last executing test programs: 6m37.935123477s ago: executing program 4 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) read(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) 6m35.330201592s ago: executing program 4 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0xa42e0900, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03"], 0x50}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="02090000020000000000ee2f2a8c0000"], 0x10}}, 0x0) listen(r1, 0x8) listen(r1, 0x400) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 6m30.181613901s ago: executing program 4 (id=147): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 6m27.366250129s ago: executing program 4 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x70, 0x0, &(0x7f0000000440)="ffb667cfd3201452a5c79b784bcead87bfe7494e4c5097b6dcba954cc16968f32fb2c5f065bf069a04cccff30567c63ff682caf1d1306b3d5ddac9f624d92d440112d90ea7231c35659fcab1a603a4f0af61f42992161cc4b21caf5cef0b472ea329f058aa7f160cc5d57e6482288aa0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r3}, 0x8) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @val=@netkit}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, 0x0, 0x0) clock_gettime(0x4, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) 6m24.191849108s ago: executing program 4 (id=156): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) r6 = io_uring_setup(0x4577, 0x0) r7 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r6}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000000)={r7}, 0x1) 6m22.210194668s ago: executing program 4 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munlockall() mount$fuse(0x0, 0x0, 0x0, 0x802043, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) munlockall() r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 6m5.521691575s ago: executing program 32 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munlockall() mount$fuse(0x0, 0x0, 0x0, 0x802043, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) munlockall() r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 1m55.938171603s ago: executing program 0 (id=915): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) open(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0xc0003, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0xd000}, {r1, 0x4018}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00des none\x00'], 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) read$watch_queue(r3, &(0x7f0000000540)=""/4096, 0x1000) r4 = gettid() fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001700)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001780)="8c4a9cff497b9cdaf9d504d153e5adcbd9ac975419c349e65e8c6234d08f23df10b3df566db8342a4ee26a2d8f5e50c6cdc3ceb8495690a9364a12938f1171b6ea8513750424c93827357d7bba8ce3e6fdd5ac24330d3e66ea8639d9f1aa4cb93f460dd33f9c0b550f161bfaa7632b2ae73de4622c8161b71f82245e8f8f801b56d5035081cb020afe2513adfb5953e7b0391c96b869b0b708e08837fd51900348a817b324bbdc0e5566ce52c0b53f002da767b3fe3ad6d4e3b6e3fb3a0177e997b74be3f61e5dade31a268fc40245981e007cdd9e8ede1af1ecb6b4373297", 0xdf}, 0x68) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB], 0x10) 1m53.930286607s ago: executing program 0 (id=919): mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300), 0x100) 1m53.608120234s ago: executing program 0 (id=922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) read(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 1m52.271895513s ago: executing program 0 (id=928): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) open(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0xc0003, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0xd000}, {r1, 0x4018}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00des none\x00'], 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) read$watch_queue(r3, &(0x7f0000000540)=""/4096, 0x1000) r4 = gettid() fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001700)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001780)="8c4a9cff497b9cdaf9d504d153e5adcbd9ac975419c349e65e8c6234d08f23df10b3df566db8342a4ee26a2d8f5e50c6cdc3ceb8495690a9364a12938f1171b6ea8513750424c93827357d7bba8ce3e6fdd5ac24330d3e66ea8639d9f1aa4cb93f460dd33f9c0b550f161bfaa7632b2ae73de4622c8161b71f82245e8f8f801b56d5035081cb020afe2513adfb5953e7b0391c96b869b0b708e08837fd51900348a817b324bbdc0e5566ce52c0b53f002da767b3fe3ad6d4e3b6e3fb3a0177e997b74be3f61e5dade31a268fc40245981e007cdd9e8ede1af1ecb6b4373297", 0xdf}, 0x68) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB], 0x10) 1m51.267123976s ago: executing program 0 (id=932): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m51.031324204s ago: executing program 0 (id=935): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) r4 = io_uring_setup(0x4577, 0x0) r5 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r4}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000000)={r5}, 0x1) 1m35.182429233s ago: executing program 33 (id=935): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) r4 = io_uring_setup(0x4577, 0x0) r5 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r4}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000000)={r5}, 0x1) 1m6.586040127s ago: executing program 2 (id=1083): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r0, 0x540a, 0x0) ppoll(&(0x7f0000001300)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000022c0)={0x6, 0x2, 0x4, 0x1000, 0x4, "18c311a81d282e428addbc2d60ec167c85bdb6", 0x7ff, 0x7fffffff}) 1m5.536844336s ago: executing program 2 (id=1088): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000000)={@local, @link_local, @void, {@generic={0x6004, "89fa669db345f7403f11cff3316c5858689097bc2d4b28626d6af67c3077ccf1430e9484f8ac7c6e96d1f72f561a51307fc3083c27fda5d482c09dc889cbf42826c0c68963fd8aa901a253167c29a3523ee64c64bf0afffa99881c6f50"}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x2) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000180008004510001c0066"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x0, 0x0, r2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m4.257189835s ago: executing program 2 (id=1093): r0 = syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x20, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 59.550358856s ago: executing program 5 (id=1107): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) close(r0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x48141, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 59.32210417s ago: executing program 5 (id=1109): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 59.07424854s ago: executing program 2 (id=1110): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) read(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 57.661419367s ago: executing program 2 (id=1112): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) open(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0xc0003, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0xd000}, {r1, 0x4018}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00des none\x00'], 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) read$watch_queue(r3, &(0x7f0000000540)=""/4096, 0x1000) r4 = gettid() fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001700)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001780)="8c4a9cff497b9cdaf9d504d153e5adcbd9ac975419c349e65e8c6234d08f23df10b3df566db8342a4ee26a2d8f5e50c6cdc3ceb8495690a9364a12938f1171b6ea8513750424c93827357d7bba8ce3e6fdd5ac24330d3e66ea8639d9f1aa4cb93f460dd33f9c0b550f161bfaa7632b2ae73de4622c8161b71f82245e8f8f801b56d5035081cb020afe2513adfb5953e7b0391c96b869b0b708e08837fd51900348a817b324bbdc0e5566ce52c0b53f002da767b3fe3ad6d4e3b6e3fb3a0177e997b74be3f61e5dade31a268fc40245981e007cdd9e8ede1af1ecb6b4373297", 0xdf}, 0x68) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB], 0x10) 53.350124407s ago: executing program 2 (id=1114): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 48.865475079s ago: executing program 5 (id=1116): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 38.986283752s ago: executing program 5 (id=1122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r2, &(0x7f0000019300)='pagemap\x00') r5 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76fa6066a0921b176d5b3b9fc3704ae2a6b1d14c5cbf730d77a805e7f8023d7fed9c83e52ce2a351e62f6ea4fded62b6755c218c69f00775d69187b9", 0x68, r5) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='x', 0x1}], 0x1}, 0x0) close(0x3) 37.143200452s ago: executing program 34 (id=1114): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 36.983105149s ago: executing program 5 (id=1126): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000000)={@local, @link_local, @void, {@generic={0x6004, "89fa669db345f7403f11cff3316c5858689097bc2d4b28626d6af67c3077ccf1430e9484f8ac7c6e96d1f72f561a51307fc3083c27fda5d482c09dc889cbf42826c0c68963fd8aa901a253167c29a3523ee64c64bf0afffa99881c6f50"}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x2) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000180008004510001c0066"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x0, 0x0, r2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 32.336675747s ago: executing program 3 (id=1128): r0 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000800)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 31.623856187s ago: executing program 3 (id=1130): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) openat$incfs(r0, 0x0, 0x0, 0x130) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 30.523754778s ago: executing program 3 (id=1132): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x20, 0x8, 0x5, "806f9873ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.29492578s ago: executing program 1 (id=1135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)) 28.138315523s ago: executing program 1 (id=1136): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) open(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0xc0003, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0xd000}, {r1, 0x4018}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00des none\x00'], 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x6) read$watch_queue(r3, &(0x7f0000000540)=""/4096, 0x1000) r4 = gettid() fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001700)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001780)="8c4a9cff497b9cdaf9d504d153e5adcbd9ac975419c349e65e8c6234d08f23df10b3df566db8342a4ee26a2d8f5e50c6cdc3ceb8495690a9364a12938f1171b6ea8513750424c93827357d7bba8ce3e6fdd5ac24330d3e66ea8639d9f1aa4cb93f460dd33f9c0b550f161bfaa7632b2ae73de4622c8161b71f82245e8f8f801b56d5035081cb020afe2513adfb5953e7b0391c96b869b0b708e08837fd51900348a817b324bbdc0e5566ce52c0b53f002da767b3fe3ad6d4e3b6e3fb3a0177e997b74be3f61e5dade31a268fc40245981e007cdd9e8ede1af1ecb6b4373297", 0xdf}, 0x68) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB], 0x10) 24.232566238s ago: executing program 1 (id=1137): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000900)={0x0, 0x8, 0x2, "2402"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.218942762s ago: executing program 3 (id=1138): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009f, 0x0, 0x3}]}) 24.174113115s ago: executing program 5 (id=1139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, 0x54}}, 0x0) 23.960912621s ago: executing program 3 (id=1140): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x28}) 23.734729411s ago: executing program 3 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b"]) 23.460793737s ago: executing program 1 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 19.012617705s ago: executing program 1 (id=1143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r1, &(0x7f0000019300)='pagemap\x00') r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76fa6066a0921b176d5b3b9fc3704ae2a6b1d14c5cbf730d77a805e7f8023d7fed9c83e52ce2a351e62f6ea4fded62b6755c218c69f00775d69187b9", 0x68, r4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='x', 0x1}], 0x1}, 0x0) close(0x3) 15.592126625s ago: executing program 1 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf250220"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200440c0) 9.026040054s ago: executing program 35 (id=1139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, 0x54}}, 0x0) 8.080878301s ago: executing program 36 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b"]) 0s ago: executing program 37 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf250220"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200440c0) kernel console output (not intermixed with test programs): v0: Adding interface: batadv_slave_1 [ 90.564453][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.564466][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.566224][ T5844] team0: Port device team_slave_1 added [ 90.868340][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.868352][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.868366][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.869812][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.869825][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.869847][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.871097][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.871109][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.871130][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.058783][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.058799][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.058821][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.059914][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.059924][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.059937][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.060803][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.060811][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.060824][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.215009][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.215021][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.215034][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.344421][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.344432][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.344445][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.459769][ T5836] hsr_slave_0: entered promiscuous mode [ 91.460852][ T5836] hsr_slave_1: entered promiscuous mode [ 91.693419][ T5157] Bluetooth: hci0: command tx timeout [ 91.773596][ T5847] Bluetooth: hci1: command tx timeout [ 91.773684][ T5157] Bluetooth: hci3: command tx timeout [ 91.853394][ T5157] Bluetooth: hci2: command tx timeout [ 91.853426][ T5157] Bluetooth: hci4: command tx timeout [ 91.982573][ T5845] hsr_slave_0: entered promiscuous mode [ 91.987549][ T5845] hsr_slave_1: entered promiscuous mode [ 91.988541][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 91.988647][ T5845] Cannot create hsr debugfs directory [ 91.999126][ T5840] hsr_slave_0: entered promiscuous mode [ 92.000296][ T5840] hsr_slave_1: entered promiscuous mode [ 92.001129][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.001150][ T5840] Cannot create hsr debugfs directory [ 92.011702][ T5846] hsr_slave_0: entered promiscuous mode [ 92.012907][ T5846] hsr_slave_1: entered promiscuous mode [ 92.014415][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 92.014437][ T5846] Cannot create hsr debugfs directory [ 92.269341][ T5844] hsr_slave_0: entered promiscuous mode [ 92.270351][ T5844] hsr_slave_1: entered promiscuous mode [ 92.270882][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 92.270899][ T5844] Cannot create hsr debugfs directory [ 93.752399][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.773295][ T5847] Bluetooth: hci0: command tx timeout [ 93.805102][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.849135][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.860719][ T5847] Bluetooth: hci3: command tx timeout [ 93.860751][ T5157] Bluetooth: hci1: command tx timeout [ 93.915304][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.933516][ T5847] Bluetooth: hci4: command tx timeout [ 93.933558][ T5157] Bluetooth: hci2: command tx timeout [ 94.069595][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.096992][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.129164][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.208222][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.361137][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.401491][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.447551][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.489737][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.627279][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.680399][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.719075][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.780885][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.957447][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.001226][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.041706][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.042339][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.099514][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.231890][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.247872][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.289648][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.290306][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.362560][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.362796][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.400200][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.452781][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.454340][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.483710][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.498586][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.498755][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.594887][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.641884][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.661958][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.662167][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.711822][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.711991][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.797819][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.831701][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.910767][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.912714][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.976331][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.976450][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.006539][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.060525][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.060792][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.137742][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.137947][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.364410][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.545419][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.726551][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.855527][ T5836] veth0_vlan: entered promiscuous mode [ 96.947011][ T5836] veth1_vlan: entered promiscuous mode [ 96.961380][ T5845] veth0_vlan: entered promiscuous mode [ 96.988876][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.030690][ T5845] veth1_vlan: entered promiscuous mode [ 97.088560][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.090735][ T5840] veth0_vlan: entered promiscuous mode [ 97.187766][ T5840] veth1_vlan: entered promiscuous mode [ 97.189721][ T5836] veth0_macvtap: entered promiscuous mode [ 97.240604][ T5836] veth1_macvtap: entered promiscuous mode [ 97.326720][ T5845] veth0_macvtap: entered promiscuous mode [ 97.361061][ T5845] veth1_macvtap: entered promiscuous mode [ 97.387741][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.440995][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.500776][ T5840] veth0_macvtap: entered promiscuous mode [ 97.502592][ T5844] veth0_vlan: entered promiscuous mode [ 97.507004][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.530648][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.555635][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.578540][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.593453][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.595762][ T5840] veth1_macvtap: entered promiscuous mode [ 97.666551][ T5844] veth1_vlan: entered promiscuous mode [ 97.670711][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.770069][ T1493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.778996][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.845960][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.872460][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.879814][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.976546][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.065877][ T1493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.065903][ T1493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.108671][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.112251][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.171684][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.176072][ T5846] veth0_vlan: entered promiscuous mode [ 98.184852][ T5844] veth0_macvtap: entered promiscuous mode [ 98.192343][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.281748][ T5844] veth1_macvtap: entered promiscuous mode [ 98.301175][ T5846] veth1_vlan: entered promiscuous mode [ 98.312261][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.312279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.508112][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.508131][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.555233][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.648061][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.715719][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.715738][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.815538][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.815558][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.818465][ T3599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.403807][ T3599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.482706][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.511008][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.519258][ T5846] veth0_macvtap: entered promiscuous mode [ 99.545952][ T1493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.545970][ T1493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.788445][ T5846] veth1_macvtap: entered promiscuous mode [ 100.702336][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.805734][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.555667][ T3599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.588553][ T3599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.603415][ T3599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.612764][ T3599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.656877][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.656896][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.741691][ T5964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.923156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.923469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.482013][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.156388][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.156408][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.234839][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.249920][ T37] audit: type=1326 audit(1758500026.566:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.249967][ T37] audit: type=1326 audit(1758500026.566:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250001][ T37] audit: type=1326 audit(1758500026.566:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250036][ T37] audit: type=1326 audit(1758500026.566:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250077][ T37] audit: type=1326 audit(1758500026.566:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250110][ T37] audit: type=1326 audit(1758500026.566:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250144][ T37] audit: type=1326 audit(1758500027.286:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250178][ T37] audit: type=1326 audit(1758500027.286:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250211][ T37] audit: type=1326 audit(1758500027.286:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.250248][ T37] audit: type=1326 audit(1758500027.286:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5983 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7ffc0000 [ 106.489263][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.898400][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.063779][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.175665][ T49] IPVS: starting estimator thread 0... [ 107.273633][ T5997] IPVS: using max 9 ests per chain, 21600 per kthread [ 107.390476][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.535953][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.535980][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.819881][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.814087][ T6016] syz.0.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.430399][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.430413][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.555180][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.611646][ T6023] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 113.614957][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.648115][ T6025] ceph: No mds server is up or the cluster is laggy [ 113.706151][ T5915] libceph: connect (1)[c::]:6789 error -101 [ 113.708043][ T5915] libceph: mon0 (1)[c::]:6789 connect error [ 113.737555][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.972532][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.028966][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.202842][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.402250][ T6034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.478128][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.536220][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.220962][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.816754][ T6040] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 116.486066][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.064308][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.269716][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 117.284475][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.452853][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.049472][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.224738][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.154918][ T6036] orangefs_mount: mount request failed with -4 [ 120.809514][ T5925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.873285][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 121.873596][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 121.875340][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 121.875957][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 121.876087][ T5925] usb 1-1: device descriptor read/all, error -32 [ 122.044758][ T5925] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.045035][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 122.200156][ T5925] usb 1-1: device descriptor read/64, error -32 [ 122.771344][ T5925] usb usb1-port1: attempt power cycle [ 124.430325][ T6083] Bluetooth: MGMT ver 1.23 [ 125.562078][ T6082] syz.1.24 (6082) used greatest stack depth: 14744 bytes left [ 126.506157][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 126.506185][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 129.512111][ T5157] Bluetooth: Frame is too long (len 16, expected len 4) [ 131.875642][ T5157] Bluetooth: hci4: unexpected event 0x10 length: 6 > 1 [ 131.878023][ T5157] Bluetooth: hci4: hardware error 0x01 [ 132.247985][ T5847] Bluetooth: hci2: unexpected cc 0x0c7a length: 5 > 1 [ 132.433674][ T6152] ======================================================= [ 132.433674][ T6152] WARNING: The mand mount option has been deprecated and [ 132.433674][ T6152] and is ignored by this kernel. Remove the mand [ 132.433674][ T6152] option from the mount to silence this warning. [ 132.433674][ T6152] ======================================================= [ 132.433950][ T6152] 9pnet_fd: Insufficient options for proto=fd [ 132.983278][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.988783][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.164992][ T5945] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.855211][ T5945] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 133.855294][ T5945] usb 3-1: config 1 has no interface number 0 [ 133.859980][ T5945] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 133.860190][ T5945] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 133.860787][ T5945] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 134.228088][ T5945] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 134.228119][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.228139][ T5945] usb 3-1: Product: syz [ 134.228153][ T5945] usb 3-1: Manufacturer: syz [ 134.228167][ T5945] usb 3-1: SerialNumber: syz [ 134.325116][ T6155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.096025][ T5945] usb 3-1: Error in usbnet_get_endpoints (-71) [ 135.705621][ T5157] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 135.747395][ T5945] usb 3-1: USB disconnect, device number 2 [ 139.369974][ T6203] block nbd4: Attempted send on invalid socket [ 139.370753][ T6203] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 139.371805][ T6203] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 141.450904][ T6213] 9pnet_fd: Insufficient options for proto=fd [ 142.235691][ T6224] netlink: 452 bytes leftover after parsing attributes in process `syz.0.60'. [ 146.407626][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.224442][ T6271] cramfs: Unknown parameter 'discard' [ 155.931425][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.216611][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.254794][ T6284] netlink: 452 bytes leftover after parsing attributes in process `syz.1.74'. [ 156.799242][ T6296] process 'syz.2.76' launched './file2' with NULL argv: empty string added [ 158.956553][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.180218][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.374819][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.250633][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.010803][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.353350][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.779266][ T6327] netlink: 452 bytes leftover after parsing attributes in process `syz.4.88'. [ 162.143305][ T5927] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 162.143341][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.143359][ T5927] usb 1-1: config 0 has no interface number 0 [ 162.143409][ T5927] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 162.143451][ T5927] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 162.143473][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.152686][ T5927] usb 1-1: config 0 descriptor?? [ 162.207891][ T5927] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 162.392756][ T12] usb 1-1: Failed to submit usb control message: -71 [ 162.392778][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 162.392787][ T12] usb 1-1: unable to get target info from device [ 162.392803][ T12] usb 1-1: could not get target info (-71) [ 162.392818][ T12] usb 1-1: could not probe fw (-71) [ 162.392894][ T5927] usb 1-1: USB disconnect, device number 5 [ 165.823240][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.309208][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 166.968900][ T5852] usb 3-1: unable to read config index 0 descriptor/all [ 166.968956][ T5852] usb 3-1: can't read configurations, error -71 [ 167.540948][ T6374] netlink: 452 bytes leftover after parsing attributes in process `syz.0.103'. [ 167.706074][ T5157] Bluetooth: hci3: command 0x0405 tx timeout [ 168.536850][ T6386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.424820][ T5852] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 171.408777][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.408810][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.414091][ T5852] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 171.414121][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.415161][ T5852] usb 3-1: Product: syz [ 171.415177][ T5852] usb 3-1: Manufacturer: syz [ 171.415191][ T5852] usb 3-1: SerialNumber: syz [ 171.643398][ T5852] usb 3-1: config 0 descriptor?? [ 171.653023][ T5852] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 171.885393][ T5915] usb 3-1: USB disconnect, device number 5 [ 172.003402][ T6032] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.155932][ T6032] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.155990][ T6032] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 172.156018][ T6032] usb 5-1: config 1 interface 0 has no altsetting 1 [ 172.157547][ T6032] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.157579][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.157599][ T6032] usb 5-1: SerialNumber: syz [ 172.281121][ T6032] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 173.201751][ T6032] usb 5-1: USB disconnect, device number 2 [ 173.466260][ T5157] Bluetooth: hci3: unexpected event for opcode 0x200c [ 173.792481][ T6419] netlink: 452 bytes leftover after parsing attributes in process `syz.0.115'. [ 175.857294][ T6434] netlink: 452 bytes leftover after parsing attributes in process `syz.0.119'. [ 176.078244][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 176.078261][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 176.448054][ T5157] Bluetooth: hci2: unexpected subevent 0x0c length: 1 < 5 [ 179.348152][ T6466] block nbd3: Attempted send on invalid socket [ 179.348174][ T6466] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 179.348278][ T6466] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 180.087442][ T6468] netlink: 452 bytes leftover after parsing attributes in process `syz.1.130'. [ 182.392976][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 182.392991][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 182.856787][ T5918] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 183.106768][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 183.106784][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 183.233949][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 183.242435][ T6492] netlink: 452 bytes leftover after parsing attributes in process `syz.0.135'. [ 183.656295][ T5918] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 183.656321][ T5918] usb 4-1: config 95 has no interface number 0 [ 183.656352][ T5918] usb 4-1: config 95 interface 1 has no altsetting 0 [ 183.693586][ T5918] usb 4-1: string descriptor 0 read error: -22 [ 183.693724][ T5918] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 183.693746][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.007475][ T6508] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.215220][ T5918] usb 4-1: USB disconnect, device number 2 [ 187.424614][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.926106][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 188.038505][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.063904][ T5915] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 188.063932][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.063951][ T5915] usb 3-1: Product: syz [ 188.063964][ T5915] usb 3-1: Manufacturer: syz [ 188.063978][ T5915] usb 3-1: SerialNumber: syz [ 189.316121][ T5915] usb 3-1: config 0 descriptor?? [ 190.047529][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.905495][ T6531] netlink: 452 bytes leftover after parsing attributes in process `syz.3.143'. [ 191.532832][ T5915] usb 3-1: can't set config #0, error -71 [ 191.541768][ T5915] usb 3-1: USB disconnect, device number 6 [ 193.313500][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 193.313516][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 193.574328][ T6556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.086791][ T6566] netlink: 452 bytes leftover after parsing attributes in process `syz.4.151'. [ 195.575098][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.575172][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.789680][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 197.345270][ T6583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.239900][ T5157] Bluetooth: hci3: unexpected event for opcode 0x041b [ 201.261180][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 201.261195][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 203.446826][ T6637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.497041][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 208.497058][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 210.469283][ T6690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.851388][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 210.851403][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 211.933273][ T6684] Bluetooth: hci1: command 0x0406 tx timeout [ 212.027649][ T6684] Bluetooth: hci2: command 0x0406 tx timeout [ 212.027685][ T6684] Bluetooth: hci0: command 0x0406 tx timeout [ 212.027705][ T6684] Bluetooth: hci3: command 0x0405 tx timeout [ 216.851717][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 216.851763][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 218.017245][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 218.017260][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 218.185312][ T6738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.668954][ T6744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.197999][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.233741][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.238462][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.240291][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.245249][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.669811][ T6772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.286329][ T5157] Bluetooth: hci3: command 0x0405 tx timeout [ 222.333285][ T5847] Bluetooth: hci4: command tx timeout [ 222.991571][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 222.991588][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 223.532961][ T6787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.793399][ T5157] Bluetooth: hci4: command tx timeout [ 225.214638][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 226.178006][ T6815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.816696][ T5157] Bluetooth: hci4: command tx timeout [ 228.429969][ T1493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.608962][ T6830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.799569][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 228.799586][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 228.893350][ T5157] Bluetooth: hci4: command tx timeout [ 230.548756][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 230.548770][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 230.717031][ T1493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.259584][ T1493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.373038][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 232.373054][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 233.568259][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 233.568282][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 235.166132][ T1493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.190560][ T5157] Bluetooth: hci3: unexpected event for opcode 0x200b [ 237.176923][ T6760] chnl_net:caif_netlink_parms(): no params data found [ 237.257071][ T1493] bridge_slave_1: left allmulticast mode [ 237.259765][ T1493] bridge_slave_1: left promiscuous mode [ 237.265831][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.352631][ T1493] bridge_slave_0: left allmulticast mode [ 237.352664][ T1493] bridge_slave_0: left promiscuous mode [ 237.355038][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.216080][ T5157] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 239.216183][ T5157] Bluetooth: hci3: Injecting HCI hardware error event [ 239.219268][ T5157] Bluetooth: hci3: hardware error 0x00 [ 239.265654][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.344106][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.390610][ T1493] bond0 (unregistering): Released all slaves [ 240.338718][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.338858][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.339085][ T6760] bridge_slave_0: entered allmulticast mode [ 240.375494][ T6760] bridge_slave_0: entered promiscuous mode [ 240.390149][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.391447][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.391675][ T6760] bridge_slave_1: entered allmulticast mode [ 240.402324][ T6760] bridge_slave_1: entered promiscuous mode [ 240.901722][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.928786][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.373319][ T5157] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 241.389426][ T1493] hsr_slave_0: left promiscuous mode [ 241.423361][ T1493] hsr_slave_1: left promiscuous mode [ 241.424455][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.424550][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.465465][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.465495][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.569693][ T1493] veth1_macvtap: left promiscuous mode [ 241.569936][ T1493] veth0_macvtap: left promiscuous mode [ 241.570258][ T1493] veth1_vlan: left promiscuous mode [ 241.570583][ T1493] veth0_vlan: left promiscuous mode [ 243.665000][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 243.900385][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 246.226106][ T6760] team0: Port device team_slave_0 added [ 246.267262][ T6760] team0: Port device team_slave_1 added [ 246.482479][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.482495][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.482519][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.529580][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.529596][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.529619][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.907997][ T6760] hsr_slave_0: entered promiscuous mode [ 246.909279][ T6760] hsr_slave_1: entered promiscuous mode [ 246.911922][ T6760] debugfs: 'hsr0' already exists in 'hsr' [ 246.911948][ T6760] Cannot create hsr debugfs directory [ 247.855747][ T6760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.891745][ T6760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.933484][ T6760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.975732][ T6760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.312954][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.365795][ T6760] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.396951][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.397189][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.405513][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.413353][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.847825][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.190774][ T6760] veth0_vlan: entered promiscuous mode [ 249.202163][ T6760] veth1_vlan: entered promiscuous mode [ 249.251847][ T6760] veth0_macvtap: entered promiscuous mode [ 249.259351][ T6760] veth1_macvtap: entered promiscuous mode [ 249.281124][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.298672][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.319489][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.321022][ T1397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.321062][ T1397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.321095][ T1397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.576307][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.576327][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.643341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.643398][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.298146][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 250.298162][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 251.347195][ T5157] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 252.885744][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 252.886262][ T7056] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 253.098706][ T7060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.644553][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 253.644590][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 255.779182][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779256][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.090396][ T7086] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 256.922495][ T7091] misc userio: No port type given on /dev/userio [ 257.960481][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 257.960497][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 259.625528][ T7114] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.294'. [ 259.815373][ T7121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.359285][ T7116] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 260.377742][ T7116] qnx6: wrong signature (magic) in superblock #1. [ 260.377841][ T7116] qnx6: unable to read the first superblock [ 262.045921][ T7113] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 262.525925][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'. [ 262.525940][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'. [ 262.689402][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 264.021524][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 265.711891][ T7177] netlink: 452 bytes leftover after parsing attributes in process `syz.3.301'. [ 266.308446][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 266.308467][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 267.564930][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 267.564947][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 267.893449][ T7197] netlink: 452 bytes leftover after parsing attributes in process `syz.2.305'. [ 270.070824][ T7201] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 270.071002][ T7201] qnx6: wrong signature (magic) in superblock #1. [ 270.071008][ T7201] qnx6: unable to read the first superblock [ 270.289067][ T7201] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 272.168929][ T7228] netlink: 452 bytes leftover after parsing attributes in process `syz.2.314'. [ 273.165588][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 273.165627][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 273.803452][ T7250] netlink: 452 bytes leftover after parsing attributes in process `syz.1.321'. [ 276.849048][ T7284] netlink: 452 bytes leftover after parsing attributes in process `syz.2.327'. [ 277.315293][ T7286] netlink: 232 bytes leftover after parsing attributes in process `syz.5.328'. [ 277.953290][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 277.953392][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 278.396075][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.331'. [ 278.396183][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.331'. [ 278.738022][ T7291] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 280.154591][ T7317] netlink: 452 bytes leftover after parsing attributes in process `syz.5.333'. [ 283.226804][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 283.226821][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 283.946377][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 283.946394][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 284.215125][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 284.215141][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 285.635618][ T7372] netlink: 452 bytes leftover after parsing attributes in process `syz.1.352'. [ 287.239147][ T7390] Zero length message leads to an empty skb [ 288.825314][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 288.825389][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 292.390078][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 292.390094][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 296.719097][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.381'. [ 296.719126][ T7486] netlink: 148 bytes leftover after parsing attributes in process `syz.1.381'. [ 298.229762][ T7479] syz.0.382 (7479): drop_caches: 2 [ 298.399205][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 298.399220][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 299.645695][ T7514] netlink: 'syz.2.389': attribute type 11 has an invalid length. [ 299.675263][ T7513] netlink: 'syz.1.390': attribute type 9 has an invalid length. [ 300.943047][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.394'. [ 300.943071][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.394'. [ 302.988121][ T5847] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 304.365409][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 306.943714][ T7582] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 307.985000][ T7580] bridge0: port 2(bridge_slave_1) entered listening state [ 309.704081][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 309.704098][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 312.499232][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 312.499247][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 314.759904][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 314.759921][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 314.809944][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 314.809959][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 316.897907][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 316.897923][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 317.222582][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.222656][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.596506][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 317.596521][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 318.531034][ T7726] lo: entered allmulticast mode [ 318.532959][ T7726] tunl0: entered allmulticast mode [ 318.547171][ T7726] gre0: entered allmulticast mode [ 318.548007][ T7726] gretap0: entered allmulticast mode [ 318.548840][ T7726] erspan0: entered allmulticast mode [ 318.549636][ T7726] ip_vti0: entered allmulticast mode [ 318.550424][ T7726] ip6_vti0: entered allmulticast mode [ 318.552402][ T7726] sit0: entered allmulticast mode [ 318.623713][ T7726] ip6tnl0: entered allmulticast mode [ 318.624698][ T7726] ip6gre0: entered allmulticast mode [ 318.625464][ T7726] syz_tun: entered allmulticast mode [ 318.626376][ T7726] ip6gretap0: entered allmulticast mode [ 318.627185][ T7726] bridge0: entered allmulticast mode [ 318.628245][ T7726] vcan0: entered allmulticast mode [ 318.628665][ T7726] bond0: entered allmulticast mode [ 318.628681][ T7726] bond_slave_0: entered allmulticast mode [ 318.628702][ T7726] bond_slave_1: entered allmulticast mode [ 318.629941][ T7726] team0: entered allmulticast mode [ 318.629956][ T7726] team_slave_0: entered allmulticast mode [ 318.629976][ T7726] team_slave_1: entered allmulticast mode [ 318.674123][ T7726] dummy0: entered allmulticast mode [ 318.676865][ T7726] nlmon0: entered allmulticast mode [ 318.745553][ T7726] caif0: entered allmulticast mode [ 318.745579][ T7726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.790753][ T5157] Bluetooth: hci1: unexpected event for opcode 0x200f [ 319.552351][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 319.552402][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 319.919566][ T7747] __nla_validate_parse: 2 callbacks suppressed [ 319.919579][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 319.919588][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 320.792101][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 320.792118][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 321.732204][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 321.732221][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 323.101752][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 323.101768][ T37] audit: type=1326 audit(1758500244.176:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7fc00000 [ 323.545708][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 323.545723][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 326.380072][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 326.380089][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 326.991208][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 326.991225][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 327.000487][ T7811] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 327.000505][ T7811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.475'. [ 327.000980][ T7811] batadv0: entered promiscuous mode [ 327.001004][ T7811] batadv0: entered allmulticast mode [ 327.001932][ T7811] bridge0: port 3(batadv0) entered blocking state [ 327.014097][ T7811] bridge0: port 3(batadv0) entered disabled state [ 327.037634][ T7811] bridge0: port 3(batadv0) entered blocking state [ 327.038354][ T7811] bridge0: port 3(batadv0) entered forwarding state [ 327.155128][ T7813] netlink: 76 bytes leftover after parsing attributes in process `syz.2.476'. [ 327.269227][ T7820] netlink: 104 bytes leftover after parsing attributes in process `syz.1.480'. [ 327.536446][ T1473] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 327.536462][ T1473] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 327.696237][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 328.213170][ T37] audit: type=1326 audit(1758500249.306:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7814 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5abec29 code=0x7fc00000 [ 329.499795][ T7854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.805969][ T7881] netlink: 452 bytes leftover after parsing attributes in process `syz.3.495'. [ 332.193983][ T37] audit: type=1326 audit(1758500253.296:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7872 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac230ec29 code=0x7fc00000 [ 332.883627][ T7899] IPv6: Can't replace route, no match found [ 335.215647][ T7927] netlink: 452 bytes leftover after parsing attributes in process `syz.3.508'. [ 335.723067][ T37] audit: type=1326 audit(1758500256.806:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7919 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac230ec29 code=0x7fc00000 [ 335.795994][ T7932] pim6reg: entered allmulticast mode [ 335.799438][ T7932] pim6reg: left allmulticast mode [ 337.307534][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 337.307552][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 337.359553][ T7936] geneve2: entered promiscuous mode [ 339.969834][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 339.969850][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 339.976623][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 339.976638][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 340.158633][ T37] audit: type=1326 audit(1758500261.236:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7962 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7fc00000 [ 340.213269][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 340.213286][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 340.921350][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 340.921365][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 340.923687][ T7994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.973295][ T1228] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 345.139621][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 348.967660][ T1228] usb 3-1: device not accepting address 7, error -71 [ 349.427481][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 349.427496][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 349.623246][ T5927] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 350.627451][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.627485][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.627524][ T5927] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 350.627546][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.649529][ T5927] usb 6-1: config 0 descriptor?? [ 351.003247][ T37] audit: type=1326 audit(1758500272.076:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7fc00000 [ 351.249841][ T5927] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 351.251666][ T5927] bigben 0003:146B:0902.0001: unbalanced delimiter at end of report description [ 351.252500][ T5927] bigben 0003:146B:0902.0001: parse failed [ 351.252609][ T5927] bigben 0003:146B:0902.0001: probe with driver bigben failed with error -22 [ 351.255968][ T1228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.526342][ T1228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.941569][ T6060] usb 6-1: USB disconnect, device number 2 [ 352.087693][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 352.087710][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 352.089788][ T1228] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.089816][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.089836][ T1228] usb 3-1: Product: syz [ 352.089850][ T1228] usb 3-1: Manufacturer: syz [ 352.089862][ T1228] usb 3-1: SerialNumber: syz [ 352.115688][ T1228] usb 3-1: config 0 descriptor?? [ 357.624499][ T1228] usb 3-1: USB disconnect, device number 8 [ 357.834789][ T8080] netlink: 452 bytes leftover after parsing attributes in process `syz.1.559'. [ 358.580350][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 358.580367][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.560'. [ 359.066068][ T8101] udevd[8101]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.916537][ T5945] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 360.011704][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 360.011887][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 360.156759][ T37] audit: type=1326 audit(1758500281.256:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8097 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714b29ec29 code=0x7fc00000 [ 360.253297][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 360.256317][ T5945] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 360.256341][ T5945] usb 3-1: config 0 has no interface number 0 [ 360.256385][ T5945] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 360.256403][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.261639][ T5945] usb 3-1: config 0 descriptor?? [ 360.445397][ T5945] viperboard 3-1:0.143: version 0.00 found at bus 003 address 009 [ 360.501229][ T5945] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 360.501276][ T5945] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 360.546634][ T5945] usb 3-1: USB disconnect, device number 9 [ 360.661875][ T8130] xt_socket: unknown flags 0x40 [ 360.883800][ T6159] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 361.097179][ T6159] usb 4-1: Using ep0 maxpacket: 32 [ 361.099584][ T6159] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.099630][ T6159] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 361.099652][ T6159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.180896][ T6159] usb 4-1: config 0 descriptor?? [ 361.679825][ T6159] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 362.188567][ T6159] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 362.188599][ T6159] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 362.212843][ T6159] usb 4-1: USB disconnect, device number 3 [ 363.333285][ T5945] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 363.516202][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 363.516235][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.516275][ T5945] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 363.516295][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.572954][ T5945] usb 3-1: config 0 descriptor?? [ 363.583481][ T8151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.809982][ T8169] netlink: 452 bytes leftover after parsing attributes in process `syz.5.586'. [ 364.018561][ T5945] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 364.018603][ T5945] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 364.018631][ T5945] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 364.018658][ T5945] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 364.018684][ T5945] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 364.084877][ T37] audit: type=1326 audit(1758500285.186:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e711ec29 code=0x7fc00000 [ 364.875793][ T5945] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 364.935011][ T5945] playstation 0003:054C:0BA0.0003: Failed to retrieve feature with reportID 18: -71 [ 364.935037][ T5945] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -71 [ 364.935088][ T5945] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4 [ 364.935107][ T5945] playstation 0003:054C:0BA0.0003: Failed to create dualshock4. [ 365.018665][ T5945] playstation 0003:054C:0BA0.0003: probe with driver playstation failed with error -71 [ 365.041540][ T5945] usb 3-1: USB disconnect, device number 10 [ 365.210457][ T8180] fido_id[8180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 366.408378][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 366.408398][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 367.258850][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 367.258867][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 369.394529][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 369.647111][ T8221] netlink: 'syz.0.601': attribute type 3 has an invalid length. [ 369.815162][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 369.815178][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 370.468197][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 370.468212][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 370.673271][ T37] audit: type=1326 audit(1758500291.766:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673318][ T37] audit: type=1326 audit(1758500291.766:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673357][ T37] audit: type=1326 audit(1758500291.766:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673395][ T37] audit: type=1326 audit(1758500291.766:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673433][ T37] audit: type=1326 audit(1758500291.766:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673473][ T37] audit: type=1326 audit(1758500291.766:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673511][ T37] audit: type=1326 audit(1758500291.766:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673549][ T37] audit: type=1326 audit(1758500291.766:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673588][ T37] audit: type=1326 audit(1758500291.766:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.673625][ T37] audit: type=1326 audit(1758500291.766:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8217 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507c95ec29 code=0x7fc00000 [ 370.826407][ T8243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.597578][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 371.597594][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 372.166509][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 372.166527][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 372.474712][ T8250] fuse: Unknown parameter '0xffffffffffffffff' [ 373.346714][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 373.346730][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 373.373512][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 373.530561][ T5915] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 373.530591][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.530610][ T5915] usb 1-1: Product: syz [ 373.530623][ T5915] usb 1-1: Manufacturer: syz [ 373.530636][ T5915] usb 1-1: SerialNumber: syz [ 373.570391][ T5915] usb 1-1: config 0 descriptor?? [ 374.342567][ T8277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.052093][ T5915] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 375.052256][ T5915] asix 1-1:0.0: probe with driver asix failed with error -71 [ 375.059952][ T5915] usb 1-1: USB disconnect, device number 6 [ 375.722575][ T8279] __nla_validate_parse: 1 callbacks suppressed [ 375.722588][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.619'. [ 375.722600][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.619'. [ 376.582726][ T8297] fuse: Unknown parameter '0xffffffffffffffff' [ 376.938572][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 376.938589][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 376.938995][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 376.939009][ T37] audit: type=1326 audit(1758500298.036:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.1.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714b29ec29 code=0x7fc00000 [ 377.548387][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 377.548405][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 378.725497][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725572][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.042086][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 379.042133][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 379.600493][ T8318] netlink: 452 bytes leftover after parsing attributes in process `syz.1.630'. [ 379.643273][ T37] audit: type=1800 audit(1758500300.726:110): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.629" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 380.025159][ T8327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.793345][ T1228] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 381.033538][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 381.054206][ T1228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.054239][ T1228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.054261][ T1228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.054296][ T1228] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 381.054319][ T1228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.188346][ T1228] usb 6-1: config 0 descriptor?? [ 381.631753][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631790][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631817][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631843][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631869][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631895][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631921][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631947][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631973][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.631999][ T1228] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 381.739764][ T1228] kye 0003:0458:0138.0004: collection stack underflow [ 381.739795][ T1228] kye 0003:0458:0138.0004: item 0 0 0 12 parsing failed [ 381.740661][ T1228] kye 0003:0458:0138.0004: parse failed [ 381.740732][ T1228] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 381.928801][ T1228] usb 6-1: USB disconnect, device number 3 [ 382.153831][ T8347] fuse: Unknown parameter '0xffffffffffffffff' [ 382.319593][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 382.319618][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 382.349011][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 382.349035][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 383.462348][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 383.462364][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 383.505981][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 383.505997][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 383.633373][ T8365] netlink: 452 bytes leftover after parsing attributes in process `syz.1.643'. [ 383.798088][ T1228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 384.103260][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 384.106536][ T1228] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 384.106562][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.316875][ T8376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.789676][ T1228] usb 4-1: config 0 descriptor?? [ 385.745112][ T1228] magicmouse 0003:05AC:0269.0005: reserved main item tag 0xd [ 385.745150][ T1228] magicmouse 0003:05AC:0269.0005: item fetching failed at offset 4/5 [ 385.745936][ T1228] magicmouse 0003:05AC:0269.0005: magicmouse hid parse failed [ 385.746044][ T1228] magicmouse 0003:05AC:0269.0005: probe with driver magicmouse failed with error -22 [ 385.959965][ T6159] usb 4-1: USB disconnect, device number 4 [ 386.007657][ T8384] fuse: Unknown parameter '0xffffffffffffffff' [ 386.025031][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 387.879335][ T8405] __nla_validate_parse: 5 callbacks suppressed [ 387.879443][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 387.879479][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 387.941292][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 387.941308][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 388.152118][ T8410] netlink: 452 bytes leftover after parsing attributes in process `syz.0.657'. [ 390.740280][ T37] audit: type=1400 audit(1758500311.836:111): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8427 comm="syz.1.664" src=1 dest=20000 netif=wpan0 [ 391.233281][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 391.383371][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 391.385815][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.385863][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 391.385885][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.487774][ T9] usb 6-1: config 0 descriptor?? [ 391.953777][ T9] hid_parser_main: 643 callbacks suppressed [ 391.953800][ T9] logitech-djreceiver 0003:046D:C71B.0006: unknown main item tag 0x3 [ 391.953832][ T9] logitech-djreceiver 0003:046D:C71B.0006: unknown main item tag 0x5 [ 392.209232][ T6159] usb 6-1: USB disconnect, device number 4 [ 394.269476][ T8465] warning: `syz.2.676' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 397.090608][ T8496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.243450][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 399.243467][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 400.881750][ T8528] netlink: 452 bytes leftover after parsing attributes in process `syz.5.698'. [ 401.710561][ T8542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.731432][ T8545] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 402.523706][ T6159] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 402.534279][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 402.534295][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 402.543414][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 402.675667][ T6159] usb 6-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 402.675701][ T6159] usb 6-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.675724][ T6159] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.675757][ T6159] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 402.675779][ T6159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.682011][ T6159] usb 6-1: config 0 descriptor?? [ 402.693247][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 402.698368][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.698399][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.698437][ T5926] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 402.698459][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.704679][ T5926] usb 4-1: config 0 descriptor?? [ 403.190841][ T6159] sony 0003:054C:024B.0007: unbalanced delimiter at end of report description [ 403.191631][ T6159] sony 0003:054C:024B.0007: parse failed [ 403.191735][ T6159] sony 0003:054C:024B.0007: probe with driver sony failed with error -22 [ 403.246908][ T5926] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 403.246949][ T5926] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 403.246977][ T5926] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 403.247002][ T5926] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 403.247028][ T5926] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 403.300389][ T5926] kone 0003:1E7D:2CED.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 403.406373][ T5926] kone 0003:1E7D:2CED.0008: couldn't init struct kone_device [ 403.406431][ T5926] kone 0003:1E7D:2CED.0008: couldn't install mouse [ 403.433684][ T6159] usb 6-1: USB disconnect, device number 5 [ 403.728669][ T5926] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -5 [ 404.618651][ T5926] usb 4-1: USB disconnect, device number 5 [ 404.996770][ T8576] netlink: 452 bytes leftover after parsing attributes in process `syz.3.712'. [ 408.355294][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 408.355312][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 408.854940][ T8617] netlink: 452 bytes leftover after parsing attributes in process `syz.5.725'. [ 409.354257][ T8614] netlink: 452 bytes leftover after parsing attributes in process `syz.3.724'. [ 409.487695][ T8621] tipc: Started in network mode [ 409.487712][ T8621] tipc: Node identity 8, cluster identity 4711 [ 409.487719][ T8621] tipc: Node number set to 8 [ 410.543323][ T1228] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 410.610499][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 410.610516][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 410.695637][ T1228] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 410.695664][ T1228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.695681][ T1228] usb 6-1: config 0 has no interface number 0 [ 410.695732][ T1228] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 410.695751][ T1228] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.698850][ T1228] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 410.698876][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.698895][ T1228] usb 6-1: Product: syz [ 410.698908][ T1228] usb 6-1: Manufacturer: syz [ 410.698922][ T1228] usb 6-1: SerialNumber: syz [ 410.789430][ T1228] usb 6-1: config 0 descriptor?? [ 412.252087][ T1228] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 412.272212][ T1228] usb 6-1: USB disconnect, device number 6 [ 413.008117][ T5852] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 413.173502][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 413.378949][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 413.379223][ T5852] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 413.379306][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.672800][ T5852] usb 3-1: config 0 descriptor?? [ 413.756351][ T8661] netlink: 452 bytes leftover after parsing attributes in process `syz.1.741'. [ 414.127516][ T5852] corsair 0003:1B1C:1B09.0009: unbalanced collection at end of report description [ 414.128889][ T5852] corsair 0003:1B1C:1B09.0009: parse failed [ 414.128997][ T5852] corsair 0003:1B1C:1B09.0009: probe with driver corsair failed with error -22 [ 414.298647][ T5926] usb 3-1: USB disconnect, device number 11 [ 414.865289][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 414.865305][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 415.954960][ T8684] capability: warning: `syz.2.748' uses deprecated v2 capabilities in a way that may be insecure [ 416.491780][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 416.491795][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 416.578596][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 416.578612][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 416.740189][ T8693] netlink: 452 bytes leftover after parsing attributes in process `syz.2.752'. [ 416.770458][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 416.770474][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 416.951187][ T8701] netlink: 452 bytes leftover after parsing attributes in process `syz.3.753'. [ 417.300717][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.755'. [ 417.360913][ T8702] ipvlan2: entered promiscuous mode [ 419.317074][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 421.383232][ T5918] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 421.535830][ T5918] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 421.535857][ T5918] usb 6-1: config 0 has no interface number 0 [ 421.535903][ T5918] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.535925][ T5918] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 421.535951][ T5918] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 421.535975][ T5918] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 421.536000][ T5918] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 421.536025][ T5918] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.536066][ T5918] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 421.536088][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.648720][ T5918] usb 6-1: config 0 descriptor?? [ 421.661042][ T8736] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 421.661232][ T8736] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 421.709529][ T5918] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 422.370656][ T1228] usb 6-1: USB disconnect, device number 7 [ 422.391047][ T1228] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 423.710050][ T8765] __nla_validate_parse: 4 callbacks suppressed [ 423.710068][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 423.814670][ T5157] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 424.521143][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 424.521158][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 424.717634][ T8778] netlink: 452 bytes leftover after parsing attributes in process `syz.2.780'. [ 425.642292][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 425.642308][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 425.643313][ T5849] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 426.081327][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 426.806228][ T5849] usb 6-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.806424][ T5849] usb 6-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 426.806608][ T5849] usb 6-1: config 0 interface 0 has no altsetting 0 [ 426.807399][ T5849] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 426.807622][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.998453][ T5849] usb 6-1: config 0 descriptor?? [ 427.083793][ T8811] netlink: 452 bytes leftover after parsing attributes in process `syz.2.793'. [ 427.562696][ T5849] redragon 0003:0C45:760B.000A: item fetching failed at offset 5/7 [ 427.603926][ T5849] redragon 0003:0C45:760B.000A: probe with driver redragon failed with error -22 [ 428.458606][ T5849] usb 6-1: USB disconnect, device number 8 [ 429.340103][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 429.340119][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 429.989228][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 429.989243][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 430.270658][ T8856] netlink: 452 bytes leftover after parsing attributes in process `syz.3.808'. [ 430.583181][ T8864] fuse: Unknown parameter '0xffffffffffffffff' [ 432.284405][ T8873] ptrace attach of "./syz-executor exec"[8869] was attempted by "./syz-executor exec"[8873] [ 433.308318][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 433.308334][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 434.183751][ T8900] fuse: Unknown parameter '0x0000000000000005' [ 435.520002][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.833'. [ 435.756603][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 435.906046][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.906103][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.906129][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.906178][ T5927] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 435.906200][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.011252][ T5927] usb 4-1: config 0 descriptor?? [ 436.504900][ T5927] wacom 0003:056A:0010.000B: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 436.649940][ T5927] wacom 0003:056A:0010.000B: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 436.684033][ T5927] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.000B/input/input7 [ 436.807950][ T5927] usb 4-1: USB disconnect, device number 6 [ 437.397915][ T8953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.852685][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 438.590870][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 438.590887][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 439.147185][ T8950] fido_id[8950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 439.251496][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 439.251513][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 439.801334][ T8966] netlink: 452 bytes leftover after parsing attributes in process `syz.3.848'. [ 439.963806][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 439.999580][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 439.999595][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 440.830216][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.830294][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.119880][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 442.586965][ T8992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.004983][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 444.395923][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 444.396107][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 444.673579][ T9003] sp0: Synchronizing with TNC [ 444.692790][ T9011] sp0: Found TNC [ 445.022093][ T9019] pimreg: entered allmulticast mode [ 445.023310][ T9020] pimreg: left allmulticast mode [ 446.555840][ T9035] netlink: 452 bytes leftover after parsing attributes in process `syz.0.865'. [ 447.920687][ T9050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.547597][ T9086] netlink: 452 bytes leftover after parsing attributes in process `syz.1.881'. [ 453.758371][ T9094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.709064][ T9138] netlink: 'syz.1.896': attribute type 9 has an invalid length. [ 462.713730][ T9171] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 462.713753][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 462.713876][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.208997][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 464.209013][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 464.685957][ T9191] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 464.719958][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.813444][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 467.379628][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 467.379645][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 467.568669][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 467.568684][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 468.981601][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 469.933667][ T9252] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 471.553337][ T6159] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 471.713231][ T6159] usb 4-1: Using ep0 maxpacket: 8 [ 471.716710][ T6159] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.716734][ T6159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 471.716785][ T6159] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 471.716807][ T6159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.780243][ T6159] hub 4-1:1.0: bad descriptor, ignoring hub [ 471.780284][ T6159] hub 4-1:1.0: probe with driver hub failed with error -5 [ 471.999437][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.001683][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.012198][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.012858][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.125332][ T5849] usb 4-1: USB disconnect, device number 7 [ 472.475986][ T9288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.400533][ T9291] IPv6: NLM_F_CREATE should be specified when creating new route [ 473.511247][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 473.511271][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 476.033659][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 476.033675][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 476.245857][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 476.245873][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 476.374892][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.324807][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 477.324823][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 480.047206][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'. [ 480.047221][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'. [ 481.608579][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 481.608595][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 483.616255][ T6159] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 483.823274][ T6159] usb 3-1: Using ep0 maxpacket: 8 [ 483.830499][ T6159] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 483.830527][ T6159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.952209][ T6159] pvrusb2: Hardware description: Terratec Grabster AV400 [ 483.952229][ T6159] pvrusb2: ********** [ 483.952235][ T6159] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 483.952246][ T6159] pvrusb2: Important functionality might not be entirely working. [ 483.952254][ T6159] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 483.952264][ T6159] pvrusb2: ********** [ 484.064599][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 484.064615][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 484.150410][ T2369] pvrusb2: Invalid write control endpoint [ 484.340061][ T9392] pvrusb2: Invalid write control endpoint [ 484.342221][ T6159] usb 3-1: USB disconnect, device number 12 [ 484.406182][ T2369] pvrusb2: Invalid write control endpoint [ 484.406196][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 484.406204][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 484.406211][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 484.406218][ T2369] pvrusb2: Device being rendered inoperable [ 484.443244][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 484.443318][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 484.477521][ T2369] pvrusb2: Attached sub-driver cx25840 [ 484.477546][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 484.477555][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 485.605672][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 485.605689][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 487.113318][ T5945] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 487.262214][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 487.262229][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 487.275499][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.275517][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.275538][ T5945] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 487.275549][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.357357][ T5945] usb 6-1: config 0 descriptor?? [ 487.397231][ T9432] loop7: detected capacity change from 0 to 7 [ 487.448083][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 487.448099][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 487.705399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 487.721642][ T9438] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 487.721661][ T9438] netlink: 'syz.3.996': attribute type 4 has an invalid length. [ 487.721673][ T9438] netlink: 212 bytes leftover after parsing attributes in process `syz.3.996'. [ 487.753187][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.753448][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 487.756020][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.756061][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 487.756263][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.756286][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 487.756356][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.756379][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 487.756447][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.756470][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 487.756539][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.756563][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 487.756630][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.756653][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 487.769637][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.769666][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 487.769735][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.769758][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 487.769818][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 488.162989][ T5945] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 489.080506][ T5945] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 489.149778][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.171882][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.179890][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.181045][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 489.181919][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.375499][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 489.375516][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 489.594084][ T5945] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 491.036381][ T5945] usb 6-1: USB disconnect, device number 9 [ 491.092529][ T5945] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 491.154437][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 491.154453][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 491.233173][ T5847] Bluetooth: hci5: command tx timeout [ 491.371138][ T9470] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1004'. [ 491.779927][ T9464] fido_id[9464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 491.887362][ T6032] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 492.073230][ T6032] usb 3-1: Using ep0 maxpacket: 8 [ 492.094461][ T6032] usb 3-1: config 0 has no interfaces? [ 492.097737][ T6032] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 492.097763][ T6032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.097782][ T6032] usb 3-1: Product: syz [ 492.097796][ T6032] usb 3-1: Manufacturer: syz [ 492.097810][ T6032] usb 3-1: SerialNumber: syz [ 492.118556][ T6032] usb 3-1: config 0 descriptor?? [ 492.373073][ T1228] usb 3-1: USB disconnect, device number 13 [ 492.725143][ T1493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.019664][ T9487] __nla_validate_parse: 1 callbacks suppressed [ 493.019681][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 493.019695][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 493.191723][ T1493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.293451][ T5847] Bluetooth: hci5: command tx timeout [ 493.429023][ T9495] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1016'. [ 493.865230][ T1228] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 493.934045][ T9500] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1018'. [ 494.067790][ T1493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.223235][ T1228] usb 4-1: Using ep0 maxpacket: 32 [ 494.225902][ T1228] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 494.225930][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.245342][ T1228] usb 4-1: config 0 descriptor?? [ 494.467795][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 494.467821][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 494.530397][ T1228] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 494.559727][ T1493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.654248][ T1228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 494.664309][ T1228] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 494.664401][ T1228] usb 4-1: media controller created [ 494.791723][ T1228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.963645][ T1228] az6027: usb out operation failed. (-71) [ 494.964798][ T1228] az6027: usb out operation failed. (-71) [ 494.964812][ T1228] stb0899_attach: Driver disabled by Kconfig [ 494.964822][ T1228] az6027: no front-end attached [ 494.964822][ T1228] [ 494.965788][ T1228] az6027: usb out operation failed. (-71) [ 494.965816][ T1228] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 495.041291][ T1228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 495.073759][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 495.265915][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 495.278805][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.278824][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.278836][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 495.287830][ T9] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 495.287857][ T9] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 495.287875][ T9] usb 6-1: Product: syz [ 495.327803][ T1228] dvb-usb: schedule remote query interval to 400 msecs. [ 495.327825][ T1228] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 495.375049][ T5847] Bluetooth: hci5: command tx timeout [ 495.541313][ T9] usb 6-1: config 0 descriptor?? [ 495.580671][ T1228] usb 4-1: USB disconnect, device number 8 [ 495.807223][ T9528] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1028'. [ 496.218417][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 496.218589][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 496.283550][ T8546] udevd[8546]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 496.460748][ T9] waterforce 0003:1044:7A4D.000E: unknown main item tag 0x0 [ 496.460781][ T9] waterforce 0003:1044:7A4D.000E: unknown main item tag 0x0 [ 496.460805][ T9] waterforce 0003:1044:7A4D.000E: item fetching failed at offset 2/5 [ 496.461508][ T9] waterforce 0003:1044:7A4D.000E: hid parse failed with -22 [ 496.461608][ T9] waterforce 0003:1044:7A4D.000E: probe with driver waterforce failed with error -22 [ 496.701317][ T5849] usb 6-1: USB disconnect, device number 10 [ 496.848689][ T9533] loop5: detected capacity change from 0 to 524255232 [ 496.910648][ T1228] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 497.298232][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 497.453446][ T5847] Bluetooth: hci5: command tx timeout [ 499.019047][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1033'. [ 499.019064][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1033'. [ 499.054109][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 499.054124][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 499.176729][ T1493] bridge_slave_1: left allmulticast mode [ 499.176761][ T1493] bridge_slave_1: left promiscuous mode [ 499.178873][ T1493] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.279116][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 499.279132][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 499.364961][ T1493] bridge_slave_0: left allmulticast mode [ 499.364993][ T1493] bridge_slave_0: left promiscuous mode [ 499.365276][ T1493] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.014103][ T5849] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 500.018187][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 500.018202][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 500.172606][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.172655][ T5849] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 500.172677][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.207128][ T5849] usb 4-1: config 0 descriptor?? [ 500.245441][ T9572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.516121][ T9576] program syz.5.1041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.634540][ T5849] hid-rmi 0003:17EF:6085.000F: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 500.855835][ T49] usb 4-1: USB disconnect, device number 9 [ 501.002357][ T9581] fido_id[9581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 502.143803][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.143879][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.203280][ T5915] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 502.355623][ T5915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.355649][ T5915] usb 6-1: config 0 has no interface number 0 [ 502.358664][ T5915] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 502.358690][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.358709][ T5915] usb 6-1: Product: syz [ 502.358723][ T5915] usb 6-1: Manufacturer: syz [ 502.358737][ T5915] usb 6-1: SerialNumber: syz [ 502.889197][ T5915] usb 6-1: config 0 descriptor?? [ 503.133378][ T5915] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 503.198860][ T5915] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 503.199282][ T5915] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 503.199339][ T5915] usb 6-1: media controller created [ 503.329804][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.441362][ T5915] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 503.529399][ T5915] usb 6-1: USB disconnect, device number 11 [ 504.094088][ T1493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.115711][ T1493] bond_slave_0: left allmulticast mode [ 504.156773][ T1493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.176581][ T1493] bond_slave_1: left allmulticast mode [ 504.180453][ T1493] bond0 (unregistering): Released all slaves [ 508.091305][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 508.091328][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 508.487798][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 508.487814][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 509.656638][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.656851][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.657087][ T9451] bridge_slave_0: entered allmulticast mode [ 509.708124][ T9451] bridge_slave_0: entered promiscuous mode [ 509.748542][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.748685][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.748917][ T9451] bridge_slave_1: entered allmulticast mode [ 509.777417][ T9451] bridge_slave_1: entered promiscuous mode [ 510.197346][ T9664] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1066'. [ 510.233313][ T1228] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 510.411580][ T1228] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 510.411611][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.477633][ T1228] usb 3-1: config 0 descriptor?? [ 510.502345][ T1228] cp210x 3-1:0.0: cp210x converter detected [ 511.300647][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 511.300664][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 511.429988][ T1228] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 511.465024][ T1228] usb 3-1: cp210x converter now attached to ttyUSB0 [ 511.684877][ T5945] usb 3-1: USB disconnect, device number 14 [ 511.709614][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.807844][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 511.807860][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 511.953915][ T5945] cp210x 3-1:0.0: device disconnected [ 512.494367][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.514688][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.685883][ T9699] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1075'. [ 513.320186][ T9713] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1080'. [ 513.729823][ T1493] hsr_slave_0: left promiscuous mode [ 513.899702][ T1493] hsr_slave_1: left promiscuous mode [ 513.900630][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.900657][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.058031][ T1493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.058062][ T1493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.093261][ T5157] Bluetooth: hci5: command 0x0405 tx timeout [ 514.265195][ T1493] veth1_macvtap: left promiscuous mode [ 514.265330][ T1493] veth0_macvtap: left promiscuous mode [ 514.265622][ T1493] veth1_vlan: left promiscuous mode [ 514.265822][ T1493] veth0_vlan: left promiscuous mode [ 516.577479][ T9745] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1091'. [ 516.973549][ T6032] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 517.123357][ T6032] usb 3-1: Using ep0 maxpacket: 16 [ 517.126360][ T6032] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 517.126406][ T6032] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.129590][ T6032] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.129618][ T6032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.129636][ T6032] usb 3-1: Product: syz [ 517.129650][ T6032] usb 3-1: Manufacturer: syz [ 517.129664][ T6032] usb 3-1: SerialNumber: syz [ 518.550714][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.697797][ T6032] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 519.597439][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.839605][ T6032] usb 3-1: USB disconnect, device number 15 [ 519.909042][ T9661] udevd[9661]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.255033][ T9785] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1104'. [ 520.817511][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.828118][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 520.828134][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 520.858071][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.003592][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.299244][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.331245][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.351679][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.413730][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.434220][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.447418][ T9792] random: crng reseeded on system resumption [ 521.468889][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.500846][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.584324][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.664357][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.696610][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.717420][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.763435][ T5849] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 521.811193][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.915763][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 521.915796][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 521.915839][ T5849] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 521.915861][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.921309][ T5849] usb 4-1: config 0 descriptor?? [ 521.925830][ T9794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.098907][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.134730][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.266497][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.919827][ T5849] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 522.919960][ T5849] cm6533_jd 0003:0D8C:0022.0010: item fetching failed at offset 4/5 [ 522.920820][ T5849] cm6533_jd 0003:0D8C:0022.0010: parse failed [ 522.920922][ T5849] cm6533_jd 0003:0D8C:0022.0010: probe with driver cm6533_jd failed with error -22 [ 522.974995][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.977325][ T5849] usb 4-1: USB disconnect, device number 10 [ 523.145434][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.178184][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.326402][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.362223][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.394665][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.493118][ C1] sched: DL replenish lagged too much [ 542.530263][ T9846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.361488][ T1228] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 543.527977][ T1228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.528003][ T1228] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.529764][ T1228] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.529790][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 543.529809][ T1228] usb 4-1: SerialNumber: syz [ 543.896924][ T1228] usb 4-1: 0:2 : does not exist [ 544.058938][ T1228] usb 4-1: USB disconnect, device number 11 [ 548.912110][ T9813] udevd[9813]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.549902][ T9873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 550.595258][ T9873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 550.597761][ T9873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 550.599031][ T9873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 550.599886][ T9873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.953415][ T6032] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 551.106191][ T6032] usb 4-1: Using ep0 maxpacket: 16 [ 551.174344][ T6032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.174377][ T6032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.174416][ T6032] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 551.174439][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.268986][ T6032] usb 4-1: config 0 descriptor?? [ 552.012434][ T6032] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 552.012478][ T6032] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 552.012507][ T6032] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 552.012534][ T6032] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 552.012562][ T6032] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 552.091092][ T6032] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 552.219774][ T6032] corsair 0003:1B1C:1B02.0011: Read invalid backlight brightness: ce. [ 552.500197][ T9885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.514904][ T9885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.521882][ T9885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.557667][ T9885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.572510][ T9885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 554.263213][ T1245] usb 4-1: USB disconnect, device number 12 [ 555.853338][ T9885] Bluetooth: hci6: command tx timeout [ 555.853856][ T9885] Bluetooth: hci0: command tx timeout [ 557.933414][ T5157] Bluetooth: hci6: command tx timeout [ 557.934126][ T9885] Bluetooth: hci0: command tx timeout [ 560.973433][ T9885] Bluetooth: hci0: command tx timeout [ 560.973469][ T9885] Bluetooth: hci6: command tx timeout [ 561.691695][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 561.691721][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 563.143269][ T9873] Bluetooth: hci6: command tx timeout [ 563.143307][ T9873] Bluetooth: hci0: command tx timeout [ 563.394519][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.394608][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.370820][ T9914] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1144'. [ 572.934608][ T9873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 572.973775][ T9873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 572.978363][ T9873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 572.979785][ T9873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 572.982978][ T9873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.813069][ T5157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 573.852762][ T5157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 573.862163][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 573.888420][ T5157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 573.908776][ T5157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 575.133659][ T5157] Bluetooth: hci2: command tx timeout [ 576.013373][ T5157] Bluetooth: hci7: command tx timeout [ 577.213530][ T5157] Bluetooth: hci2: command tx timeout [ 578.093304][ T5157] Bluetooth: hci7: command tx timeout [ 579.293648][ T5157] Bluetooth: hci2: command tx timeout [ 580.203308][ T5157] Bluetooth: hci7: command tx timeout [ 581.375479][ T5157] Bluetooth: hci2: command tx timeout [ 581.837270][ T9873] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 581.858922][ T9873] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 581.860939][ T9873] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 581.862643][ T9873] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 581.885686][ T9873] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 582.253586][ T5157] Bluetooth: hci7: command tx timeout [ 583.933782][ T5157] Bluetooth: hci8: command tx timeout [ 586.013631][ T5157] Bluetooth: hci8: command tx timeout [ 588.096353][ T5157] Bluetooth: hci8: command tx timeout [ 590.173473][ T5157] Bluetooth: hci8: command tx timeout [ 605.759022][ T9873] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 605.779725][ T9873] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 605.791103][ T9873] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 605.792319][ T9873] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 605.813357][ T9873] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 607.853337][ T9873] Bluetooth: hci9: command tx timeout [ 609.808126][ T5157] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 609.842520][ T5157] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 609.858671][ T5157] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 609.859901][ T5157] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 609.866069][ T5157] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 609.938007][ T5157] Bluetooth: hci9: command tx timeout [ 611.933601][ T5157] Bluetooth: hci10: command tx timeout [ 612.017137][ T5157] Bluetooth: hci9: command tx timeout [ 612.303936][ T1493] team_slave_1 (unregistering): left allmulticast mode [ 614.013407][ T5157] Bluetooth: hci10: command tx timeout [ 614.095366][ T5157] Bluetooth: hci9: command tx timeout [ 615.023482][ T1493] team0 (unregistering): Port device team_slave_1 removed [ 616.093480][ T5157] Bluetooth: hci10: command tx timeout [ 616.260593][ T5157] Bluetooth: hci5: command 0x0405 tx timeout [ 618.173357][ T5157] Bluetooth: hci10: command tx timeout [ 624.431585][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.431661][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.771060][ T1493] team_slave_0 (unregistering): left allmulticast mode [ 633.610960][ T5157] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 633.640277][ T5157] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 633.641658][ T5157] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 633.662391][ T5157] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 633.670690][ T5157] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 634.502499][ T9873] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 634.527995][ T9873] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 634.529326][ T9873] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 634.531214][ T9873] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 634.563588][ T9873] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 635.574123][ T1493] team0 (unregistering): Port device team_slave_0 removed [ 635.773475][ T9873] Bluetooth: hci11: command tx timeout [ 636.653758][ T9873] Bluetooth: hci12: command tx timeout [ 637.857529][ T9873] Bluetooth: hci11: command tx timeout [ 638.736660][ T9873] Bluetooth: hci12: command tx timeout [ 639.934257][ T9873] Bluetooth: hci11: command tx timeout [ 640.813411][ T9873] Bluetooth: hci12: command tx timeout [ 642.013473][ T9873] Bluetooth: hci11: command tx timeout [ 642.792698][ T5157] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 642.815856][ T5157] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 642.817174][ T5157] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 642.822196][ T5157] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 642.869517][ T5157] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 642.893307][ T5157] Bluetooth: hci12: command tx timeout [ 644.983486][ T5157] Bluetooth: hci13: command tx timeout [ 647.054940][ T5157] Bluetooth: hci13: command tx timeout [ 649.133469][ T5157] Bluetooth: hci13: command tx timeout [ 651.213479][ T5157] Bluetooth: hci13: command tx timeout [ 657.693837][ T38] INFO: task dhcpcd:5503 blocked for more than 143 seconds. [ 657.693864][ T38] Not tainted syzkaller #0 [ 657.693874][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.693887][ T38] task:dhcpcd state:D stack:21320 pid:5503 tgid:5503 ppid:5502 task_flags:0x400140 flags:0x00004002 [ 657.693952][ T38] Call Trace: [ 657.693959][ T38] [ 657.693973][ T38] __schedule+0x16f3/0x4c20 [ 657.694039][ T38] ? __pfx___schedule+0x10/0x10 [ 657.694083][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.694111][ T38] rt_mutex_schedule+0x77/0xf0 [ 657.694130][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 657.694152][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 657.694192][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 657.694217][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 657.694239][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 657.694258][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.694292][ T38] ? devinet_ioctl+0x323/0x1b50 [ 657.694325][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 657.694352][ T38] ? devinet_ioctl+0x323/0x1b50 [ 657.694374][ T38] mutex_lock_nested+0x16a/0x1d0 [ 657.694400][ T38] devinet_ioctl+0x323/0x1b50 [ 657.694438][ T38] ? __pfx_devinet_ioctl+0x10/0x10 [ 657.694468][ T38] ? get_user_ifreq+0x12c/0x180 [ 657.694492][ T38] inet_ioctl+0x3c0/0x4c0 [ 657.694516][ T38] ? __pfx_inet_ioctl+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 657.694562][ T38] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 657.694591][ T38] sock_do_ioctl+0xdc/0x300 [ 657.694615][ T38] ? __pfx_sock_do_ioctl+0x10/0x10 [ 657.694655][ T38] ? __asan_memset+0x22/0x50 [ 657.694675][ T38] ? smack_file_ioctl+0x24d/0x340 [ 657.694703][ T38] sock_ioctl+0x579/0x790 [ 657.694728][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 657.694752][ T38] ? fd_install+0x313/0x550 [ 657.694779][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 657.694800][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 657.694820][ T38] __se_sys_ioctl+0xff/0x170 [ 657.694845][ T38] do_syscall_64+0xfa/0x3b0 [ 657.694861][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.694885][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.694902][ T38] ? clear_bhb_loop+0x60/0xb0 [ 657.694924][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.694947][ T38] RIP: 0033:0x7fc1ab8a4378 [ 657.694967][ T38] RSP: 002b:00007ffead1bfab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.694987][ T38] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fc1ab8a4378 [ 657.695000][ T38] RDX: 00007ffead1cfcb0 RSI: 0000000000008914 RDI: 000000000000001e [ 657.695013][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.695025][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffead1dfe50 [ 657.695037][ T38] R13: 00007fc1ab7a46c8 R14: 0000000000000028 R15: 0000000000008914 [ 657.695068][ T38] [ 657.695104][ T38] INFO: task kworker/u8:17:6142 blocked for more than 143 seconds. [ 657.695117][ T38] Not tainted syzkaller #0 [ 657.695126][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.695135][ T38] task:kworker/u8:17 state:D stack:21384 pid:6142 tgid:6142 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 657.695177][ T38] Workqueue: events_unbound linkwatch_event [ 657.695196][ T38] Call Trace: [ 657.695203][ T38] [ 657.695214][ T38] __schedule+0x16f3/0x4c20 [ 657.695265][ T38] ? __pfx___schedule+0x10/0x10 [ 657.695292][ T38] ? preempt_schedule+0xae/0xc0 [ 657.695327][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 657.695352][ T38] rt_mutex_schedule+0x77/0xf0 [ 657.695370][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 657.695390][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 657.695390][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 657.695430][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 657.695454][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 657.695476][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 657.695509][ T38] ? linkwatch_event+0xe/0x60 [ 657.695534][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 657.695561][ T38] ? linkwatch_event+0xe/0x60 [ 657.695578][ T38] mutex_lock_nested+0x16a/0x1d0 [ 657.695599][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 657.695623][ T38] linkwatch_event+0xe/0x60 [ 657.695648][ T38] process_scheduled_works+0xade/0x17b0 [ 657.695701][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.695742][ T38] worker_thread+0x8a0/0xda0 [ 657.695766][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 657.695800][ T38] ? __kthread_parkme+0x7b/0x200 [ 657.695834][ T38] kthread+0x70e/0x8a0 [ 657.695862][ T38] ? __pfx_worker_thread+0x10/0x10 [ 657.695883][ T38] ? __pfx_kthread+0x10/0x10 [ 657.695912][ T38] ? __pfx_kthread+0x10/0x10 [ 657.695938][ T38] ret_from_fork+0x436/0x7d0 [ 657.695963][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 657.695992][ T38] ? __switch_to_asm+0x39/0x70 [ 657.696008][ T38] ? __switch_to_asm+0x33/0x70 [ 657.696025][ T38] ? __pfx_kthread+0x10/0x10 [ 657.696050][ T38] ret_from_fork_asm+0x1a/0x30 [ 657.696085][ T38] [ 657.696102][ T38] INFO: task syz-executor:9451 blocked for more than 143 seconds. [ 657.696115][ T38] Not tainted syzkaller #0 [ 657.696125][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.696133][ T38] task:syz-executor state:D stack:22616 pid:9451 tgid:9451 ppid:1 task_flags:0x400140 flags:0x00004004 [ 657.696173][ T38] Call Trace: [ 657.696179][ T38] [ 657.696191][ T38] __schedule+0x16f3/0x4c20 [ 657.696227][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 657.696259][ T38] ? __pfx___schedule+0x10/0x10 [ 657.696309][ T38] rt_mutex_schedule+0x77/0xf0 [ 657.696326][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 657.696362][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 657.696387][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 657.696411][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 657.696432][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 657.696451][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.696485][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 657.696508][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 657.696532][ T38] ? bpf_lsm_capable+0x9/0x20 [ 657.696552][ T38] ? security_capable+0x7e/0x2e0 [ 657.696580][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 657.696600][ T38] mutex_lock_nested+0x16a/0x1d0 [ 657.696627][ T38] rtnl_newlink+0x8db/0x1c70 [ 657.696666][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.696690][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 657.696721][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.696814][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.696863][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 657.696885][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 657.696907][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.696931][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 657.696953][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.696993][ T38] netlink_rcv_skb+0x205/0x470 [ 657.697016][ T38] ? __lock_acquire+0xab9/0xd20 [ 657.697038][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.697062][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.697098][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.697130][ T38] netlink_unicast+0x843/0xa10 [ 657.697161][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 657.697185][ T38] ? netlink_sendmsg+0x642/0xb30 [ 657.697206][ T38] ? skb_put+0x11b/0x210 [ 657.697235][ T38] netlink_sendmsg+0x805/0xb30 [ 657.697269][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.697301][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.697320][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.697344][ T38] __sock_sendmsg+0x219/0x270 [ 657.697370][ T38] __sys_sendto+0x3c7/0x520 [ 657.697396][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 657.697435][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 657.697476][ T38] ? rcu_is_watching+0x15/0xb0 [ 657.697505][ T38] __x64_sys_sendto+0xde/0x100 [ 657.697533][ T38] do_syscall_64+0xfa/0x3b0 [ 657.697550][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.697574][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.697592][ T38] ? clear_bhb_loop+0x60/0xb0 [ 657.697614][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.697637][ T38] RIP: 0033:0x7fc7dd7a0abc [ 657.697652][ T38] RSP: 002b:00007ffdca825c40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 657.697671][ T38] RAX: ffffffffffffffda RBX: 00007fc7de514620 RCX: 00007fc7dd7a0abc [ 657.697685][ T38] RDX: 0000000000000068 RSI: 00007fc7de514670 RDI: 0000000000000003 [ 657.697704][ T38] RBP: 0000000000000000 R08: 00007ffdca825c94 R09: 000000000000000c [ 657.697717][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 657.697729][ T38] R13: 0000000000000000 R14: 00007fc7de514670 R15: 0000000000000000 [ 657.697759][ T38] [ 657.697788][ T38] [ 657.697788][ T38] Showing all locks held in the system: [ 657.697803][ T38] 3 locks held by kworker/u8:1/13: [ 657.697814][ T38] #0: ffff88814ccbf138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.697862][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.697909][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 657.697957][ T38] 2 locks held by rcuc/1/28: [ 657.697966][ T38] 2 locks held by ktimers/1/29: [ 657.697975][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 657.698020][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 657.698065][ T38] 1 lock held by khungtaskd/38: [ 657.698075][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 657.698130][ T38] 2 locks held by kworker/u8:7/1381: [ 657.698141][ T38] #0: ffff88801e344138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.698211][ T38] #1: ffffc9000521fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.698257][ T38] 4 locks held by kworker/u8:12/1493: [ 657.698268][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.698313][ T38] #1: ffffc9000569fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.698357][ T38] #2: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 657.698404][ T38] #3: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 657.698465][ T38] 1 lock held by dhcpcd/5503: [ 657.698475][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 657.698523][ T38] 2 locks held by getty/5598: [ 657.698533][ T38] #0: ffff88823bf340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 657.698581][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 657.698627][ T38] 1 lock held by syz-executor/5844: [ 657.698644][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 657.698696][ T38] 7 locks held by kworker/1:5/5918: [ 657.698707][ T38] 3 locks held by kworker/0:6/5927: [ 657.698718][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.698764][ T38] #1: ffffc9000537fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.698809][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 657.698853][ T38] 3 locks held by kworker/1:6/5945: [ 657.698864][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.698909][ T38] #1: ffffc900053bfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.698954][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 657.699003][ T38] 3 locks held by kworker/u8:17/6142: [ 657.699013][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.699058][ T38] #1: ffffc90006267bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.699103][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 657.699149][ T38] 2 locks held by syz-executor/9451: [ 657.699159][ T38] #0: ffffffff8e43b9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 657.699210][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 657.699256][ T38] 4 locks held by kworker/1:0/9455: [ 657.699266][ T38] #0: ffff8880489a8938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.699315][ T38] #1: ffffc90005f3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.699375][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 657.699418][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 657.699463][ T38] 1 lock held by syz.2.1114/9817: [ 657.699474][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 657.699517][ T38] 1 lock held by syz-executor/9870: [ 657.699528][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.699571][ T38] 1 lock held by syz-executor/9883: [ 657.699582][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.699625][ T38] 2 locks held by syz.5.1139/9895: [ 657.699641][ T38] #0: ffffffff8f1d7e08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 657.699692][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 657.699737][ T38] 1 lock held by syz.3.1141/9901: [ 657.699747][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 657.699793][ T38] 4 locks held by kworker/1:11/9911: [ 657.699804][ T38] #0: ffff88805c227538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 657.699853][ T38] #1: ffffc9000539fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 657.699911][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 657.699955][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 657.700000][ T38] 1 lock held by syz.1.1144/9914: [ 657.700010][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x107/0x2f0 [ 657.700054][ T38] 1 lock held by syz-executor/9917: [ 657.700065][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700106][ T38] 1 lock held by syz-executor/9921: [ 657.700117][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700160][ T38] 1 lock held by syz-executor/9924: [ 657.700170][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700213][ T38] 1 lock held by syz-executor/9930: [ 657.700224][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700266][ T38] 1 lock held by syz-executor/9936: [ 657.700277][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700320][ T38] 1 lock held by syz-executor/9944: [ 657.700330][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700373][ T38] 1 lock held by syz-executor/9949: [ 657.700383][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700434][ T38] 1 lock held by syz-executor/9952: [ 657.700445][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 657.700487][ T38] [ 657.700492][ T38] ============================================= [ 657.700492][ T38] [ 657.700508][ T38] NMI backtrace for cpu 0 [ 657.700531][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 657.700552][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.700562][ T38] Call Trace: [ 657.700570][ T38] [ 657.700577][ T38] dump_stack_lvl+0x189/0x250 [ 657.700605][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.700628][ T38] ? __pfx__printk+0x10/0x10 [ 657.700666][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 657.700696][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 657.700720][ T38] ? __pfx__printk+0x10/0x10 [ 657.700742][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 657.700766][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 657.700791][ T38] watchdog+0xf93/0xfe0 [ 657.700818][ T38] ? watchdog+0x1de/0xfe0 [ 657.700845][ T38] kthread+0x70e/0x8a0 [ 657.700871][ T38] ? __pfx_watchdog+0x10/0x10 [ 657.700891][ T38] ? __pfx_kthread+0x10/0x10 [ 657.700920][ T38] ? __pfx_kthread+0x10/0x10 [ 657.700944][ T38] ret_from_fork+0x436/0x7d0 [ 657.700968][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 657.700995][ T38] ? __switch_to_asm+0x39/0x70 [ 657.701011][ T38] ? __switch_to_asm+0x33/0x70 [ 657.701026][ T38] ? __pfx_kthread+0x10/0x10 [ 657.701049][ T38] ret_from_fork_asm+0x1a/0x30 [ 657.701082][ T38] [ 657.701089][ T38] Sending NMI from CPU 0 to CPUs 1: [ 657.701116][ C1] NMI backtrace for cpu 1 [ 657.701130][ C1] CPU: 1 UID: 0 PID: 5918 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 657.701147][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.701158][ C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 657.701180][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1e/0x80 [ 657.701198][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 f6 91 65 8b 35 d8 d1 37 10 81 e6 00 00 ff 00 00 01 00 00 23 91 0c 0b 00 00 89 d7 09 f7 74 11 85 f6 75 39 85 [ 657.701211][ C1] RSP: 0018:ffffc900052ee118 EFLAGS: 00000246 [ 657.701224][ C1] RAX: ffffffff89859953 RBX: 0000000000000000 RCX: ffff888030aebb80 [ 657.701236][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 657.701245][ C1] RBP: 00000000000000fe R08: 0000000000000000 R09: 0000000000000100 [ 657.701255][ C1] R10: ffffc900052ee380 R11: fffff52000a5dc76 R12: ffff88803c72e220 [ 657.701266][ C1] R13: 0000000000000000 R14: ffff88803a773e80 R15: ffffc900052ee520 [ 657.701278][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 657.701290][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.701302][ C1] CR2: 00007f71494dcf98 CR3: 0000000035f40000 CR4: 00000000003526f0 [ 657.701316][ C1] Call Trace: [ 657.701321][ C1] [ 657.701327][ C1] trace_fib_table_lookup+0x23/0x200 [ 657.701350][ C1] fib_table_lookup+0x11ba/0x16e0 [ 657.701388][ C1] fib_lookup+0x1c5/0x440 [ 657.701402][ C1] ? fib_lookup+0x76/0x440 [ 657.701417][ C1] ip_route_output_key_hash_rcu+0x31b/0x23e0 [ 657.701437][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 657.701451][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 657.701468][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 657.701483][ C1] ? __lock_acquire+0xab9/0xd20 [ 657.701501][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 657.701520][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 657.701541][ C1] ip_route_output_flow+0x2a/0x150 [ 657.701554][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 657.701571][ C1] ip_route_me_harder+0x6d2/0x1030 [ 657.701594][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 657.701624][ C1] synproxy_send_tcp+0x359/0x6c0 [ 657.701649][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 657.701675][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 657.701693][ C1] ? nft_synproxy_eval_v6+0x1b8/0x560 [ 657.701709][ C1] ? synproxy_pernet+0x45/0x270 [ 657.701727][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 657.701745][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 657.701763][ C1] ? nf_ip_checksum+0x13c/0x510 [ 657.701780][ C1] nft_synproxy_do_eval+0x345/0x570 [ 657.701799][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 657.701823][ C1] nft_do_chain+0x409/0x1920 [ 657.701838][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 657.701858][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 657.701886][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 657.701906][ C1] nft_do_chain_inet+0x25d/0x340 [ 657.701921][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 657.701935][ C1] ? __lock_acquire+0xab9/0xd20 [ 657.701957][ C1] ? NF_HOOK+0x9a/0x3a0 [ 657.701975][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 657.701991][ C1] nf_hook_slow+0xc2/0x220 [ 657.702012][ C1] NF_HOOK+0x206/0x3a0 [ 657.702030][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 657.702048][ C1] ? NF_HOOK+0x9a/0x3a0 [ 657.702065][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 657.702081][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 657.702100][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 657.702119][ C1] ? skb_dst+0x4f/0xd0 [ 657.702136][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 657.702155][ C1] NF_HOOK+0x30c/0x3a0 [ 657.702173][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 657.702190][ C1] ? NF_HOOK+0x9a/0x3a0 [ 657.702207][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 657.702226][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 657.702249][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 657.702265][ C1] __netif_receive_skb+0x143/0x380 [ 657.702282][ C1] ? rt_spin_unlock+0x65/0x80 [ 657.702301][ C1] ? process_backlog+0x27b/0x900 [ 657.702318][ C1] process_backlog+0x31e/0x900 [ 657.702341][ C1] __napi_poll+0xb6/0x540 [ 657.702360][ C1] net_rx_action+0x707/0xe00 [ 657.702390][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 657.702409][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 657.702433][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 657.702455][ C1] handle_softirqs+0x22f/0x710 [ 657.702477][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 657.702499][ C1] __local_bh_enable_ip+0x179/0x270 [ 657.702516][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 657.702533][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 657.702556][ C1] wg_packet_decrypt_worker+0x2e0/0xce0 [ 657.702579][ C1] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 657.702600][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 657.702628][ C1] ? rcu_is_watching+0x15/0xb0 [ 657.702647][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 657.702666][ C1] ? __schedule+0x1709/0x4c20 [ 657.702689][ C1] ? __lock_acquire+0xab9/0xd20 [ 657.702711][ C1] ? do_raw_spin_lock+0x121/0x290 [ 657.702731][ C1] ? look_up_lock_class+0x74/0x170 [ 657.702750][ C1] ? register_lock_class+0x51/0x320 [ 657.702771][ C1] ? __lock_acquire+0xab9/0xd20 [ 657.702793][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 657.702813][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.702831][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 657.702848][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 657.702865][ C1] process_scheduled_works+0xade/0x17b0 [ 657.702896][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.702921][ C1] worker_thread+0x8a0/0xda0 [ 657.702951][ C1] kthread+0x70e/0x8a0 [ 657.702971][ C1] ? __pfx_worker_thread+0x10/0x10 [ 657.702987][ C1] ? __pfx_kthread+0x10/0x10 [ 657.703008][ C1] ? __pfx_kthread+0x10/0x10 [ 657.703027][ C1] ret_from_fork+0x436/0x7d0 [ 657.703045][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 657.703066][ C1] ? __switch_to_asm+0x39/0x70 [ 657.703079][ C1] ? __switch_to_asm+0x33/0x70 [ 657.703094][ C1] ? __pfx_kthread+0x10/0x10 [ 657.703111][ C1] ret_from_fork_asm+0x1a/0x30 [ 657.703129][ C1] [ 658.119232][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 658.119252][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 658.119274][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.119285][ T38] Call Trace: [ 658.119293][ T38] [ 658.119302][ T38] dump_stack_lvl+0x99/0x250 [ 658.119331][ T38] ? __asan_memcpy+0x40/0x70 [ 658.119360][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.119383][ T38] ? __pfx__printk+0x10/0x10 [ 658.119416][ T38] vpanic+0x281/0x750 [ 658.119442][ T38] ? __pfx_vpanic+0x10/0x10 [ 658.119463][ T38] ? irqentry_exit+0x74/0x90 [ 658.119485][ T38] ? preempt_schedule+0xae/0xc0 [ 658.119510][ T38] ? preempt_schedule_common+0x83/0xd0 [ 658.119539][ T38] panic+0xb9/0xc0 [ 658.119561][ T38] ? __pfx_panic+0x10/0x10 [ 658.119585][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 658.119610][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 658.119634][ T38] watchdog+0xfd2/0xfe0 [ 658.119661][ T38] ? watchdog+0x1de/0xfe0 [ 658.119688][ T38] kthread+0x70e/0x8a0 [ 658.119715][ T38] ? __pfx_watchdog+0x10/0x10 [ 658.119735][ T38] ? __pfx_kthread+0x10/0x10 [ 658.119764][ T38] ? __pfx_kthread+0x10/0x10 [ 658.119793][ T38] ret_from_fork+0x436/0x7d0 [ 658.119817][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 658.119845][ T38] ? __switch_to_asm+0x39/0x70 [ 658.119861][ T38] ? __switch_to_asm+0x33/0x70 [ 658.119876][ T38] ? __pfx_kthread+0x10/0x10 [ 658.119900][ T38] ret_from_fork_asm+0x1a/0x30 [ 658.119933][ T38] [ 658.120193][ T38] Kernel Offset: disabled