned err = -12 [ 193.021696][ T6758] infiniband sz1: Couldn't create ib_mad CQ [ 193.028169][ T6758] infiniband sz1: Couldn't open port 1 [ 193.058684][ T6758] RDS/IB: sz1: added [ 193.063265][ T6758] smc: adding ib device sz1 with port count 1 [ 193.069659][ T6758] smc: ib device sz1 port 1 has pnetid [ 193.077706][ T6758] lo speed is unknown, defaulting to 1000 [ 193.247364][ T5988] lo speed is unknown, defaulting to 1000 [ 193.253765][ T5988] lo speed is unknown, defaulting to 1000 [ 193.319345][ T6791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.417766][ T6792] 9pnet_fd: Insufficient options for proto=fd [ 193.972430][ T1216] pwc: recv_control_msg error -32 req 02 val 2900 [ 193.979246][ T6758] lo speed is unknown, defaulting to 1000 [ 194.026186][ T1216] pwc: recv_control_msg error -32 req 02 val 2800 [ 194.191751][ T6758] lo speed is unknown, defaulting to 1000 [ 194.345339][ T6758] lo speed is unknown, defaulting to 1000 [ 194.500283][ T6758] lo speed is unknown, defaulting to 1000 [ 194.652300][ T6792] siw: device registration error -23 [ 194.787447][ T1216] pwc: recv_control_msg error -32 req 04 val 1100 [ 194.822875][ T1216] pwc: Registered as video103. [ 194.832647][ T1216] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 195.151209][ T43] usb 5-1: USB disconnect, device number 3 [ 196.902598][ T6808] kexec: Could not allocate control_code_buffer [ 198.466273][ T6835] sz1: rxe_newlink: already configured on lo [ 200.054940][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.305525][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.850387][ T6852] lo speed is unknown, defaulting to 1000 [ 200.965535][ T6852] lo speed is unknown, defaulting to 1000 [ 200.975080][ T6848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.323719][ T6861] netlink: 'syz.2.203': attribute type 27 has an invalid length. [ 202.338658][ T6868] 9pnet_fd: Insufficient options for proto=fd [ 203.459107][ T6882] block nbd2: NBD_DISCONNECT [ 204.206708][ T6868] siw: device registration error -23 [ 205.048072][ T981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.170686][ T6909] 9pnet_fd: Insufficient options for proto=fd [ 205.187329][ T6909] siw: device registration error -23 [ 205.354037][ T981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.900844][ T981] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 205.916078][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.927352][ T981] usb 5-1: config 0 descriptor?? [ 205.938347][ T981] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 206.078194][ T6904] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 206.081470][ T6919] nbd: nbd0 already in use [ 206.097513][ T6919] block nbd0: NBD_DISCONNECT [ 206.114053][ T6919] block nbd0: Send disconnect failed -32 [ 208.122743][ T6945] block device autoloading is deprecated and will be removed. [ 208.164964][ T6945] ======================================================= [ 208.164964][ T6945] WARNING: The mand mount option has been deprecated and [ 208.164964][ T6945] and is ignored by this kernel. Remove the mand [ 208.164964][ T6945] option from the mount to silence this warning. [ 208.164964][ T6945] ======================================================= [ 208.837202][ T6948] lo speed is unknown, defaulting to 1000 [ 208.890571][ T6948] lo speed is unknown, defaulting to 1000 [ 210.190876][ T6970] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 210.230148][ T918] usb 5-1: USB disconnect, device number 4 [ 210.458334][ T6976] program syz.2.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.487819][ T7000] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 212.737373][ T6996] lo speed is unknown, defaulting to 1000 [ 212.777438][ T6996] lo speed is unknown, defaulting to 1000 [ 214.538325][ T7036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.248'. [ 214.785309][ T7030] lo speed is unknown, defaulting to 1000 [ 214.828342][ T7030] lo speed is unknown, defaulting to 1000 [ 216.011276][ T7062] overlayfs: failed to resolve './file0': -2 [ 218.183554][ T7082] 9pnet_fd: Insufficient options for proto=fd [ 221.065282][ T7090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.260'. [ 222.512337][ T7113] overlayfs: failed to resolve './file0': -2 [ 227.616510][ T5841] Bluetooth: hci3: unexpected event for opcode 0x200c [ 227.675664][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 227.874769][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 228.922711][ T7172] overlayfs: failed to resolve './file0': -2 [ 230.280739][ T7184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.659690][ T7202] lo speed is unknown, defaulting to 1000 [ 231.667224][ T7202] lo speed is unknown, defaulting to 1000 [ 232.294134][ T918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 232.454733][ T918] usb 3-1: Using ep0 maxpacket: 8 [ 232.513624][ T918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.523705][ T918] usb 3-1: config 248 has an invalid interface number: 51 but max is 0 [ 232.536337][ T918] usb 3-1: config 248 has no interface number 0 [ 232.570209][ T918] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 232.600653][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.633481][ T918] usb 3-1: Product: syz [ 232.650386][ T918] usb 3-1: Manufacturer: syz [ 232.669436][ T918] usb 3-1: SerialNumber: syz [ 233.135466][ T918] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:248.51/input/input9 [ 233.223755][ T5180] bcm5974 3-1:248.51: could not read from device [ 233.378657][ T5180] bcm5974 3-1:248.51: could not read from device [ 233.470993][ T5180] bcm5974 3-1:248.51: could not read from device [ 233.526470][ T918] usb 3-1: USB disconnect, device number 2 [ 233.552846][ T5180] bcm5974 3-1:248.51: could not read from device [ 234.352515][ T7241] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 234.696480][ T918] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 234.859008][ T918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.893845][ T918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.903093][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.985654][ T918] usb 3-1: config 0 descriptor?? [ 235.017328][ T918] pwc: Askey VC010 type 2 USB webcam detected. [ 235.354421][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.299'. [ 235.552391][ T918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 236.197703][ T918] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.414479][ T918] pwc: recv_control_msg error -32 req 02 val 2c00 [ 236.457889][ T918] pwc: recv_control_msg error -32 req 04 val 1000 [ 236.466121][ T7256] syz.4.297 (7256) used greatest stack depth: 19968 bytes left [ 236.470502][ T918] pwc: recv_control_msg error -32 req 04 val 1300 [ 236.685804][ T5830] Bluetooth: hci1: unexpected event for opcode 0x200c [ 237.354069][ T918] pwc: recv_control_msg error -32 req 04 val 1400 [ 237.376572][ T918] pwc: recv_control_msg error -32 req 02 val 2000 [ 237.385201][ T918] pwc: recv_control_msg error -32 req 02 val 2100 [ 237.409194][ T918] pwc: recv_control_msg error -32 req 04 val 1500 [ 237.428119][ T918] pwc: recv_control_msg error -32 req 02 val 2500 [ 237.470189][ T918] pwc: recv_control_msg error -32 req 02 val 2400 [ 237.491107][ T918] pwc: recv_control_msg error -32 req 02 val 2600 [ 237.508933][ T918] pwc: recv_control_msg error -32 req 02 val 2900 [ 237.718818][ T918] pwc: recv_control_msg error -71 req 04 val 1100 [ 237.744790][ T918] pwc: recv_control_msg error -71 req 04 val 1200 [ 238.561355][ T918] pwc: Registered as video103. [ 238.582033][ T7284] random: crng reseeded on system resumption [ 238.698977][ T918] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 239.086945][ T918] usb 3-1: USB disconnect, device number 3 [ 240.989657][ T7293] lo speed is unknown, defaulting to 1000 [ 240.997646][ T7293] lo speed is unknown, defaulting to 1000 [ 241.774395][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 243.519670][ T7335] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 243.654036][ T1216] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 244.204085][ T1216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.264729][ T1216] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 244.285372][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.320802][ T1216] usb 2-1: config 0 descriptor?? [ 244.405194][ T1216] pwc: Askey VC010 type 2 USB webcam detected. [ 244.551826][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 244.940296][ T1216] pwc: recv_control_msg error -32 req 02 val 2b00 [ 245.042112][ T1216] pwc: recv_control_msg error -32 req 02 val 2700 [ 245.154764][ T1216] pwc: recv_control_msg error -32 req 02 val 2c00 [ 245.290023][ T1216] pwc: recv_control_msg error -32 req 04 val 1000 [ 245.449697][ T1216] pwc: recv_control_msg error -32 req 04 val 1300 [ 245.476355][ T1216] pwc: recv_control_msg error -32 req 04 val 1400 [ 245.683368][ T1216] pwc: recv_control_msg error -32 req 02 val 2000 [ 245.694496][ T1216] pwc: recv_control_msg error -32 req 02 val 2100 [ 245.715008][ T1216] pwc: recv_control_msg error -32 req 04 val 1500 [ 245.734334][ T1216] pwc: recv_control_msg error -32 req 02 val 2500 [ 245.745206][ T1216] pwc: recv_control_msg error -32 req 02 val 2400 [ 246.428925][ T1216] pwc: recv_control_msg error -32 req 02 val 2600 [ 246.441222][ T1216] pwc: recv_control_msg error -32 req 02 val 2900 [ 246.685801][ T1216] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.726553][ T1216] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.758813][ T7365] random: crng reseeded on system resumption [ 247.011356][ T1216] pwc: Registered as video103. [ 247.185832][ T1216] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 247.385267][ T1216] usb 2-1: USB disconnect, device number 3 [ 250.692216][ T7399] lo speed is unknown, defaulting to 1000 [ 250.794669][ T7399] lo speed is unknown, defaulting to 1000 [ 251.386265][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'. [ 251.409813][ T7416] lo speed is unknown, defaulting to 1000 [ 251.561122][ T30] audit: type=1800 audit(1750236265.402:2): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.332" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 253.275508][ T7416] lo speed is unknown, defaulting to 1000 [ 255.055340][ T7437] rdma_rxe: rxe_newlink: failed to add lo [ 255.294107][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 255.453950][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 255.495721][ T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 255.534456][ T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 255.580899][ T24] usb 2-1: config 6 has no interface number 0 [ 255.595710][ T24] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 255.834661][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 255.845365][ T24] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.913470][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 255.934315][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.026970][ T24] usb 2-1: Product: syz [ 256.031346][ T24] usb 2-1: Manufacturer: syz [ 256.056315][ T24] usb 2-1: SerialNumber: syz [ 256.883943][ T24] usb 2-1: can't set config #6, error -71 [ 256.927522][ T24] usb 2-1: USB disconnect, device number 4 [ 259.000883][ T7499] lo speed is unknown, defaulting to 1000 [ 259.138457][ T7499] lo speed is unknown, defaulting to 1000 [ 261.446968][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.453519][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.718444][ T7566] nbd1: detected capacity change from 0 to 63 [ 262.726771][ T5830] block nbd1: Receive control failed (result -32) [ 262.754623][ T6426] block nbd1: Dead connection, failed to find a fallback [ 262.761730][ T6426] block nbd1: shutting down sockets [ 262.863022][ T6426] blk_print_req_error: 172 callbacks suppressed [ 262.863045][ T6426] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.888158][ T6426] buffer_io_error: 175 callbacks suppressed [ 262.888177][ T6426] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.950648][ T6426] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.012386][ T6426] Buffer I/O error on dev nbd1, logical block 1, async page read [ 263.830710][ T6426] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.845335][ T6426] Buffer I/O error on dev nbd1, logical block 2, async page read [ 263.909154][ T6426] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.965142][ T6426] Buffer I/O error on dev nbd1, logical block 3, async page read [ 264.034320][ T6426] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.103817][ T6426] Buffer I/O error on dev nbd1, logical block 0, async page read [ 264.112552][ T6426] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.224077][ T6426] Buffer I/O error on dev nbd1, logical block 1, async page read [ 264.232062][ T6426] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.221830][ T6426] Buffer I/O error on dev nbd1, logical block 2, async page read [ 265.238176][ T6426] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.248475][ T6426] Buffer I/O error on dev nbd1, logical block 3, async page read [ 265.272942][ T6426] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.298120][ T6426] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.331531][ T6426] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.342279][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 265.414317][ T6426] Buffer I/O error on dev nbd1, logical block 1, async page read [ 265.450193][ T6426] ldm_validate_partition_table(): Disk read failed. [ 265.510094][ T6426] Dev nbd1: unable to read RDB block 0 [ 265.580909][ T6426] nbd1: unable to read partition table [ 265.672049][ T6426] ldm_validate_partition_table(): Disk read failed. [ 265.726099][ T6426] Dev nbd1: unable to read RDB block 0 [ 265.768424][ T6426] nbd1: unable to read partition table [ 266.984922][ T7610] netlink: 'syz.0.371': attribute type 11 has an invalid length. [ 266.992776][ T7610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.371'. [ 268.294318][ T7615] nbd0: detected capacity change from 0 to 63 [ 268.325895][ T5825] block nbd0: Receive control failed (result -32) [ 268.359940][ T6426] block nbd0: Dead connection, failed to find a fallback [ 268.369630][ T6426] block nbd0: shutting down sockets [ 268.374913][ T6426] blk_print_req_error: 138 callbacks suppressed [ 268.374927][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.391059][ T6426] buffer_io_error: 138 callbacks suppressed [ 268.391075][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 268.407180][ T6426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.446295][ T6426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 268.497526][ T7624] 9pnet_fd: Insufficient options for proto=fd [ 268.505133][ T7624] siw: device registration error -23 [ 268.574801][ T6426] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.629490][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 268.812474][ T7598] syz.1.368 (7598): drop_caches: 2 [ 268.985118][ T6426] Buffer I/O error on dev nbd0, logical block 2, async page read [ 268.985315][ T6426] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.985344][ T6426] Buffer I/O error on dev nbd0, logical block 3, async page read [ 268.985507][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.985534][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 268.985679][ T6426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.985705][ T6426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 268.985850][ T6426] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.985877][ T6426] Buffer I/O error on dev nbd0, logical block 2, async page read [ 268.986013][ T6426] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.986040][ T6426] Buffer I/O error on dev nbd0, logical block 3, async page read [ 268.986182][ T6426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.986208][ T6426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 268.986344][ T6426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.986371][ T6426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 268.989314][ T6426] ldm_validate_partition_table(): Disk read failed. [ 268.991314][ T6426] Dev nbd0: unable to read RDB block 0 [ 268.993483][ T6426] nbd0: unable to read partition table [ 269.217562][ T6426] ldm_validate_partition_table(): Disk read failed. [ 269.219619][ T6426] Dev nbd0: unable to read RDB block 0 [ 269.221742][ T6426] nbd0: unable to read partition table [ 269.402345][ T6426] ldm_validate_partition_table(): Disk read failed. [ 269.419139][ T6426] Dev nbd0: unable to read RDB block 0 [ 269.421304][ T6426] nbd0: unable to read partition table [ 269.459303][ T6426] ldm_validate_partition_table(): Disk read failed. [ 269.762020][ T6426] Dev nbd0: unable to read RDB block 0 [ 269.770272][ T6426] nbd0: unable to read partition table [ 272.144656][ T7657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.494396][ T981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.694026][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 272.770019][ T981] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 272.860050][ T981] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 272.948307][ T981] usb 5-1: config 6 has no interface number 0 [ 272.973984][ T981] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.012954][ T981] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.060887][ T981] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 273.075050][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.083271][ T981] usb 5-1: Product: syz [ 273.100700][ T981] usb 5-1: Manufacturer: syz [ 273.113275][ T981] usb 5-1: SerialNumber: syz [ 274.692747][ T981] usb 5-1: can't set config #6, error -71 [ 274.925080][ T981] usb 5-1: USB disconnect, device number 6 [ 275.057168][ T7677] nbd: nbd1 already in use [ 275.140896][ T7679] netlink: 788 bytes leftover after parsing attributes in process `syz.5.390'. [ 275.362704][ T7686] nbd: nbd1 already in use [ 276.681661][ T7706] 9pnet_fd: Insufficient options for proto=fd [ 276.694042][ T7706] siw: device registration error -23 [ 277.483616][ T7704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.434987][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 280.061289][ T918] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 280.784749][ T918] usb 5-1: Using ep0 maxpacket: 16 [ 280.816028][ T918] usb 5-1: config index 0 descriptor too short (expected 59154, got 18) [ 280.859674][ T918] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 281.117953][ T918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 281.229776][ T7748] rdma_rxe: rxe_newlink: failed to add lo [ 282.355340][ T918] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 282.424757][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.511821][ T918] usb 5-1: config 0 descriptor?? [ 282.541490][ T918] usb 5-1: can't set config #0, error -71 [ 283.036323][ T918] usb 5-1: USB disconnect, device number 7 [ 283.356754][ T7767] nbd2: detected capacity change from 0 to 63 [ 283.411126][ T7775] block nbd2: NBD_DISCONNECT [ 283.474375][ T7775] block nbd2: Disconnected due to user request. [ 283.480676][ T7775] block nbd2: shutting down sockets [ 283.618017][ C0] blk_print_req_error: 286 callbacks suppressed [ 283.618032][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.633408][ C0] buffer_io_error: 286 callbacks suppressed [ 283.633418][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 283.647135][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.656182][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 283.663995][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.673031][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 283.680839][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.689889][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 283.704099][ T6426] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.736788][ T6426] Buffer I/O error on dev nbd2, logical block 0, async page read [ 283.794185][ T6426] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.837530][ T6426] Buffer I/O error on dev nbd2, logical block 1, async page read [ 283.891061][ T6426] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.945902][ T6426] Buffer I/O error on dev nbd2, logical block 2, async page read [ 284.011642][ T6426] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.379668][ T24] syz_tun: tun_net_xmit 90 [ 284.743902][ T6426] Buffer I/O error on dev nbd2, logical block 3, async page read [ 284.751859][ T6426] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.773908][ T6426] Buffer I/O error on dev nbd2, logical block 0, async page read [ 284.804073][ T6426] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.813146][ T6426] Buffer I/O error on dev nbd2, logical block 1, async page read [ 284.856583][ T6426] ldm_validate_partition_table(): Disk read failed. [ 284.962758][ T6426] Dev nbd2: unable to read RDB block 0 [ 284.994155][ T24] syz_tun: tun_net_xmit 90 [ 285.061467][ T6426] nbd2: unable to read partition table [ 285.067747][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 285.121640][ T6426] ldm_validate_partition_table(): Disk read failed. [ 285.266240][ T6426] Dev nbd2: unable to read RDB block 0 [ 285.299250][ T6426] nbd2: unable to read partition table [ 286.672128][ T7814] nbd: nbd1 already in use [ 286.677303][ T7814] block nbd1: NBD_DISCONNECT [ 286.681933][ T7814] block nbd1: Send disconnect failed -32 [ 288.065231][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.081112][ T7830] syz.5.420 (7830): drop_caches: 2 [ 288.176905][ T7828] syz.4.419 (7828): drop_caches: 2 [ 289.382441][ T7847] rdma_rxe: rxe_newlink: failed to add lo [ 291.179961][ T7867] netlink: 'syz.5.428': attribute type 10 has an invalid length. [ 291.222455][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.255159][ T7868] nbd2: detected capacity change from 0 to 63 [ 291.330710][ T5830] block nbd2: Receive control failed (result -32) [ 291.368046][ T7867] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 291.369106][ T6423] block nbd2: Dead connection, failed to find a fallback [ 291.492989][ T6423] block nbd2: shutting down sockets [ 291.542950][ T6423] blk_print_req_error: 138 callbacks suppressed [ 291.542968][ T6423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 291.641720][ T6423] buffer_io_error: 138 callbacks suppressed [ 291.641734][ T6423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 291.656598][ T6423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 291.686404][ T6423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 292.393275][ T918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 292.420946][ T6423] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.439542][ T6423] Buffer I/O error on dev nbd2, logical block 2, async page read [ 292.452487][ T6423] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.463447][ T6423] Buffer I/O error on dev nbd2, logical block 3, async page read [ 292.594326][ T918] usb 1-1: Using ep0 maxpacket: 8 [ 292.644126][ T6423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.656852][ T6423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 292.693913][ T918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.716251][ T918] usb 1-1: config 248 has an invalid interface number: 51 but max is 0 [ 292.747523][ T6423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.775573][ T918] usb 1-1: config 248 has no interface number 0 [ 292.818322][ T6423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 292.877406][ T918] usb 1-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 292.921397][ T6423] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.994610][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.018802][ T6423] Buffer I/O error on dev nbd2, logical block 2, async page read [ 293.047292][ T918] usb 1-1: Product: syz [ 293.064063][ T6423] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.073130][ T6423] Buffer I/O error on dev nbd2, logical block 3, async page read [ 293.083909][ T918] usb 1-1: Manufacturer: syz [ 293.088537][ T918] usb 1-1: SerialNumber: syz [ 293.174265][ T6423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.051449][ T6423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 294.059957][ T6423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.069785][ T6423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 294.080769][ T6423] ldm_validate_partition_table(): Disk read failed. [ 294.089431][ T6423] Dev nbd2: unable to read RDB block 0 [ 294.097172][ T6423] nbd2: unable to read partition table [ 294.204351][ T918] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:248.51/input/input12 [ 294.219395][ T6423] ldm_validate_partition_table(): Disk read failed. [ 294.245892][ T6423] Dev nbd2: unable to read RDB block 0 [ 294.256106][ T5180] bcm5974 1-1:248.51: could not read from device [ 294.273476][ T6423] nbd2: unable to read partition table [ 295.846207][ T918] usb 1-1: USB disconnect, device number 3 [ 295.950503][ T7915] 9pnet_fd: Insufficient options for proto=fd [ 295.958132][ T7915] siw: device registration error -23 [ 296.288255][ T7922] nbd4: detected capacity change from 0 to 63 [ 296.348468][ T7928] nbd: must specify an index to disconnect [ 296.418791][ T5830] block nbd4: Receive control failed (result -104) [ 297.536954][ T7941] 9pnet_fd: Insufficient options for proto=fd [ 297.547774][ T7941] siw: device registration error -23 [ 299.504052][ T5813] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 299.533251][ T7974] nbd: nbd0 already in use [ 299.547895][ T7974] nbd: must specify an index to disconnect [ 299.687016][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 299.741888][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.751329][ T5813] usb 5-1: config 248 has an invalid interface number: 51 but max is 0 [ 299.783997][ T5813] usb 5-1: config 248 has no interface number 0 [ 299.815089][ T5813] usb 5-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 299.853889][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.873890][ T5813] usb 5-1: Product: syz [ 300.074885][ T5813] usb 5-1: Manufacturer: syz [ 300.080401][ T5813] usb 5-1: SerialNumber: syz [ 300.839504][ T7988] syz.2.463 (7988): drop_caches: 2 [ 300.846992][ T7988] syz.2.463 (7988): drop_caches: 2 [ 301.371553][ T5813] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:248.51/input/input13 [ 301.398436][ T5180] bcm5974 5-1:248.51: could not read from device [ 302.213988][ T5813] usb 5-1: USB disconnect, device number 8 [ 303.610359][ T8014] lo speed is unknown, defaulting to 1000 [ 303.641778][ T8022] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.471'. [ 303.655815][ T8014] lo speed is unknown, defaulting to 1000 [ 303.898089][ T8026] nbd: nbd0 already in use [ 303.912300][ T8026] nbd: must specify an index to disconnect [ 304.084330][ T8031] random: crng reseeded on system resumption [ 304.637483][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 304.944917][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 304.955099][ T43] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 304.966078][ T43] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 304.980890][ T43] usb 3-1: config 6 has no interface number 0 [ 305.602373][ T43] usb 3-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.613977][ T43] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.753944][ T43] usb 3-1: string descriptor 0 read error: -71 [ 305.760302][ T43] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 305.874198][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.944584][ T43] usb 3-1: can't set config #6, error -71 [ 306.063144][ T43] usb 3-1: USB disconnect, device number 4 [ 306.175681][ T918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 306.216698][ T981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 306.355732][ T918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.382031][ T918] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.393921][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 306.403529][ T981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 306.415060][ T981] usb 6-1: config 248 has an invalid interface number: 51 but max is 0 [ 306.443698][ T981] usb 6-1: config 248 has no interface number 0 [ 306.451856][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.466532][ T981] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 306.498559][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.521150][ T918] usb 1-1: config 0 descriptor?? [ 306.541067][ T981] usb 6-1: Product: syz [ 306.610005][ T918] pwc: Askey VC010 type 2 USB webcam detected. [ 306.616697][ T981] usb 6-1: Manufacturer: syz [ 306.621328][ T981] usb 6-1: SerialNumber: syz [ 306.977334][ T918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 306.985203][ T918] pwc: recv_control_msg error -32 req 02 val 2700 [ 307.011373][ T918] pwc: recv_control_msg error -32 req 02 val 2c00 [ 307.023465][ T981] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:248.51/input/input14 [ 307.050410][ T5180] bcm5974 6-1:248.51: could not read from device [ 307.105581][ T981] usb 6-1: USB disconnect, device number 2 [ 307.246206][ T918] pwc: recv_control_msg error -32 req 04 val 1300 [ 307.253641][ T918] pwc: recv_control_msg error -32 req 04 val 1400 [ 307.273793][ T918] pwc: recv_control_msg error -32 req 02 val 2000 [ 307.283662][ T918] pwc: recv_control_msg error -32 req 02 val 2100 [ 307.359594][ T918] pwc: recv_control_msg error -32 req 04 val 1500 [ 307.361998][ T8081] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.483'. [ 307.368673][ T918] pwc: recv_control_msg error -32 req 02 val 2500 [ 307.409955][ T918] pwc: recv_control_msg error -32 req 02 val 2400 [ 307.425851][ T918] pwc: recv_control_msg error -32 req 02 val 2600 [ 307.433152][ T918] pwc: recv_control_msg error -32 req 02 val 2900 [ 307.646540][ T918] pwc: recv_control_msg error -71 req 04 val 1100 [ 307.684186][ T918] pwc: recv_control_msg error -71 req 04 val 1200 [ 307.713456][ T918] pwc: Registered as video103. [ 307.736222][ T918] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 307.773360][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.486'. [ 307.812431][ T918] usb 1-1: USB disconnect, device number 4 [ 308.253960][ T30] audit: type=1800 audit(1750236321.752:3): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.486" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 310.195848][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.488'. [ 310.884648][ T8120] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 312.240051][ T8133] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.495'. [ 312.994570][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 313.003944][ T8143] netlink: 108 bytes leftover after parsing attributes in process `syz.5.497'. [ 313.200187][ T30] audit: type=1800 audit(1750236327.052:4): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.498" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 314.494129][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 314.765121][ T8166] nbd: nbd2 already in use [ 314.813616][ T8166] block nbd2: NBD_DISCONNECT [ 314.836190][ T8166] block nbd2: Send disconnect failed -32 [ 314.866268][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.884868][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.903968][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.302413][ T9] usb 2-1: config 0 descriptor?? [ 316.506347][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 317.449000][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 317.805101][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'. [ 317.864058][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 317.927817][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 318.077755][ T8194] overlayfs: failed to resolve './file0': -2 [ 318.572434][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 318.583380][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 318.593668][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 318.612903][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 318.632193][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 318.644177][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 318.659822][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 318.670194][ T8197] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.507'. [ 318.683717][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 318.690829][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 318.905447][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.958488][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 319.000931][ T9] pwc: Registered as video103. [ 319.185291][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 320.374278][ T9] usb 2-1: USB disconnect, device number 5 [ 320.852180][ T8216] nbd: nbd0 already in use [ 320.884831][ T8216] block nbd0: NBD_DISCONNECT [ 320.889522][ T8216] block nbd0: Send disconnect failed -32 [ 322.932081][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.307863][ T8222] sched: DL replenish lagged too much [ 328.375271][ T25] block nbd4: Possible stuck request ffff88802565e000: control (read@0,1024B). Runtime 30 seconds [ 328.387300][ T25] block nbd4: Possible stuck request ffff88802565e1c0: control (read@1024,1024B). Runtime 30 seconds [ 328.394217][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.399213][ T25] block nbd4: Possible stuck request ffff88802565e380: control (read@2048,1024B). Runtime 30 seconds [ 328.417119][ T25] block nbd4: Possible stuck request ffff88802565e540: control (read@3072,1024B). Runtime 30 seconds [ 328.662032][ T8245] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.519'. [ 329.704886][ T8264] netlink: 'syz.2.523': attribute type 27 has an invalid length. [ 329.724310][ C0] syz_tun: tun_net_xmit 62 [ 329.794089][ C0] syz_tun: tun_net_xmit 62 [ 330.123972][ T918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 330.254655][ C0] syz_tun: tun_net_xmit 62 [ 331.183358][ T8287] overlayfs: failed to resolve './file0': -2 [ 331.330476][ T918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.498437][ T918] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.556471][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.601346][ T918] usb 6-1: config 0 descriptor?? [ 331.635214][ T918] pwc: Askey VC010 type 2 USB webcam detected. [ 331.734721][ T8292] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.530'. [ 331.913957][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 332.047241][ T918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.097583][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 332.108567][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.533'. [ 333.249495][ T43] usb 5-1: config index 0 descriptor too short (expected 59154, got 18) [ 334.228233][ T43] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 334.240509][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 334.253324][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 334.273155][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.281400][ T43] usb 5-1: Product: syz [ 334.285876][ T43] usb 5-1: Manufacturer: syz [ 334.290609][ T43] usb 5-1: SerialNumber: syz [ 334.413937][ T43] usb 5-1: config 0 descriptor?? [ 334.444790][ T918] pwc: recv_control_msg error -71 req 02 val 2700 [ 336.032876][ T43] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 336.057395][ T918] pwc: recv_control_msg error -71 req 02 val 2c00 [ 336.067426][ T918] pwc: recv_control_msg error -71 req 04 val 1000 [ 336.120263][ T918] pwc: recv_control_msg error -71 req 04 val 1300 [ 336.178109][ T43] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 336.214281][ T918] pwc: recv_control_msg error -71 req 04 val 1400 [ 336.278354][ T43] usb 5-1: USB disconnect, device number 9 [ 336.284435][ T918] pwc: recv_control_msg error -71 req 02 val 2000 [ 336.300801][ T918] pwc: recv_control_msg error -71 req 02 val 2100 [ 336.343670][ T918] pwc: recv_control_msg error -71 req 04 val 1500 [ 336.373939][ T918] pwc: recv_control_msg error -71 req 02 val 2500 [ 336.390652][ T918] pwc: recv_control_msg error -71 req 02 val 2400 [ 336.421622][ T918] pwc: recv_control_msg error -71 req 02 val 2600 [ 336.458512][ T918] pwc: recv_control_msg error -71 req 02 val 2900 [ 336.669781][ T918] pwc: recv_control_msg error -71 req 02 val 2800 [ 336.682335][ T918] pwc: recv_control_msg error -71 req 04 val 1100 [ 336.689567][ T918] pwc: recv_control_msg error -71 req 04 val 1200 [ 336.697517][ T918] pwc: Registered as video103. [ 336.716116][ T918] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 336.760489][ T918] usb 6-1: USB disconnect, device number 3 [ 336.815684][ T8334] tmpfs: Bad value for 'mpol' [ 336.822834][ T8334] usb usb8: usbfs: process 8334 (syz.4.539) did not claim interface 0 before use [ 338.163383][ T8336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.663574][ T8356] 9pnet_fd: Insufficient options for proto=fd [ 338.678465][ T8356] siw: device registration error -23 [ 339.608211][ T8364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.063453][ T8397] tmpfs: Bad value for 'mpol' [ 344.071705][ T8397] usb usb8: usbfs: process 8397 (syz.4.557) did not claim interface 0 before use [ 345.933521][ T8420] 9pnet_fd: Insufficient options for proto=fd [ 350.760512][ T49] Bluetooth: hci2: Frame reassembly failed (-84) [ 350.977960][ T8462] fuse: Bad value for 'group_id' [ 350.994777][ T8462] fuse: Bad value for 'group_id' [ 352.795092][ T5825] Bluetooth: hci2: command 0x1003 tx timeout [ 352.801679][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 353.646212][ T8496] Mount JFS Failure: -22 [ 353.650625][ T8496] jfs_mount failed w/return code = -22 [ 354.440815][ T8488] kvm: kvm [8487]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 357.332302][ T8505] netlink: 'syz.0.580': attribute type 11 has an invalid length. [ 357.340171][ T8505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.580'. [ 357.975312][ T8518] netlink: 'syz.1.582': attribute type 11 has an invalid length. [ 357.983168][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.1.582'. [ 358.850740][ T25] block nbd4: Possible stuck request ffff88802565e000: control (read@0,1024B). Runtime 60 seconds [ 358.861524][ T25] block nbd4: Possible stuck request ffff88802565e1c0: control (read@1024,1024B). Runtime 60 seconds [ 358.872639][ T25] block nbd4: Possible stuck request ffff88802565e380: control (read@2048,1024B). Runtime 60 seconds [ 358.883764][ T25] block nbd4: Possible stuck request ffff88802565e540: control (read@3072,1024B). Runtime 60 seconds [ 359.559824][ T8536] fuse: Unknown parameter 'user_id00000000000000000000' [ 360.240773][ T7501] Bluetooth: hci2: Frame reassembly failed (-84) [ 360.586531][ T7441] Bluetooth: hci6: Frame reassembly failed (-84) [ 362.049333][ T8564] tmpfs: Bad value for 'mpol' [ 362.057469][ T8564] usb usb8: usbfs: process 8564 (syz.2.596) did not claim interface 0 before use [ 362.535245][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 362.590783][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 362.591699][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 362.758256][ T5825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.767117][ T5825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.786880][ T5825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.795513][ T5825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.803396][ T5825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.039598][ T8565] lo speed is unknown, defaulting to 1000 [ 364.074405][ T8565] lo speed is unknown, defaulting to 1000 [ 364.840166][ T5988] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 364.954054][ T51] Bluetooth: hci7: command tx timeout [ 365.112611][ T5813] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 365.507293][ T5988] usb 6-1: config 0 has no interfaces? [ 365.542725][ T5988] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 365.562073][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.587932][ T5988] usb 6-1: Product: syz [ 365.592112][ T5988] usb 6-1: Manufacturer: syz [ 365.596911][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 365.614458][ T5988] usb 6-1: SerialNumber: syz [ 365.625497][ T5813] usb 2-1: config index 0 descriptor too short (expected 59154, got 18) [ 365.645455][ T5988] usb 6-1: config 0 descriptor?? [ 365.653192][ T5813] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 365.699195][ T5813] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 365.813773][ T5813] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 365.918485][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.117932][ T8583] qrtr: Invalid version 0 [ 366.143749][ T8583] netlink: 'syz.5.599': attribute type 10 has an invalid length. [ 366.152768][ T8583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.599'. [ 366.437939][ T5813] usb 2-1: Product: syz [ 366.442337][ T5813] usb 2-1: Manufacturer: syz [ 366.447371][ T5813] usb 2-1: SerialNumber: syz [ 366.485962][ T5813] usb 2-1: config 0 descriptor?? [ 366.493409][ T8583] batadv0: entered promiscuous mode [ 366.500335][ T8583] batadv0: entered allmulticast mode [ 366.515608][ T8583] bond0: (slave batadv0): Releasing backup interface [ 366.548353][ T8583] bridge0: port 3(batadv0) entered blocking state [ 366.555867][ T8583] bridge0: port 3(batadv0) entered disabled state [ 366.608877][ T5813] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 366.802243][ T7501] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 366.812767][ T7501] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 366.872693][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 366.944735][ T5825] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 366.944784][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 367.024189][ T5825] Bluetooth: hci7: command tx timeout [ 367.396526][ T5813] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 367.413002][ T5813] usb 2-1: USB disconnect, device number 6 [ 367.833196][ T9] usb 6-1: USB disconnect, device number 4 [ 367.839948][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.840667][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.884997][ T8565] bridge_slave_0: entered allmulticast mode [ 367.899346][ T8565] bridge_slave_0: entered promiscuous mode [ 367.952332][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.993967][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.006351][ T8565] bridge_slave_1: entered allmulticast mode [ 368.047887][ T8565] bridge_slave_1: entered promiscuous mode [ 368.349925][ T8632] netlink: 44 bytes leftover after parsing attributes in process `syz.5.608'. [ 369.104054][ T5825] Bluetooth: hci7: command tx timeout [ 369.391236][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.403319][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.376145][ T8649] netlink: 'syz.1.614': attribute type 11 has an invalid length. [ 370.384224][ T8649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.614'. [ 371.183937][ T5825] Bluetooth: hci7: command tx timeout [ 371.240943][ T8565] team0: Port device team_slave_0 added [ 371.506732][ T8565] team0: Port device team_slave_1 added [ 372.224122][ T918] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 372.251503][ T30] audit: type=1800 audit(1750236386.102:5): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.619" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 372.747833][ T918] usb 6-1: config 0 has no interfaces? [ 372.769082][ T918] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 372.778808][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 372.788442][ T918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.949198][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.970922][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.712329][ T918] usb 6-1: Product: syz [ 373.716644][ T918] usb 6-1: Manufacturer: syz [ 373.721239][ T918] usb 6-1: SerialNumber: syz [ 373.737173][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.750200][ T918] usb 6-1: config 0 descriptor?? [ 373.778787][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.862489][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.946756][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.994892][ C1] syz_tun: tun_net_xmit 62 [ 374.334095][ C1] syz_tun: tun_net_xmit 62 [ 374.604407][ T8686] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'. [ 374.825792][ T8565] hsr_slave_0: entered promiscuous mode [ 374.832491][ T8565] hsr_slave_1: entered promiscuous mode [ 376.771013][ T9] usb 6-1: USB disconnect, device number 5 [ 377.104308][ T5988] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 377.113633][ T8698] Mount JFS Failure: -22 [ 377.143524][ T8565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.151706][ T8698] jfs_mount failed w/return code = -22 [ 377.167882][ T8565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.216405][ T8565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.263063][ T8565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.295069][ T5988] usb 2-1: device descriptor read/64, error -71 [ 377.625423][ T5988] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 378.125899][ T5988] usb 2-1: device descriptor read/64, error -71 [ 379.139757][ T5988] usb usb2-port1: attempt power cycle [ 379.200161][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.628641][ T5988] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 379.655541][ T5988] usb 2-1: device descriptor read/8, error -71 [ 379.944109][ T5988] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 380.581313][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.910455][ T5988] usb 2-1: device descriptor read/8, error -71 [ 380.966448][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.973604][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.006208][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.013413][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.054145][ T5988] usb usb2-port1: unable to enumerate USB device [ 381.262986][ T8565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.098063][ T8565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.725154][ T5922] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 382.826250][ T5988] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 382.894040][ T1216] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 383.779766][ T5922] usb 6-1: config 0 has no interfaces? [ 383.869894][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 383.906763][ T5988] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 383.935508][ T5922] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 383.948415][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.973295][ T5922] usb 6-1: Product: syz [ 383.977808][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.998176][ T1216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.016510][ T5922] usb 6-1: Manufacturer: syz [ 384.021759][ T1216] usb 1-1: config 0 has no interfaces? [ 384.030346][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.031044][ T5922] usb 6-1: SerialNumber: syz [ 384.047765][ T1216] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 384.069225][ T5988] usb 2-1: config 0 descriptor?? [ 384.084308][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.120294][ T5922] usb 6-1: config 0 descriptor?? [ 384.310867][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.317330][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.145629][ T5988] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 385.318382][ T1216] usb 1-1: config 0 descriptor?? [ 385.642936][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 386.667103][ T8790] sz1: rxe_newlink: already configured on lo [ 387.371587][ T8482] usb 1-1: USB disconnect, device number 5 [ 387.593953][ T1216] usb 2-1: USB disconnect, device number 11 [ 387.619037][ T8796] netlink: 292 bytes leftover after parsing attributes in process `syz.2.643'. [ 387.800053][ T5922] usb 6-1: can't set config #0, error -71 [ 387.816622][ T5922] usb 6-1: USB disconnect, device number 6 [ 388.073587][ T8565] veth0_vlan: entered promiscuous mode [ 388.135096][ T8565] veth1_vlan: entered promiscuous mode [ 388.138133][ T8811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.291777][ T8565] veth0_macvtap: entered promiscuous mode [ 388.318870][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 388.322314][ T8565] veth1_macvtap: entered promiscuous mode [ 388.342024][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 388.592987][ T24] usb 3-1: device descriptor read/64, error -71 [ 388.645480][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.671102][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.746254][ T8820] rdma_rxe: rxe_newlink: failed to add lo [ 389.426940][ T25] block nbd4: Possible stuck request ffff88802565e000: control (read@0,1024B). Runtime 90 seconds [ 389.437651][ T25] block nbd4: Possible stuck request ffff88802565e1c0: control (read@1024,1024B). Runtime 90 seconds [ 389.449341][ T25] block nbd4: Possible stuck request ffff88802565e380: control (read@2048,1024B). Runtime 90 seconds [ 389.460322][ T25] block nbd4: Possible stuck request ffff88802565e540: control (read@3072,1024B). Runtime 90 seconds [ 389.497266][ T8565] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.543987][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 389.647109][ T8565] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.680153][ T8565] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.686501][ T24] usb 3-1: device descriptor read/64, error -71 [ 389.699247][ T8565] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.898241][ T8829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.650'. [ 390.254618][ T24] usb usb3-port1: attempt power cycle [ 390.463079][ T7504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.519230][ T7504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.606699][ T7501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.629039][ T7501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.644568][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 390.686476][ T24] usb 3-1: device descriptor read/8, error -71 [ 391.083941][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 391.794078][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 391.802115][ T24] usb 3-1: device descriptor read/8, error -32 [ 392.127842][ T24] usb usb3-port1: unable to enumerate USB device [ 392.318282][ T8852] rdma_rxe: rxe_newlink: failed to add lo [ 393.294962][ T8864] fuse: Unknown parameter 'grou00000000000000000000' [ 395.196838][ T8879] random: crng reseeded on system resumption [ 395.320155][ T918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 395.503604][ T918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 395.665700][ T918] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 396.294021][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.316523][ T918] usb 2-1: config 0 descriptor?? [ 396.335350][ T918] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 396.656731][ T8892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.664'. [ 397.709739][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 399.331244][ T43] usb 2-1: USB disconnect, device number 12 [ 399.618851][ T8924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.119274][ T8929] lo speed is unknown, defaulting to 1000 [ 401.129318][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 401.227388][ T8929] lo speed is unknown, defaulting to 1000 [ 402.366097][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'. [ 402.375467][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.676'. [ 402.496342][ T8951] netlink: 40 bytes leftover after parsing attributes in process `syz.6.676'. [ 405.394940][ T8979] netlink: 44 bytes leftover after parsing attributes in process `syz.6.680'. [ 406.905967][ T8994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.310826][ T9020] lo speed is unknown, defaulting to 1000 [ 411.366852][ T9020] lo speed is unknown, defaulting to 1000 [ 411.692300][ T9039] netlink: 44 bytes leftover after parsing attributes in process `syz.5.695'. [ 412.083575][ T9044] tmpfs: Bad value for 'mpol' [ 412.091871][ T9044] usb usb8: usbfs: process 9044 (syz.1.693) did not claim interface 0 before use [ 418.795599][ T9101] tmpfs: Bad value for 'mpol' [ 418.804465][ T9101] usb usb8: usbfs: process 9101 (syz.2.706) did not claim interface 0 before use [ 419.525495][ T25] block nbd4: Possible stuck request ffff88802565e000: control (read@0,1024B). Runtime 120 seconds [ 419.536741][ T25] block nbd4: Possible stuck request ffff88802565e1c0: control (read@1024,1024B). Runtime 120 seconds [ 419.550071][ T25] block nbd4: Possible stuck request ffff88802565e380: control (read@2048,1024B). Runtime 120 seconds [ 419.561512][ T25] block nbd4: Possible stuck request ffff88802565e540: control (read@3072,1024B). Runtime 120 seconds [ 429.705313][ T9171] netlink: 'syz.1.719': attribute type 11 has an invalid length. [ 429.713125][ T9171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.719'. [ 431.178398][ T1216] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 431.603927][ T1216] usb 6-1: Using ep0 maxpacket: 8 [ 431.682815][ T1216] usb 6-1: unable to get BOS descriptor or descriptor too short [ 431.702342][ T1216] usb 6-1: config 248 has an invalid interface number: 51 but max is 0 [ 431.713016][ T1216] usb 6-1: config 248 has no interface number 0 [ 431.804149][ T1216] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 431.842556][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.948187][ T1216] usb 6-1: Product: syz [ 431.952402][ T1216] usb 6-1: Manufacturer: syz [ 432.021289][ T1216] usb 6-1: SerialNumber: syz [ 432.272898][ T1216] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:248.51/input/input18 [ 432.311444][ T5180] bcm5974 6-1:248.51: could not read from device [ 432.363523][ T5180] bcm5974 6-1:248.51: could not read from device [ 432.387166][ T1216] usb 6-1: USB disconnect, device number 7 [ 432.399330][ T5180] bcm5974 6-1:248.51: could not read from device [ 436.909846][ T9237] syz.1.733 (9237): drop_caches: 2 [ 436.927189][ T9237] syz.1.733 (9237): drop_caches: 2 [ 438.032913][ T7504] Bluetooth: hci2: Frame reassembly failed (-84) [ 438.044730][ T7504] Bluetooth: hci2: Frame reassembly failed (-84) [ 440.329004][ T5825] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 442.032251][ T9291] lo speed is unknown, defaulting to 1000 [ 442.043860][ T9291] lo speed is unknown, defaulting to 1000 [ 442.626586][ T9304] tmpfs: Bad value for 'mpol' [ 442.635016][ T9304] usb usb8: usbfs: process 9304 (syz.1.746) did not claim interface 0 before use [ 443.314063][ T5893] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 443.631322][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.693884][ T5893] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 443.703008][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.804831][ T5893] usb 3-1: config 0 descriptor?? [ 443.820404][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.829638][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.837898][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.850178][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.858505][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.886704][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 443.938260][ T9310] lo speed is unknown, defaulting to 1000 [ 443.982152][ T9310] lo speed is unknown, defaulting to 1000 [ 444.151160][ T9315] lo speed is unknown, defaulting to 1000 [ 444.244723][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 444.264751][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 444.292808][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 444.337307][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 444.357848][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 444.395170][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 444.428788][ T5893] pwc: recv_control_msg error -32 req 02 val 2000 [ 444.439011][ T5893] pwc: recv_control_msg error -32 req 02 val 2100 [ 444.479983][ T5893] pwc: recv_control_msg error -32 req 04 val 1500 [ 444.498875][ T5893] pwc: recv_control_msg error -32 req 02 val 2500 [ 444.508407][ T5893] pwc: recv_control_msg error -32 req 02 val 2400 [ 444.516232][ T5893] pwc: recv_control_msg error -32 req 02 val 2600 [ 444.523453][ T5893] pwc: recv_control_msg error -32 req 02 val 2900 [ 444.558284][ T5893] pwc: recv_control_msg error -32 req 02 val 2800 [ 445.290483][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 445.325801][ T5893] pwc: Registered as video103. [ 445.591843][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 445.600501][ T9315] lo speed is unknown, defaulting to 1000 [ 445.674733][ T5893] usb 3-1: USB disconnect, device number 9 [ 445.754559][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.762141][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.905421][ T51] Bluetooth: hci2: command tx timeout [ 447.994693][ T51] Bluetooth: hci2: command tx timeout [ 448.122676][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.5.755'. [ 449.522953][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 449.632467][ T25] block nbd4: Possible stuck request ffff88802565e000: control (read@0,1024B). Runtime 150 seconds [ 449.643412][ T25] block nbd4: Possible stuck request ffff88802565e1c0: control (read@1024,1024B). Runtime 150 seconds [ 449.655327][ T25] block nbd4: Possible stuck request ffff88802565e380: control (read@2048,1024B). Runtime 150 seconds [ 449.667125][ T25] block nbd4: Possible stuck request ffff88802565e540: control (read@3072,1024B). Runtime 150 seconds [ 450.065473][ T51] Bluetooth: hci2: command tx timeout [ 451.648075][ T9389] random: crng reseeded on system resumption [ 452.473969][ T9391] netlink: 'syz.2.762': attribute type 11 has an invalid length. [ 452.481909][ T9391] netlink: 224 bytes leftover after parsing attributes in process `syz.2.762'. [ 452.704105][ T51] Bluetooth: hci2: command tx timeout [ 454.414332][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.439996][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.464029][ T9310] bridge_slave_0: entered allmulticast mode [ 454.493258][ T9310] bridge_slave_0: entered promiscuous mode [ 454.532933][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.566115][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.590383][ T9310] bridge_slave_1: entered allmulticast mode [ 454.598481][ T9310] bridge_slave_1: entered promiscuous mode [ 454.667618][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.722203][ T5988] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 455.018358][ T5988] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 455.254622][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.344227][ T5988] usb 1-1: config 0 has no interface number 0 [ 455.353211][ T5988] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 455.366214][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.374801][ T5988] usb 1-1: Product: syz [ 455.378989][ T5988] usb 1-1: Manufacturer: syz [ 455.383712][ T5988] usb 1-1: SerialNumber: syz [ 455.402595][ T5988] usb 1-1: config 0 descriptor?? [ 456.571780][ T5988] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 456.593900][ T5988] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 456.632774][ T5988] asix 1-1:0.251: probe with driver asix failed with error -5 [ 456.635156][ T9310] team0: Port device team_slave_0 added [ 456.651302][ T9310] team0: Port device team_slave_1 added [ 456.746644][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.760822][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.794407][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.854743][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 456.990006][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.201408][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.224116][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.262978][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 457.294607][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.370805][ T9] usb 6-1: config 0 descriptor?? [ 457.392668][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.410003][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 457.522542][ T9310] hsr_slave_0: entered promiscuous mode [ 457.536463][ T9310] hsr_slave_1: entered promiscuous mode [ 457.549202][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.563911][ T9310] Cannot create hsr debugfs directory [ 457.810795][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 457.825806][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 457.843732][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 457.891251][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 457.910187][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 457.941442][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 457.963030][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 457.970597][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 457.977626][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 457.984884][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 457.991858][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 458.011936][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 458.171807][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 458.191235][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 458.536743][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 458.553972][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 458.576199][ T1216] usb 1-1: USB disconnect, device number 6 [ 458.648924][ T9] pwc: Registered as video103. [ 458.656010][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 458.735283][ T9] usb 6-1: USB disconnect, device number 8 [ 459.298803][ T9310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.729140][ T9310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 460.275770][ T9310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 460.681182][ T9310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 461.977968][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.002354][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.027274][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.035452][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.115411][ T9479] tmpfs: Bad value for 'mpol' [ 462.123320][ T9479] usb usb8: usbfs: process 9479 (syz.2.777) did not claim interface 0 before use [ 462.838544][ T9477] kvm: kvm [9475]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xcb [ 462.886009][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.893180][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.915327][ T9477] kvm: kvm [9475]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x87b [ 463.060516][ T9310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 463.088445][ T9310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.334005][ T9488] netlink: 'syz.1.779': attribute type 11 has an invalid length. [ 463.341844][ T9488] netlink: 224 bytes leftover after parsing attributes in process `syz.1.779'. [ 464.702150][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.747124][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 464.905996][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 464.938222][ T9] usb 6-1: config 0 has no interface number 0 [ 464.979472][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 465.029814][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.060959][ T9] usb 6-1: Product: syz [ 465.072904][ T9] usb 6-1: Manufacturer: syz [ 465.086324][ T9] usb 6-1: SerialNumber: syz [ 465.117032][ T9] usb 6-1: config 0 descriptor?? [ 466.076827][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 466.123965][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 466.135257][ T9] asix 6-1:0.251: probe with driver asix failed with error -5 [ 466.482011][ T9524] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 467.542129][ T9526] syz.2.781 (9526): drop_caches: 2 [ 467.788554][ T9310] veth0_vlan: entered promiscuous mode [ 467.853799][ T9310] veth1_vlan: entered promiscuous mode [ 468.014427][ T9310] veth0_macvtap: entered promiscuous mode [ 468.075260][ T9310] veth1_macvtap: entered promiscuous mode [ 468.267781][ T9] usb 6-1: USB disconnect, device number 9 [ 468.451287][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.111579][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.157226][ T9310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.180711][ T9310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.190215][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 469.222202][ T9310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.237409][ T9310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.377361][ T9] usb 1-1: no configurations [ 469.383850][ T9] usb 1-1: can't read configurations, error -22 [ 469.453946][ T1216] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 469.545791][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 469.639947][ T1216] usb 6-1: Using ep0 maxpacket: 8 [ 469.666816][ T1216] usb 6-1: unable to get BOS descriptor or descriptor too short [ 469.726558][ T9] usb 1-1: no configurations [ 469.731225][ T9] usb 1-1: can't read configurations, error -22 [ 469.758281][ T1216] usb 6-1: config 248 has an invalid interface number: 51 but max is 0 [ 469.805056][ T1216] usb 6-1: config 248 has no interface number 0 [ 469.819090][ T9] usb usb1-port1: attempt power cycle [ 469.831251][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.865574][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.918261][ T1216] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 469.933898][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.943873][ T1216] usb 6-1: Product: syz [ 469.948076][ T1216] usb 6-1: Manufacturer: syz [ 469.952774][ T1216] usb 6-1: SerialNumber: syz [ 470.089283][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.228953][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.267284][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 470.658070][ T1216] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:248.51/input/input21 [ 470.700571][ T9] usb 1-1: no configurations [ 470.761739][ T9] usb 1-1: can't read configurations, error -22 [ 470.815713][ T5180] bcm5974 6-1:248.51: could not read from device [ 470.862517][ T5180] bcm5974 6-1:248.51: could not read from device [ 470.909855][ T1216] usb 6-1: USB disconnect, device number 10 [ 470.932814][ T5180] bcm5974 6-1:248.51: could not read from device [ 470.973998][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 471.012468][ T5180] bcm5974 6-1:248.51: could not read from device [ 473.342544][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 473.526975][ T30] audit: type=1800 audit(1750236487.382:6): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.799" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 474.496756][ T9594] tmpfs: Bad value for 'mpol' [ 474.502686][ T9594] usb usb8: usbfs: process 9594 (syz.7.800) did not claim interface 0 before use [ 474.620669][ T10] syz_tun: tun_net_xmit 90 [ 474.678382][ T10] syz_tun: tun_net_xmit 90 [ 474.835236][ T9603] nbd2: detected capacity change from 0 to 63 [ 474.859409][ T9607] block nbd2: NBD_DISCONNECT [ 474.916907][ T9607] block nbd2: Disconnected due to user request. [ 474.958562][ T9607] block nbd2: shutting down sockets [ 475.043276][ C0] blk_print_req_error: 138 callbacks suppressed [ 475.043299][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.058739][ C0] buffer_io_error: 138 callbacks suppressed [ 475.058751][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 475.072488][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.081601][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 475.089408][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.098490][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 475.106304][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.115434][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 475.154067][ T5844] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.163177][ T5844] Buffer I/O error on dev nbd2, logical block 0, async page read [ 475.308448][ T5844] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.391738][ T5844] Buffer I/O error on dev nbd2, logical block 1, async page read [ 475.572471][ T5844] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.604059][ T5893] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 475.640813][ T5844] Buffer I/O error on dev nbd2, logical block 2, async page read [ 475.640821][ T9] usb 1-1: device descriptor read/8, error -71 [ 475.698209][ T5844] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.746845][ T9] usb usb1-port1: unable to enumerate USB device [ 475.812323][ T5844] Buffer I/O error on dev nbd2, logical block 3, async page read [ 475.895955][ T5844] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.963687][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.991271][ T9627] syz.5.805 (9627): drop_caches: 2 [ 475.998341][ T9627] syz.5.805 (9627): drop_caches: 2 [ 476.099034][ T5844] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.208306][ T5893] usb 8-1: config 0 has no interfaces? [ 476.295541][ T5844] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.415069][ T5893] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.544341][ T5844] Buffer I/O error on dev nbd2, logical block 1, async page read [ 476.809980][ T9625] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 476.916976][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.962923][ T5893] usb 8-1: config 0 descriptor?? [ 476.981698][ T5844] ldm_validate_partition_table(): Disk read failed. [ 477.035119][ T5844] Dev nbd2: unable to read RDB block 0 [ 477.113183][ T5844] nbd2: unable to read partition table [ 477.183167][ T5844] ldm_validate_partition_table(): Disk read failed. [ 477.249876][ T5844] Dev nbd2: unable to read RDB block 0 [ 477.652249][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 477.778353][ T5844] nbd2: unable to read partition table [ 478.176366][ T6117] Bluetooth: hci8: Frame reassembly failed (-84) [ 479.198067][ T1216] usb 8-1: USB disconnect, device number 2 [ 479.791347][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 479.797722][ T5841] Bluetooth: hci6: command 0x1003 tx timeout [ 479.813913][ T25] block nbd4: Possible stuck request ffff88802565e000: control (read@0,1024B). Runtime 180 seconds [ 479.824884][ T25] block nbd4: Possible stuck request ffff88802565e1c0: control (read@1024,1024B). Runtime 180 seconds [ 479.835908][ T25] block nbd4: Possible stuck request ffff88802565e380: control (read@2048,1024B). Runtime 180 seconds [ 479.850760][ T25] block nbd4: Possible stuck request ffff88802565e540: control (read@3072,1024B). Runtime 180 seconds [ 479.891992][ T66] Bluetooth: hci9: Frame reassembly failed (-84) [ 480.229927][ T5825] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 480.236814][ T51] Bluetooth: hci8: command 0x1003 tx timeout [ 480.622784][ T9672] syz.2.815 (9672): drop_caches: 2 [ 480.632125][ T9672] syz.2.815 (9672): drop_caches: 2 [ 481.154165][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 481.593955][ T5830] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 481.607728][ T5830] Bluetooth: hci5: unexpected event for opcode 0x200c [ 482.003232][ T5893] usb 2-1: no configurations [ 482.016782][ T5893] usb 2-1: can't read configurations, error -22 [ 482.275488][ T5893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 482.506320][ T5893] usb 2-1: no configurations [ 482.510990][ T5893] usb 2-1: can't read configurations, error -22 [ 482.565223][ T5893] usb usb2-port1: attempt power cycle [ 482.659285][ T9708] kvm: pic: non byte write [ 482.954161][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 483.006921][ T5893] usb 2-1: no configurations [ 483.011639][ T5893] usb 2-1: can't read configurations, error -22 [ 483.195037][ T5893] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 483.254220][ T5893] usb 2-1: no configurations [ 483.258963][ T5893] usb 2-1: can't read configurations, error -22 [ 483.439248][ T5893] usb usb2-port1: unable to enumerate USB device [ 486.138794][ T1216] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 486.301245][ T1216] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 486.503040][ T1216] usb 6-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 486.574077][ T1216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.624906][ T1216] usb 6-1: config 0 descriptor?? [ 486.692478][ T1216] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 488.783977][ T5825] Bluetooth: hci7: command 0x0406 tx timeout [ 489.736517][ T1216] usb 6-1: USB disconnect, device number 11 [ 489.973017][ T9787] nbd0: detected capacity change from 0 to 63 [ 490.017801][ T9790] block nbd0: NBD_DISCONNECT [ 490.054067][ T9790] block nbd0: Disconnected due to user request. [ 490.060847][ T9790] block nbd0: shutting down sockets [ 490.181158][ C0] blk_print_req_error: 138 callbacks suppressed [ 490.181174][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.196583][ C0] buffer_io_error: 138 callbacks suppressed [ 490.196594][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 490.210378][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.219443][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 490.227234][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.236310][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 490.244113][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.253135][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 490.272390][ T5844] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.364626][ T5844] Buffer I/O error on dev nbd0, logical block 0, async page read [ 490.406017][ T5844] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.421882][ T5844] Buffer I/O error on dev nbd0, logical block 1, async page read [ 490.430319][ T5844] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.613387][ T5844] Buffer I/O error on dev nbd0, logical block 2, async page read [ 490.621714][ T5844] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.631827][ T5844] Buffer I/O error on dev nbd0, logical block 3, async page read [ 490.640040][ T5844] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.649371][ T5844] Buffer I/O error on dev nbd0, logical block 0, async page read [ 490.773968][ T5844] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.783600][ T5844] Buffer I/O error on dev nbd0, logical block 1, async page read [ 490.794823][ T5844] ldm_validate_partition_table(): Disk read failed. [ 490.803148][ T5844] Dev nbd0: unable to read RDB block 0 [ 490.811093][ T5844] nbd0: unable to read partition table [ 490.814545][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 491.147895][ T7501] Bluetooth: hci6: Frame reassembly failed (-84) [ 491.310562][ T5844] ldm_validate_partition_table(): Disk read failed. [ 491.364686][ T5844] Dev nbd0: unable to read RDB block 0 [ 491.376765][ T5844] nbd0: unable to read partition table [ 491.432685][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.474667][ T5893] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 491.507905][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.553646][ T5893] usb 8-1: config 0 descriptor?? [ 491.601670][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 492.029956][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 492.044912][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 492.063121][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 492.078772][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 492.711445][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 492.864519][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 492.944365][ T5893] pwc: recv_control_msg error -32 req 02 val 2000 [ 493.005165][ T5893] pwc: recv_control_msg error -32 req 02 val 2100 [ 493.023359][ T5893] pwc: recv_control_msg error -32 req 04 val 1500 [ 493.031554][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 493.064596][ T5893] pwc: recv_control_msg error -32 req 02 val 2500 [ 493.079844][ T5893] pwc: recv_control_msg error -32 req 02 val 2400 [ 493.087736][ T5893] pwc: recv_control_msg error -32 req 02 val 2600 [ 493.097807][ T5893] pwc: recv_control_msg error -32 req 02 val 2900 [ 493.105521][ T5893] pwc: recv_control_msg error -32 req 02 val 2800 [ 493.114563][ T5893] pwc: recv_control_msg error -32 req 04 val 1100 [ 493.121444][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 493.149632][ T5893] pwc: Registered as video103. [ 493.157268][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input22 [ 493.238753][ T5893] usb 8-1: USB disconnect, device number 3 [ 494.303919][ T1216] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 495.103704][ T1216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 495.167976][ T1216] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 495.192170][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.222580][ T1216] usb 3-1: config 0 descriptor?? [ 495.253272][ T1216] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 495.473897][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 495.644052][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 495.654871][ T24] usb 1-1: no configurations [ 495.669880][ T24] usb 1-1: can't read configurations, error -22 [ 496.348848][ T9865] 9pnet_fd: Insufficient options for proto=fd [ 496.365124][ T9865] siw: device registration error -23 [ 496.561716][ T9868] netlink: 52 bytes leftover after parsing attributes in process `syz.2.853'. [ 496.599726][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 496.894585][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 497.311112][ T24] usb 1-1: no configurations [ 497.325463][ T24] usb 1-1: can't read configurations, error -22 [ 497.340624][ T24] usb usb1-port1: attempt power cycle [ 497.479333][ T9874] syz.7.861 (9874): drop_caches: 2 [ 497.491056][ T9874] syz.7.861 (9874): drop_caches: 2 [ 497.714723][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 497.755709][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 497.771881][ T24] usb 1-1: no configurations [ 497.786827][ T24] usb 1-1: can't read configurations, error -22 [ 497.934061][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 498.054690][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 498.161743][ T24] usb 1-1: no configurations [ 498.178949][ T24] usb 1-1: can't read configurations, error -22 [ 498.203383][ T24] usb usb1-port1: unable to enumerate USB device [ 498.479166][ T5922] usb 3-1: USB disconnect, device number 10 [ 498.924980][ T1216] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 499.361910][ T1216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.382685][ T1216] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 499.555811][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.032556][ T1216] usb 2-1: config 0 descriptor?? [ 500.148556][ T1216] pwc: Askey VC010 type 2 USB webcam detected. [ 500.610153][ T9919] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 501.381431][ T1216] pwc: recv_control_msg error -32 req 02 val 2b00 [ 501.564088][ T1216] pwc: recv_control_msg error -32 req 02 val 2700 [ 501.586380][ T1216] pwc: recv_control_msg error -32 req 02 val 2c00 [ 501.601106][ T1216] pwc: recv_control_msg error -32 req 04 val 1000 [ 501.612326][ T1216] pwc: recv_control_msg error -32 req 04 val 1300 [ 501.830662][ T1216] pwc: recv_control_msg error -32 req 04 val 1400 [ 501.855359][ T1216] pwc: recv_control_msg error -32 req 02 val 2000 [ 501.894712][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 501.908489][ T1216] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.952695][ T1216] pwc: recv_control_msg error -32 req 04 val 1500 [ 501.986462][ T1216] pwc: recv_control_msg error -32 req 02 val 2500 [ 502.010473][ T1216] pwc: recv_control_msg error -32 req 02 val 2400 [ 502.032274][ T1216] pwc: recv_control_msg error -32 req 02 val 2600 [ 502.072926][ T1216] pwc: recv_control_msg error -32 req 02 val 2900 [ 502.094669][ T1216] pwc: recv_control_msg error -32 req 02 val 2800 [ 502.123657][ T1216] pwc: recv_control_msg error -32 req 04 val 1100 [ 502.182317][ T1216] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.234180][ T1216] pwc: Registered as video103. [ 502.438383][ T1216] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 503.128233][ T1216] usb 2-1: USB disconnect, device number 17 [ 503.400724][ T9938] vivid-002: disconnect [ 503.553995][ T24] vivid-002: reconnect [ 503.769326][ T9947] netlink: 'syz.1.876': attribute type 10 has an invalid length. [ 503.882181][ T9947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.903992][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 503.992679][ T9947] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 505.042411][ T9975] lo speed is unknown, defaulting to 1000 [ 505.126478][ T9975] lo speed is unknown, defaulting to 1000 [ 507.204523][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.210992][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.676266][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 507.754045][T10006] nbd7: detected capacity change from 0 to 63 [ 507.832682][ T31] INFO: task syz.4.560:8405 blocked for more than 143 seconds. [ 507.843237][T10008] block nbd7: NBD_DISCONNECT SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 507.912834][T10008] block nbd7: Disconnected due to user request. [ 507.922629][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 507.959198][ T30] audit: type=1800 audit(1750236521.812:7): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.892" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 507.971222][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.045857][T10008] block nbd7: shutting down sockets [ 508.177116][ C1] blk_print_req_error: 138 callbacks suppressed [ 508.177141][ C1] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.192673][ C1] buffer_io_error: 138 callbacks suppressed [ 508.192692][ C1] Buffer I/O error on dev nbd7, logical block 0, async page read [ 508.213894][ C1] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.222999][ C1] Buffer I/O error on dev nbd7, logical block 1, async page read [ 508.230805][ C1] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.239893][ C1] Buffer I/O error on dev nbd7, logical block 2, async page read [ 508.247726][ C1] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.256791][ C1] Buffer I/O error on dev nbd7, logical block 3, async page read [ 508.322860][ T5844] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.453876][ T31] task:syz.4.560 state:D stack:25064 pid:8405 tgid:8403 ppid:5824 task_flags:0x400140 flags:0x00004006 [ 508.504158][ T5844] Buffer I/O error on dev nbd7, logical block 0, async page read [ 508.534712][ T31] Call Trace: [ 508.538061][ T31] [ 508.541022][ T31] __schedule+0x16a2/0x4cb0 [ 508.600119][ T5844] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.610481][ T31] ? schedule+0x165/0x360 [ 508.636435][ T31] ? __pfx___schedule+0x10/0x10 [ 508.641363][ T31] ? schedule+0x91/0x360 [ 508.653892][ T5844] Buffer I/O error on dev nbd7, logical block 1, async page read [ 508.661803][ T5844] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.684190][ T31] schedule+0x165/0x360 [ 508.704086][ T31] io_schedule+0x81/0xe0 [ 508.708358][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 508.713656][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 508.734831][ T5844] Buffer I/O error on dev nbd7, logical block 2, async page read [ 508.753818][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 508.783805][ T31] ? free_pages_prepare+0x3f2/0xa30 [ 508.785071][ T5844] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.789484][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 508.813793][ T5844] Buffer I/O error on dev nbd7, logical block 3, async page read [ 508.821712][ T5844] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.824812][ T31] migrate_pages_batch+0x13a6/0x2830 [ 508.864045][ T31] ? __pfx_compaction_free+0x10/0x10 [ 508.869391][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 508.873830][ T5844] Buffer I/O error on dev nbd7, logical block 0, async page read [ 508.882709][ T5844] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 508.884363][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 508.914810][ T5844] Buffer I/O error on dev nbd7, logical block 1, async page read [ 508.923987][ T31] ? __lock_acquire+0xab9/0xd20 [ 508.928917][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 508.930732][ T5844] ldm_validate_partition_table(): Disk read failed. [ 508.944276][ T31] migrate_pages+0x2038/0x2930 [ 508.949115][ T31] ? __pfx_compaction_free+0x10/0x10 [ 508.969206][ T5844] Dev nbd7: unable to read RDB block 0 [ 508.972033][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 508.980540][ T31] ? __pfx___might_resched+0x10/0x10 [ 508.986123][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 508.986325][ T5844] nbd7: unable to read partition table [ 508.991255][ T31] ? isolate_movable_page+0x479/0x790 [ 509.002706][ T31] ? rcu_is_watching+0x15/0xb0 [ 509.007767][ T31] ? isolate_migratepages_block+0x33cd/0x3a30 [ 509.014223][ T31] compact_zone+0x23f4/0x4ad0 [ 509.019766][ T31] ? __pfx_compact_zone+0x10/0x10 [ 509.029310][ T5844] ldm_validate_partition_table(): Disk read failed. [ 509.029872][ T31] sysctl_compaction_handler+0x3a4/0x7b0 [ 509.041869][ T31] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 509.050444][ T5844] Dev nbd7: unable to read RDB block 0 [ 509.056928][ T31] ? rcu_is_watching+0x15/0xb0 [ 509.063273][ T5844] nbd7: unable to read partition table [ 509.063933][ T31] ? proc_sys_call_handler+0x3f2/0x7c0 [ 509.086437][ T31] ? trace_kmalloc+0x1f/0xd0 [ 509.091074][ T31] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 509.101375][ T31] ? proc_sys_call_handler+0x3f2/0x7c0 [ 509.110555][ T31] proc_sys_call_handler+0x509/0x7c0 [ 509.116268][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 509.122131][ T31] ? __asan_memset+0x22/0x50 [ 509.126826][ T31] iter_file_splice_write+0x937/0x1000 [ 509.132362][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 509.138412][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 509.144023][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 509.151073][ T31] direct_splice_actor+0x101/0x160 [ 509.156351][ T31] splice_direct_to_actor+0x5a5/0xcc0 [ 509.161766][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 509.167563][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 509.173508][ T31] do_splice_direct+0x181/0x270 [ 509.178472][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 509.184237][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 509.190179][ T31] ? rw_verify_area+0x258/0x650 [ 509.195178][ T31] do_sendfile+0x4da/0x7e0 [ 509.199643][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 509.204659][ T31] __se_sys_sendfile64+0xd9/0x190 [ 509.209735][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 509.215697][ T31] ? rcu_is_watching+0x15/0xb0 [ 509.220509][ T31] ? do_syscall_64+0xbe/0x3b0 [ 509.225584][ T31] do_syscall_64+0xfa/0x3b0 [ 509.230122][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.235466][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.241556][ T31] ? clear_bhb_loop+0x60/0xb0 [ 509.246289][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.253324][ T31] RIP: 0033:0x7f23f8b8e929 [ 509.257971][ T31] RSP: 002b:00007f23f99a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 509.266705][ T31] RAX: ffffffffffffffda RBX: 00007f23f8db5fa0 RCX: 00007f23f8b8e929 [ 509.274883][ T31] RDX: 0000200000000180 RSI: 0000000000000007 RDI: 0000000000000008 [ 509.282894][ T31] RBP: 00007f23f8c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 509.290926][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 509.299023][ T31] R13: 0000000000000000 R14: 00007f23f8db5fa0 R15: 00007ffc7ab8f728 [ 509.307098][ T31] [ 509.310180][ T31] [ 509.310180][ T31] Showing all locks held in the system: [ 509.318008][ T31] 1 lock held by khungtaskd/31: [ 509.363854][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 509.403951][ T31] 3 locks held by kworker/0:2/1216: [ 509.409286][ T31] 2 locks held by getty/5586: [ 509.433798][ T31] #0: ffff888030a7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 509.443642][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 509.495943][ T31] 1 lock held by udevd/6426: [ 509.500578][ T31] #0: ffff8880254ea358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 509.557599][ T31] 1 lock held by syz.4.560/8405: [ 509.562619][ T31] #0: ffff8880329fa428 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 509.603877][ T31] 1 lock held by syz.6.721/9162: [ 509.609000][ T31] #0: ffff8880254ea358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 509.660047][ T31] 2 locks held by syz.5.883/9975: [ 509.683872][ T31] #0: ffffffff8f4f1410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 509.694165][ T31] #1: ffffffff8f4fe008 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 509.713880][ T31] 1 lock held by syz.2.890/9999: [ 509.718880][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 509.729299][ T31] 1 lock held by syz.1.892/10010: [ 509.734755][ T31] 1 lock held by dhcpcd/10012: [ 509.739548][ T31] #0: ffff888034090208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 509.783830][ T31] 2 locks held by dhcpcd/10013: [ 509.788742][ T31] #0: ffff888058834a08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 509.813837][ T31] #1: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 509.825349][ T31] [ 509.827705][ T31] ============================================= [ 509.827705][ T31] [ 509.837151][ T31] NMI backtrace for cpu 0 [ 509.837174][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 509.837198][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.837210][ T31] Call Trace: [ 509.837218][ T31] [ 509.837226][ T31] dump_stack_lvl+0x189/0x250 [ 509.837259][ T31] ? __wake_up_klogd+0xd9/0x110 [ 509.837284][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.837313][ T31] ? __pfx__printk+0x10/0x10 [ 509.837347][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 509.837375][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 509.837397][ T31] ? _printk+0xcf/0x120 [ 509.837421][ T31] ? __pfx__printk+0x10/0x10 [ 509.837442][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 509.837470][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 509.837497][ T31] watchdog+0xfee/0x1030 [ 509.837524][ T31] ? watchdog+0x1de/0x1030 [ 509.837556][ T31] kthread+0x70e/0x8a0 [ 509.837581][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.837604][ T31] ? __pfx_kthread+0x10/0x10 [ 509.837626][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 509.837652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.837678][ T31] ? __pfx_kthread+0x10/0x10 [ 509.837700][ T31] ret_from_fork+0x3f9/0x770 [ 509.837729][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 509.837761][ T31] ? __switch_to_asm+0x39/0x70 [ 509.837779][ T31] ? __switch_to_asm+0x33/0x70 [ 509.837809][ T31] ? __pfx_kthread+0x10/0x10 [ 509.837830][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.837862][ T31] [ 509.837869][ T31] Sending NMI from CPU 0 to CPUs 1: [ 510.013301][ C1] NMI backtrace for cpu 1 [ 510.013317][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 510.013338][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.013349][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 510.013379][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 510.013394][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 510.013409][ C1] RAX: 0ec7a4618252f100 RBX: ffffffff81975c68 RCX: 0ec7a4618252f100 [ 510.013423][ C1] RDX: 0000000000000001 RSI: ffffffff8d96e7f3 RDI: ffffffff8be1b800 [ 510.013435][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 510.013447][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fe3f0 [ 510.013460][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad3b40 [ 510.013471][ C1] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 510.013485][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.013496][ C1] CR2: 000055f732ccb660 CR3: 0000000031e3e000 CR4: 00000000003526f0 [ 510.013512][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 510.013521][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 510.013531][ C1] Call Trace: [ 510.013538][ C1] [ 510.013544][ C1] default_idle+0x13/0x20 [ 510.013559][ C1] default_idle_call+0x74/0xb0 [ 510.013576][ C1] do_idle+0x1e8/0x510 [ 510.013617][ C1] ? __pfx_do_idle+0x10/0x10 [ 510.013637][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.013668][ C1] cpu_startup_entry+0x44/0x60 [ 510.013690][ C1] start_secondary+0x101/0x110 [ 510.013708][ C1] common_startup_64+0x13e/0x147 [ 510.013731][ C1] [ 510.083165][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 510.083194][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 510.083219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.083236][ T31] Call Trace: [ 510.083245][ T31] [ 510.083255][ T31] dump_stack_lvl+0x99/0x250 [ 510.083293][ T31] ? __asan_memcpy+0x40/0x70 [ 510.083315][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.083346][ T31] ? __pfx__printk+0x10/0x10 [ 510.083380][ T31] panic+0x2db/0x790 [ 510.083419][ T31] ? __pfx_panic+0x10/0x10 [ 510.083447][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 510.083473][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 510.083510][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 510.083536][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 510.083572][ T31] watchdog+0x102d/0x1030 [ 510.083600][ T31] ? watchdog+0x1de/0x1030 [ 510.083636][ T31] kthread+0x70e/0x8a0 [ 510.083661][ T31] ? __pfx_watchdog+0x10/0x10 [ 510.083686][ T31] ? __pfx_kthread+0x10/0x10 [ 510.083711][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.083744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.083772][ T31] ? __pfx_kthread+0x10/0x10 [ 510.083796][ T31] ret_from_fork+0x3f9/0x770 [ 510.083826][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 510.083861][ T31] ? __switch_to_asm+0x39/0x70 [ 510.083881][ T31] ? __switch_to_asm+0x33/0x70 [ 510.083901][ T31] ? __pfx_kthread+0x10/0x10 [ 510.083923][ T31] ret_from_fork_asm+0x1a/0x30 [ 510.083960][ T31] [ 510.349436][ T31] Kernel Offset: disabled [ 510.353800][ T31] Rebooting in 86400 seconds..