last executing test programs: 2m28.113701321s ago: executing program 4 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f0000000040)={[{@nr_blocks}]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e00000000300000000000000000000000000000001"]) 2m27.459003701s ago: executing program 4 (id=329): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m27.30317637s ago: executing program 4 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fe9cf8b376a000fd3c27b65334f14a41"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6ef6cd0259bb"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x44}}, 0x0) 2m27.129719549s ago: executing program 4 (id=334): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 2m26.248107156s ago: executing program 4 (id=340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_GET_TSC(0x43, 0x0) 2m24.89001966s ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2m21.996901154s ago: executing program 1 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.535525685s ago: executing program 1 (id=387): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) io_uring_setup(0x497c, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c90010000c000500150308"], 0x15) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0xfffffff9}}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysv\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 2m20.263389468s ago: executing program 1 (id=388): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000900)="f3", 0x1) poll(&(0x7f0000000300)=[{r1, 0x4061}], 0x1, 0x46fb) 2m16.582166635s ago: executing program 1 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080006004d564b"]) 2m16.403790227s ago: executing program 1 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffffffffffef1, {0xf000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 2m16.103377589s ago: executing program 1 (id=411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = userfaultfd(0x801) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 2m9.814647774s ago: executing program 32 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2m0.974055321s ago: executing program 33 (id=411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = userfaultfd(0x801) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 37.844254601s ago: executing program 2 (id=1044): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f0000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 37.439222762s ago: executing program 2 (id=1047): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x73a}], 0x1, 0x40002100, 0x0) 37.196772054s ago: executing program 3 (id=1049): syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaa8c40aaaaaaeeb507030c9608004800006400000000002f9078ac1414bbac141414890754e000000186020000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000d32dd41676472588c1176957a2a063161f232a1d30262ad5081c901b346c2135bd83e05e941351085389"], 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f203"]) 37.18258143s ago: executing program 5 (id=1050): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000000000002"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 36.953882634s ago: executing program 5 (id=1052): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) 36.833181374s ago: executing program 3 (id=1053): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) 36.698229121s ago: executing program 5 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0xe}, {&(0x7f0000000600)="9b1266926bac6fe17589a03ea03dd982ae36633c", 0x14}, {0x0}], 0x3) 36.673413276s ago: executing program 3 (id=1056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$rds(0x15, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) recvmmsg(r1, &(0x7f00000048c0), 0x0, 0x10122, 0x0) 35.887002619s ago: executing program 2 (id=1060): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) 35.819631295s ago: executing program 3 (id=1062): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1], [0x0, 0x8, 0x1]}}]}}]}, 0x8c}}, 0x0) 35.042916885s ago: executing program 6 (id=1065): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000180)='fd/4\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086604, 0x0) 34.935070635s ago: executing program 2 (id=1066): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000680)=0x66c0, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 34.81209281s ago: executing program 6 (id=1068): unshare(0x20040600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 33.410635656s ago: executing program 0 (id=1072): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)='D', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5", 0x1}], 0x1}}], 0x2, 0xc0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 33.250124746s ago: executing program 5 (id=1073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$rds(0x15, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) recvmmsg(r1, &(0x7f00000048c0), 0x0, 0x10122, 0x0) 32.569913119s ago: executing program 6 (id=1074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 32.569391744s ago: executing program 2 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) close(0x3) 32.568704114s ago: executing program 3 (id=1076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf50"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 32.427864573s ago: executing program 0 (id=1077): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="66af9d98e65017441a114c00000000009500000000000000dc2fe9ead370d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 32.426959104s ago: executing program 6 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0xa, 0x2}]}, 0x10) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 32.333404457s ago: executing program 0 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)={0x9, "f2942c0a261a118844"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000001c0)={0x0, 0xae9, &(0x7f0000000240), 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.005868342s ago: executing program 2 (id=1080): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x0, 0x4}, {0x0, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 31.990839357s ago: executing program 0 (id=1081): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 31.944588505s ago: executing program 6 (id=1082): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000280)={@id={0x2, 0x0, @d}, 0xfffffffffffffd71, 0x0, '\x00', @c}) 31.797894139s ago: executing program 6 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x7}) 31.797348479s ago: executing program 5 (id=1084): lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.658417993s ago: executing program 0 (id=1085): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x84f05) 31.595358936s ago: executing program 0 (id=1086): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000180)) tkill(r0, 0x7) 31.505924736s ago: executing program 5 (id=1087): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101", 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.498000654s ago: executing program 3 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 707.028044ms ago: executing program 34 (id=1086): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000180)) tkill(r0, 0x7) 605.145774ms ago: executing program 35 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x7}) 479.229767ms ago: executing program 36 (id=1080): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x0, 0x4}, {0x0, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 156.557367ms ago: executing program 37 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 0s ago: executing program 38 (id=1087): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101", 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 'syz.3.429': attribute type 2 has an invalid length. [ 139.238060][ T7012] netlink: 177 bytes leftover after parsing attributes in process `syz.3.429'. [ 139.364686][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 139.378352][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.405080][ T5827] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.426931][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.437797][ T5827] usb 3-1: config 0 descriptor?? [ 139.686816][ T5827] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 139.932120][ T5827] usb 3-1: USB disconnect, device number 11 [ 139.932190][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 139.980566][ T5827] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 140.083960][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.095363][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.104168][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.119380][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.128566][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 140.174518][ T5881] usb 1-1: USB disconnect, device number 8 [ 140.182752][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.991533][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 141.052192][ T7034] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 141.079172][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.087274][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.099232][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.106431][ T7034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.114505][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.121652][ T7034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.133902][ T7034] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.200005][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 141.210089][ T7036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.216536][ T7036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.258724][ T7036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.280633][ T7036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.293991][ T7036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.313242][ T7036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.334530][ T7036] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 141.342819][ T7036] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.359825][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.381911][ T7036] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 141.397514][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.421187][ T7024] bridge_slave_0: entered allmulticast mode [ 141.435729][ T7024] bridge_slave_0: entered promiscuous mode [ 141.450206][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.464612][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.482160][ T7024] bridge_slave_1: entered allmulticast mode [ 141.490137][ T7024] bridge_slave_1: entered promiscuous mode [ 141.582297][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.596196][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.669797][ T7024] team0: Port device team_slave_0 added [ 141.689615][ T7024] team0: Port device team_slave_1 added [ 141.741147][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.748787][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.775586][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.796726][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.803705][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.830548][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.868418][ T7053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.916688][ T7024] hsr_slave_0: entered promiscuous mode [ 141.926228][ T7024] hsr_slave_1: entered promiscuous mode [ 141.933095][ T7024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.943439][ T7024] Cannot create hsr debugfs directory [ 142.165846][ T7063] bridge0: port 3(syz_tun) entered blocking state [ 142.173594][ T7063] bridge0: port 3(syz_tun) entered disabled state [ 142.181021][ T7063] syz_tun: entered allmulticast mode [ 142.196711][ T7063] syz_tun: left allmulticast mode [ 142.243745][ T7024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.269564][ T7024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.300017][ T7024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.349585][ T7024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.475494][ T7073] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 142.491941][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.519863][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.531862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.539020][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.579477][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.586647][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.754728][ T7076] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 143.049925][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.255005][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.344857][ T5830] Bluetooth: hci5: command 0x041b tx timeout [ 143.345142][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.549146][ T5846] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 144.210816][ T7024] veth0_vlan: entered promiscuous mode [ 144.238284][ T7024] veth1_vlan: entered promiscuous mode [ 144.263188][ T7024] veth0_macvtap: entered promiscuous mode [ 144.275038][ T7024] veth1_macvtap: entered promiscuous mode [ 144.291786][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.302918][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.312843][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.323352][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.333240][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.343811][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.353848][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.364425][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.374260][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.384826][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.396242][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.422651][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.433491][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.454497][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.468294][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.478190][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.488710][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.498720][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.509352][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.519276][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.529788][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.540980][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.551818][ T7024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.560603][ T7024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.569644][ T7024] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.578727][ T7024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.686977][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.712425][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.752187][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.762084][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.336232][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.414547][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 145.414771][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.695079][ T5881] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.797752][ T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.871058][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.883511][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.894842][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.906475][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.924014][ T5881] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.942145][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.952647][ T5881] usb 6-1: config 0 descriptor?? [ 145.958942][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.007936][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.039697][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.050383][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.103475][ T7136] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.120593][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.176547][ T7150] macsec0: entered promiscuous mode [ 146.210683][ T7150] veth1_macvtap: left promiscuous mode [ 146.251914][ T7150] macsec0 (unregistering): left promiscuous mode [ 146.381232][ T5881] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 146.423279][ T5881] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 146.426396][ T47] usb 4-1: USB disconnect, device number 16 [ 146.597377][ T5900] IPVS: starting estimator thread 0... [ 146.608143][ T7159] tipc: Started in network mode [ 146.613629][ T7159] tipc: Node identity ac1414aa, cluster identity 4711 [ 146.623446][ T7159] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.630783][ T7159] tipc: Enabled bearer , priority 10 [ 146.705341][ T7162] IPVS: using max 16 ests per chain, 38400 per kthread [ 146.755347][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.834892][ T3615] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.894519][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.023410][ T3615] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.035261][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.045645][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.063498][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.095014][ T3615] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.108190][ T3615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.117693][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.132895][ T3615] usb 1-1: config 0 descriptor?? [ 147.174991][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.236428][ T5883] usb 6-1: USB disconnect, device number 2 [ 147.314463][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.414729][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.454590][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.495619][ T5140] Bluetooth: hci5: command 0x041b tx timeout [ 147.511895][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.594436][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.865021][ T7195] xt_hashlimit: overflow, rate too high: 0 [ 148.193492][ T3615] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 148.208347][ T3615] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 148.217291][ T5900] tipc: Node number set to 2886997162 [ 148.235173][ T3615] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 148.264580][ T970] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 148.294560][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.464255][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.500782][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.532802][ T970] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 148.564487][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.564661][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.615776][ T970] usb 4-1: config 0 descriptor?? [ 148.627647][ T970] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 148.735737][ T970] usb 1-1: USB disconnect, device number 9 [ 148.940121][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.950136][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.970006][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.981201][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.991398][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.006217][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.094509][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.112884][ T7213] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.215551][ T7210] chnl_net:caif_netlink_parms(): no params data found [ 149.390200][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.403716][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.415494][ T7210] bridge_slave_0: entered allmulticast mode [ 149.422554][ T7210] bridge_slave_0: entered promiscuous mode [ 149.433716][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.441302][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.448801][ T7210] bridge_slave_1: entered allmulticast mode [ 149.458503][ T7210] bridge_slave_1: entered promiscuous mode [ 149.517827][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.547293][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.577218][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 149.666557][ T7210] team0: Port device team_slave_0 added [ 149.681723][ T7210] team0: Port device team_slave_1 added [ 149.715412][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.722875][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.752128][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.754767][ T3615] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.767155][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.783204][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.819437][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.887155][ T7210] hsr_slave_0: entered promiscuous mode [ 149.894201][ T7210] hsr_slave_1: entered promiscuous mode [ 149.901393][ T7210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.910281][ T7210] Cannot create hsr debugfs directory [ 149.934846][ T3615] usb 1-1: Using ep0 maxpacket: 8 [ 149.944857][ T3615] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.959648][ T3615] usb 1-1: config 0 has no interface number 0 [ 149.975904][ T3615] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.990081][ T3615] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.015183][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.046645][ T3615] usb 1-1: config 0 descriptor?? [ 150.065509][ T3615] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 150.134447][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 150.171845][ T7231] sctp: [Deprecated]: syz.5.499 (pid 7231) Use of int in max_burst socket option deprecated. [ 150.171845][ T7231] Use struct sctp_assoc_value instead [ 150.275566][ T7210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.306273][ T7210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.328885][ T7210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.341012][ T7210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.532776][ T7236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.617717][ T5916] usb 4-1: USB disconnect, device number 17 [ 150.646527][ T7238] ip_vti0: entered promiscuous mode [ 150.652062][ T7238] vlan2: entered promiscuous mode [ 150.734297][ T7238] ip_vti0: left promiscuous mode [ 150.859769][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.927597][ T7210] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.960669][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.967927][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.023495][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.030691][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.105515][ T7210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.116221][ T7210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.134741][ T5846] Bluetooth: hci6: command tx timeout [ 151.137625][ T5827] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 151.174547][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.346579][ T5916] usb 1-1: USB disconnect, device number 10 [ 151.391611][ T5827] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.392049][ T5916] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 151.404752][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.443103][ T5827] usb 4-1: Product: syz [ 151.454651][ T5827] usb 4-1: Manufacturer: syz [ 151.474660][ T5827] usb 4-1: SerialNumber: syz [ 151.485727][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.515353][ T5827] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.597490][ T5880] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.665815][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 151.869599][ T5827] usb 4-1: USB disconnect, device number 18 [ 151.941767][ T7210] veth0_vlan: entered promiscuous mode [ 151.953861][ T7210] veth1_vlan: entered promiscuous mode [ 151.981994][ T7210] veth0_macvtap: entered promiscuous mode [ 151.991352][ T7210] veth1_macvtap: entered promiscuous mode [ 152.007027][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.017645][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.027744][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.038473][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.048652][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.059573][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.071712][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.082299][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.092213][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.102708][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.112618][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.123130][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.137439][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.147341][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.157883][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.167860][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.182253][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.192188][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.202758][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.212687][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.223251][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.230362][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.240231][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.250769][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.260643][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.271766][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.282805][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.292886][ T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.310249][ T7210] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.319483][ T7210] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.328501][ T7210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.337405][ T7210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.464939][ T47] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 152.474047][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.504929][ T47] usb 3-1: Product: syz [ 152.513254][ T47] usb 3-1: Manufacturer: syz [ 152.521030][ T7086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.535441][ T47] usb 3-1: SerialNumber: syz [ 152.546368][ T47] usb 3-1: config 0 descriptor?? [ 152.547067][ T7086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.576139][ T7263] mmap: syz.5.510 (7263) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.615966][ T5880] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 152.623609][ T5880] ath9k_htc: Failed to initialize the device [ 152.624086][ T7086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.639140][ T7086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.658274][ T5827] usb 4-1: ath9k_htc: USB layer deinitialized [ 152.962540][ T47] mos7840 3-1:0.0: required endpoints missing [ 152.980903][ T47] usb 3-1: USB disconnect, device number 12 [ 152.995277][ T5827] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 153.084496][ T5916] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.125211][ T7290] netlink: 132 bytes leftover after parsing attributes in process `syz.6.518'. [ 153.136409][ T7290] netlink: 'syz.6.518': attribute type 10 has an invalid length. [ 153.152157][ T7290] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.164632][ T5900] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 153.165345][ T5827] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.08 [ 153.174748][ T5846] Bluetooth: hci6: command tx timeout [ 153.188339][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.198110][ T5827] usb 4-1: Product: syz [ 153.202604][ T5827] usb 4-1: Manufacturer: syz [ 153.208465][ T5827] usb 4-1: SerialNumber: syz [ 153.254149][ T5827] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 153.254434][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.281378][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.312210][ T5916] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.323867][ T5916] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.335192][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.341906][ T5916] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 153.351783][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.361744][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.371650][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.386739][ T5916] usb 1-1: config 0 descriptor?? [ 153.391990][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.408825][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.469359][ T35] usb 4-1: Failed to submit usb control message: -71 [ 153.469615][ T5880] usb 4-1: USB disconnect, device number 19 [ 153.476845][ T35] usb 4-1: unable to send the bmi data to the device: -71 [ 153.490789][ T35] usb 4-1: unable to get target info from device [ 153.513470][ T35] usb 4-1: could not get target info (-71) [ 153.522394][ T35] usb 4-1: could not probe fw (-71) [ 153.570785][ T5827] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 153.631472][ T5900] usb 6-1: usb_control_msg returned -32 [ 153.644194][ T5900] usbtmc 6-1:16.0: can't read capabilities [ 153.734828][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 153.754820][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 153.761490][ T5827] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 153.770989][ T5827] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 153.782135][ T5827] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 153.793265][ T5827] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 153.813381][ T5827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.823896][ T5916] zeroplus 0003:0C12:0005.000F: item fetching failed at offset 1/5 [ 153.830582][ T5827] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 153.832603][ T5916] zeroplus 0003:0C12:0005.000F: parse failed [ 153.846885][ T5827] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.847040][ T5916] zeroplus 0003:0C12:0005.000F: probe with driver zeroplus failed with error -22 [ 153.879443][ T5827] usb 7-1: Product: syz [ 153.883626][ T5827] usb 7-1: Manufacturer: syz [ 153.888552][ T5827] usb 7-1: SerialNumber: syz [ 153.899756][ T5827] usb 7-1: config 0 descriptor?? [ 153.913221][ T5827] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.928207][ T5827] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 154.029411][ T5916] usb 1-1: USB disconnect, device number 11 [ 154.125163][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.135628][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.146357][ T7295] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 154.154971][ T5913] usb 7-1: USB disconnect, device number 2 [ 154.162252][ T5913] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 154.188266][ T5827] usb 6-1: USB disconnect, device number 3 [ 154.294873][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.344539][ T5900] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 154.497265][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.521316][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.547730][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.567915][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.589920][ T5900] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.601615][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.628530][ T5900] usb 4-1: config 0 descriptor?? [ 154.769112][ T970] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 154.812231][ T29] audit: type=1400 audit(1729795538.812:22): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=7310 comm="syz.5.526" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 154.994873][ T970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.006030][ T970] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.041009][ T970] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.072746][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.083422][ T970] usb 3-1: SerialNumber: syz [ 155.274597][ T5846] Bluetooth: hci6: command tx timeout [ 155.334463][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.884526][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 156.374486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.306710][ T7321] netlink: 'syz.6.530': attribute type 1 has an invalid length. [ 157.334784][ T5846] Bluetooth: hci6: command tx timeout [ 157.414473][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.474483][ T7321] netlink: 'syz.6.530': attribute type 2 has an invalid length. [ 158.454441][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.482798][ T970] usb 3-1: can't set config #1, error -71 [ 158.491363][ T970] usb 3-1: USB disconnect, device number 13 [ 158.518585][ T5900] usbhid 4-1:0.0: can't add hid device: -71 [ 158.533701][ T7319] netlink: 'syz.6.530': attribute type 1 has an invalid length. [ 158.548298][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.569806][ T5900] usb 4-1: USB disconnect, device number 20 [ 158.584487][ T7319] netlink: 'syz.6.530': attribute type 2 has an invalid length. [ 159.494850][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.557769][ T7342] syz.6.538[7342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.557876][ T7342] syz.6.538[7342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.579827][ T7342] syz.6.538[7342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.581383][ T7344] netlink: 'syz.2.539': attribute type 9 has an invalid length. [ 159.593299][ T7344] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.539'. [ 159.674519][ T3615] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 159.682273][ T5900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 159.845659][ T3615] usb 1-1: Using ep0 maxpacket: 8 [ 159.871454][ T3615] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 159.881913][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.903892][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.915037][ T3615] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.935681][ T3615] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.945893][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.962693][ T3615] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.974223][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.975200][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.994913][ T3615] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.011996][ T5900] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.021754][ T3615] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.031243][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.040792][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.051368][ T5900] usb 4-1: config 0 descriptor?? [ 160.303511][ T3615] usb 1-1: usb_control_msg returned -32 [ 160.320489][ T3615] usbtmc 1-1:16.0: can't read capabilities [ 160.464560][ T5827] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 160.476876][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.484897][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.492336][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.500341][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.507981][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.515922][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.523359][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.532021][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.540183][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.548598][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.556215][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.563631][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.571755][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.579923][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.587452][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.595012][ T5900] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 160.602813][ T5900] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 160.613550][ T5900] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 160.644248][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.661569][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.675988][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.684868][ T3615] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.705941][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.723192][ T5827] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.734033][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.749197][ T5827] usb 7-1: config 0 descriptor?? [ 160.847003][ T3615] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 160.856435][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.869191][ T3615] usb 3-1: config 0 descriptor?? [ 161.169940][ T5827] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 161.186593][ T5827] plantronics 0003:047F:FFFF.0011: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 161.239238][ T5827] usb 4-1: USB disconnect, device number 21 [ 161.291941][ T5900] usb 1-1: USB disconnect, device number 12 [ 161.319296][ T7367] batadv_slave_1: entered promiscuous mode [ 161.333977][ T7366] batadv_slave_1: left promiscuous mode [ 161.386308][ T5880] usb 7-1: USB disconnect, device number 3 [ 161.574800][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.707304][ T3615] usb 3-1: Cannot set autoneg [ 161.712220][ T3615] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 161.741138][ T29] audit: type=1326 audit(1729795545.742:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9017e719 code=0x7ffc0000 [ 161.755101][ T3615] usb 3-1: USB disconnect, device number 14 [ 161.783382][ T29] audit: type=1326 audit(1729795545.762:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbd9017e719 code=0x7ffc0000 [ 161.808294][ T29] audit: type=1326 audit(1729795545.772:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9017e719 code=0x7ffc0000 [ 161.861176][ T29] audit: type=1326 audit(1729795545.772:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbd9017e719 code=0x7ffc0000 [ 161.987124][ T29] audit: type=1326 audit(1729795545.772:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.5.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9017e719 code=0x7ffc0000 [ 162.274548][ T970] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 162.460497][ T970] usb 7-1: Using ep0 maxpacket: 8 [ 162.476245][ T970] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 162.488507][ T970] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.498908][ T970] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.509235][ T970] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.523072][ T970] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.532381][ T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.534643][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.614766][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.714632][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 162.728895][ T5900] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 162.742912][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.753817][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.770759][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.771930][ T970] usb 7-1: usb_control_msg returned -32 [ 162.796477][ T970] usbtmc 7-1:16.0: can't read capabilities [ 162.797234][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.810679][ T5900] usb 3-1: Product: syz [ 162.822419][ T5900] usb 3-1: Manufacturer: syz [ 162.827522][ T5900] usb 3-1: SerialNumber: syz [ 163.025177][ T7393] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 163.155020][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 163.183990][ T7400] usbtmc 7-1:16.0: Unable to send data, error -71 [ 163.293248][ T5900] usb 3-1: 0:2 : does not exist [ 163.654774][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.419085][ T5900] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 164.454115][ T5900] usb 3-1: USB disconnect, device number 15 [ 164.526835][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.598320][ T7412] hsr0: entered allmulticast mode [ 164.611070][ T7412] hsr_slave_0: entered allmulticast mode [ 164.634178][ T7412] hsr_slave_1: entered allmulticast mode [ 164.643393][ T7412] hsr_slave_0: left promiscuous mode [ 164.659846][ T7412] hsr_slave_1: left promiscuous mode [ 164.689909][ T7412] hsr0 (unregistering): left allmulticast mode [ 164.696464][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.042159][ T5883] usb 7-1: USB disconnect, device number 4 [ 165.084660][ T5916] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 165.287588][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.299521][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.310512][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.344821][ T5916] usb 6-1: New USB device found, idVendor=045e, idProduct=83da, bcdDevice= 0.2c [ 165.363594][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.400548][ T5916] usb 6-1: config 0 descriptor?? [ 165.734419][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.744775][ T970] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.838446][ T5916] hid-generic 0003:045E:83DA.0012: unknown main item tag 0x0 [ 165.863311][ T5916] hid-generic 0003:045E:83DA.0012: unknown main item tag 0x0 [ 165.873151][ T5916] hid-generic 0003:045E:83DA.0012: unknown main item tag 0x0 [ 165.881928][ T5916] hid-generic 0003:045E:83DA.0012: unbalanced collection at end of report description [ 165.896151][ T5916] hid-generic 0003:045E:83DA.0012: probe with driver hid-generic failed with error -22 [ 165.926887][ T970] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 165.953562][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.986569][ T970] usb 3-1: config 0 descriptor?? [ 166.091760][ T5883] usb 6-1: USB disconnect, device number 4 [ 166.616436][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 166.774789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.844648][ T5883] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 167.039300][ T5883] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.049095][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.064154][ T5883] usb 7-1: Product: syz [ 167.081741][ T5883] usb 7-1: Manufacturer: syz [ 167.089680][ T5883] usb 7-1: SerialNumber: syz [ 167.138574][ T5883] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.174842][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 167.176794][ T5827] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.228765][ T970] usb 3-1: Cannot set autoneg [ 167.233826][ T970] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 167.285832][ T970] usb 3-1: USB disconnect, device number 16 [ 167.571574][ T5883] usb 7-1: USB disconnect, device number 5 [ 167.814420][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.110818][ T7511] netlink: 'syz.2.600': attribute type 13 has an invalid length. [ 168.130214][ T7511] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.600'. [ 168.296631][ T5827] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 168.317790][ T5827] ath9k_htc: Failed to initialize the device [ 168.338213][ T5883] usb 7-1: ath9k_htc: USB layer deinitialized [ 168.524603][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.644967][ T5883] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 168.684993][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 168.706141][ T5881] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 168.730716][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.751721][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.804610][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.826077][ T5881] usbtmc 3-1:16.0: bulk endpoints not found [ 168.845216][ T5883] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.08 [ 168.854593][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.886753][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.909132][ T5883] usb 7-1: Product: syz [ 168.913393][ T5883] usb 7-1: Manufacturer: syz [ 168.930482][ T5883] usb 7-1: SerialNumber: syz [ 168.991584][ T5883] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 169.193896][ T12] usb 7-1: Failed to submit usb control message: -71 [ 169.195089][ T5916] usb 7-1: USB disconnect, device number 6 [ 169.202448][ T12] usb 7-1: unable to send the bmi data to the device: -71 [ 169.242368][ T12] usb 7-1: unable to get target info from device [ 169.253926][ T12] usb 7-1: could not get target info (-71) [ 169.261218][ T12] usb 7-1: could not probe fw (-71) [ 169.444468][ T5900] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.594522][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 169.604111][ T5900] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 169.621702][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.643135][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 169.672902][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 169.698215][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.739579][ T5900] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 169.751479][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.782382][ T5900] usb 6-1: Product: syz [ 169.792392][ T7548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.801738][ T5900] usb 6-1: Manufacturer: syz [ 169.813266][ T5900] usb 6-1: SerialNumber: syz [ 169.843796][ T5900] usb 6-1: config 0 descriptor?? [ 169.865875][ T5900] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 169.894446][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.942629][ T7553] netlink: 'syz.6.615': attribute type 10 has an invalid length. [ 169.964564][ T7553] netlink: 2 bytes leftover after parsing attributes in process `syz.6.615'. [ 169.984539][ T7553] team0: entered promiscuous mode [ 170.008455][ T7553] team_slave_0: entered promiscuous mode [ 170.025106][ T7553] team_slave_1: entered promiscuous mode [ 170.040041][ T7553] bridge0: port 3(team0) entered blocking state [ 170.052826][ T7553] bridge0: port 3(team0) entered disabled state [ 170.074703][ T7553] team0: entered allmulticast mode [ 170.091535][ T7553] team_slave_0: entered allmulticast mode [ 170.108751][ T7553] team_slave_1: entered allmulticast mode [ 170.138618][ T7553] bridge0: port 3(team0) entered blocking state [ 170.145159][ T7553] bridge0: port 3(team0) entered forwarding state [ 170.690920][ T5900] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 170.718820][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.726018][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.733212][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.740166][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.747109][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.754426][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.761444][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.768363][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.775317][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.782291][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.789256][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.796375][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.803296][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.814935][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.822355][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.829731][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.836871][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.843817][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.850861][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.857932][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.865044][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.872029][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.879029][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.886055][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.893420][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.900336][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.907280][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.916911][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.923873][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.930810][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.939610][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.946752][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.953951][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.960899][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.967835][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.974828][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.982654][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.989602][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 170.996525][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.003455][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.010782][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.024755][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.031734][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.038710][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.045729][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.052668][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.059622][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.066548][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.073489][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.080411][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.087375][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.094311][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.101513][ C1] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 171.107741][ T5827] usb 6-1: USB disconnect, device number 5 [ 171.108218][ C1] gspca_main: Resubmit URB failed with error -19 [ 171.194703][ T3615] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 171.311103][ T970] usb 3-1: USB disconnect, device number 17 [ 171.366368][ T3615] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.387621][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.417990][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.431307][ T3615] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.460122][ T3615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.479907][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.497040][ T3615] usb 1-1: config 0 descriptor?? [ 171.934609][ T970] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 171.974505][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.984089][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.002295][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.011969][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.030393][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.041254][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.069065][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.084533][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.102259][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.114497][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.119124][ T970] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.144755][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.157398][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.162678][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.184816][ T970] usb 3-1: Product: syz [ 172.197487][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.200557][ T970] usb 3-1: Manufacturer: syz [ 172.223893][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.243656][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.250951][ T970] usb 3-1: SerialNumber: syz [ 172.270615][ T3615] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 172.276929][ T970] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.280752][ T3615] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 172.309098][ T5881] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.338379][ T3615] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.645883][ T970] usb 3-1: USB disconnect, device number 18 [ 172.706998][ T7604] bridge_slave_1: left allmulticast mode [ 172.714134][ T7604] bridge_slave_1: left promiscuous mode [ 172.723364][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.739620][ T7603] team_slave_1: left promiscuous mode [ 172.745629][ T7603] team_slave_1: left allmulticast mode [ 172.780862][ T5900] usb 1-1: USB disconnect, device number 13 [ 172.783171][ T7603] team0: Port device team_slave_1 removed [ 172.824056][ T7604] bridge_slave_0: left allmulticast mode [ 172.877399][ T7604] bridge_slave_0: left promiscuous mode [ 172.883245][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.014424][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.226642][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 173.417515][ T5881] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 173.442358][ T5881] ath9k_htc: Failed to initialize the device [ 173.454857][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.5.648'. [ 173.484534][ T970] usb 3-1: ath9k_htc: USB layer deinitialized [ 173.824934][ T970] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.041689][ T970] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.08 [ 174.054426][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.056092][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.100858][ T970] usb 3-1: Product: syz [ 174.114709][ T970] usb 3-1: Manufacturer: syz [ 174.119380][ T970] usb 3-1: SerialNumber: syz [ 174.167557][ T7649] syzkaller1: entered promiscuous mode [ 174.173118][ T7649] syzkaller1: entered allmulticast mode [ 174.183737][ T970] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 174.416122][ T7665] IPv6: Can't replace route, no match found [ 174.422601][ T970] usb 3-1: USB disconnect, device number 19 [ 174.424831][ T3464] usb 3-1: Failed to submit usb control message: -71 [ 174.469276][ T3464] usb 3-1: unable to send the bmi data to the device: -71 [ 174.483870][ T3464] usb 3-1: unable to get target info from device [ 174.505326][ T3464] usb 3-1: could not get target info (-71) [ 174.512058][ T3464] usb 3-1: could not probe fw (-71) [ 175.094442][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.090569][ T7694] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 176.134416][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.195847][ T970] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.354444][ T5900] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 176.364618][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 176.375509][ T970] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 176.390866][ T970] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 176.419466][ T970] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 176.441462][ T970] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 176.466240][ T970] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.496272][ T970] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 176.512223][ T970] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 176.521745][ T970] usb 6-1: Product: syz [ 176.526078][ T970] usb 6-1: Manufacturer: syz [ 176.527257][ T5900] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 176.530692][ T970] usb 6-1: SerialNumber: syz [ 176.563902][ T970] usb 6-1: config 0 descriptor?? [ 176.571385][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.575226][ T970] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 176.612651][ T970] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 176.617296][ T5900] usb 1-1: config 0 descriptor?? [ 176.683822][ T5900] usb 1-1: selecting invalid altsetting 3 [ 176.710713][ T5900] comedi comedi0: could not set alternate setting 3 in high speed [ 176.733891][ T5900] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 176.782715][ T5900] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 176.876181][ T970] usb 1-1: USB disconnect, device number 14 [ 177.174469][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.214409][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.995385][ T970] usb 6-1: USB disconnect, device number 6 [ 179.007318][ T970] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 179.181575][ T7765] netlink: 72 bytes leftover after parsing attributes in process `syz.5.692'. [ 179.254493][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.374846][ T5880] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 179.536427][ T5880] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 179.568207][ T5880] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 179.589274][ T5880] usb 1-1: config 1 interface 0 has no altsetting 0 [ 179.633640][ T5880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.643250][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.653478][ T5880] usb 1-1: Product: syz [ 179.658103][ T5880] usb 1-1: Manufacturer: syz [ 179.680293][ T5880] usb 1-1: SerialNumber: syz [ 179.843293][ T7785] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.864981][ T7785] overlayfs: failed to set xattr on upper [ 179.875750][ T7785] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.893187][ T7785] overlayfs: ...falling back to index=off. [ 179.910821][ T7785] overlayfs: ...falling back to uuid=null. [ 179.929120][ T7785] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 180.045091][ T5900] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 180.214833][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 180.221882][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.241150][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.252426][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.275784][ T5900] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.285284][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.294416][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 180.302939][ T5900] usb 7-1: config 0 descriptor?? [ 180.356556][ T5880] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 180.364774][ T3615] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 180.404563][ T970] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 180.544780][ T3615] usb 4-1: Using ep0 maxpacket: 8 [ 180.555749][ T3615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 180.570679][ T3615] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 180.577184][ T970] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 180.583428][ T3615] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 180.597247][ T3615] usb 4-1: Product: syz [ 180.601518][ T3615] usb 4-1: Manufacturer: syz [ 180.604429][ T970] usb 6-1: config 0 has no interface number 0 [ 180.607834][ T3615] usb 4-1: SerialNumber: syz [ 180.623227][ T970] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 180.650085][ T970] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.676529][ T970] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 180.686098][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.694151][ T970] usb 6-1: Product: syz [ 180.719118][ T970] usb 6-1: Manufacturer: syz [ 180.734482][ T970] usb 6-1: SerialNumber: syz [ 180.742377][ T970] usb 6-1: config 0 descriptor?? [ 180.753960][ T7794] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 180.760369][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 180.763794][ T970] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 180.773334][ T5900] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 180.807965][ T970] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 180.833163][ T3615] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 180.845785][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 180.863398][ T3615] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 180.874779][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 180.882093][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 180.897591][ T3615] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 180.911158][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 180.919129][ T3615] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 180.939449][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 180.989229][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 181.008794][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 181.024627][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 181.033440][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 181.041105][ T3615] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 181.055745][ T3615] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 181.066109][ T3615] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 181.075840][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 181.083151][ T5900] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 181.096957][ T3615] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 181.108009][ T5900] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 181.120037][ T3615] usb 4-1: USB disconnect, device number 22 [ 181.129258][ T5900] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 181.143965][ T3615] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 181.164592][ T5900] microsoft 0003:045E:07DA.0014: no inputs found [ 181.171057][ T5900] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 181.185428][ T3615] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 181.196764][ T3615] visor 4-1:1.0: device disconnected [ 181.208720][ T5900] usb 7-1: USB disconnect, device number 7 [ 181.239085][ T5913] usb 6-1: USB disconnect, device number 7 [ 181.282632][ T5913] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 181.328225][ T5913] cyberjack 6-1:0.69: device disconnected [ 181.334418][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 181.877197][ T7810] openvswitch: netlink: Unknown nsh attribute 0 [ 182.374432][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.513239][ T7813] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 182.540484][ T7813] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.709'. [ 182.562697][ T970] usb 1-1: USB disconnect, device number 15 [ 182.571752][ T970] usblp0: removed [ 182.826357][ T7820] loop0: detected capacity change from 0 to 7 [ 182.846876][ T7820] Dev loop0: unable to read RDB block 7 [ 182.867042][ T7820] loop0: AHDI p1 p2 [ 182.882797][ T7820] loop0: partition table partially beyond EOD, truncated [ 182.919333][ T7820] loop0: p1 start 6514546 is beyond EOD, truncated [ 183.414513][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 183.474454][ T5900] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 183.595304][ T5880] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 183.614644][ T970] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 183.626799][ T5900] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 183.645512][ T5900] usb 4-1: config 0 has no interface number 0 [ 183.659159][ T5900] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.670721][ T5900] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.681434][ T5900] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.693540][ T7846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.694950][ T5900] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 183.720489][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.740335][ T5900] usb 4-1: config 0 descriptor?? [ 183.780848][ T970] usb 6-1: Using ep0 maxpacket: 16 [ 183.786797][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.800498][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 183.813090][ T5880] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 183.832338][ T970] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 183.841817][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.850189][ T5880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.865745][ T970] usb 6-1: Product: syz [ 183.870088][ T970] usb 6-1: Manufacturer: syz [ 183.875068][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.883123][ T5880] usb 1-1: SerialNumber: syz [ 183.891544][ T970] usb 6-1: SerialNumber: syz [ 183.899091][ T970] usb 6-1: config 0 descriptor?? [ 183.906961][ T970] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 183.919592][ T7840] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 184.085295][ T7850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.091685][ T7850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.104060][ T7850] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 184.111833][ T7850] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 184.128910][ T7850] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 184.143806][ T5880] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 184.161476][ T7850] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 184.161865][ T5880] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 184.177272][ T5916] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 184.183789][ T5880] usb 1-1: USB disconnect, device number 16 [ 184.209809][ T5900] uclogic 0003:28BD:0905.0015: interface is invalid, ignoring [ 184.336305][ T970] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 184.393087][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.414398][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.445217][ T5916] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 184.454463][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.466900][ T5900] usb 4-1: USB disconnect, device number 23 [ 184.488370][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.509716][ T5916] usb 3-1: config 0 descriptor?? [ 184.557358][ T5880] usb 6-1: USB disconnect, device number 8 [ 184.596734][ T5880] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 184.625578][ T5880] visor 6-1:0.0: device disconnected [ 185.000573][ T5916] asus 0003:0B05:1822.0016: item fetching failed at offset 5/7 [ 185.009349][ T5916] asus 0003:0B05:1822.0016: Asus hid parse failed: -22 [ 185.022083][ T5916] asus 0003:0B05:1822.0016: probe with driver asus failed with error -22 [ 185.064873][ T5827] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 185.219804][ T970] usb 3-1: USB disconnect, device number 20 [ 185.235587][ T5827] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.256840][ T5827] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.274427][ T5827] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.287273][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.313943][ T7862] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.321550][ T5916] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.408130][ T5827] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.494403][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.699159][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.706721][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 185.763715][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.969057][ T5916] usb 4-1: config 0 descriptor?? [ 186.136137][ T5846] Bluetooth: hci6: command 0x0c1a tx timeout [ 186.142316][ T5846] Bluetooth: hci5: command 0x041b tx timeout [ 186.149072][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.156280][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.199417][ T5827] usb 7-1: USB disconnect, device number 8 [ 186.333150][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 186.343217][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.351231][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.375697][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.383304][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.534485][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.090912][ T5916] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 187.436277][ T5827] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 187.574613][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.968288][ T5881] usb 4-1: USB disconnect, device number 24 [ 188.096881][ T5827] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.117149][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.156876][ T5827] usb 7-1: Product: syz [ 188.177120][ T5827] usb 7-1: Manufacturer: syz [ 188.187394][ T5827] usb 7-1: SerialNumber: syz [ 188.214673][ T5830] Bluetooth: hci6: command 0x0c1a tx timeout [ 188.222799][ T5827] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.260885][ T5881] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 188.434659][ T970] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.554433][ T7929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.560562][ T7929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.584668][ T7929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 188.604696][ T7929] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 188.604855][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 188.614443][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 188.620115][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.635031][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.645053][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.658745][ T970] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.668133][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.689871][ T970] usb 1-1: config 0 descriptor?? [ 188.949862][ T5827] usb 7-1: USB disconnect, device number 9 [ 189.120418][ T970] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 189.164474][ T970] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input23 [ 189.212452][ T7927] syz.3.751 (7927): drop_caches: 2 [ 189.278257][ T970] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 189.341412][ T970] usb 1-1: USB disconnect, device number 17 [ 189.596974][ T5881] usb 7-1: Service connection timeout for: 256 [ 189.603232][ T5881] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 189.654424][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.765562][ T5881] ath9k_htc: Failed to initialize the device [ 189.784095][ T5827] usb 7-1: ath9k_htc: USB layer deinitialized [ 190.614793][ T5830] Bluetooth: hci6: command 0x0c1a tx timeout [ 190.621098][ T5830] Bluetooth: hci5: command 0x041b tx timeout [ 190.629061][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.634490][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.694418][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.714545][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 190.898576][ T5916] usb 3-1: config 0 has an invalid interface number: 100 but max is 0 [ 190.915800][ T5916] usb 3-1: config 0 has no interface number 0 [ 190.946771][ T5916] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=39.f0 [ 190.956703][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.991722][ T5916] usb 3-1: Product: syz [ 191.001262][ T5916] usb 3-1: Manufacturer: syz [ 191.011406][ T5916] usb 3-1: SerialNumber: syz [ 191.047703][ T5916] usb 3-1: config 0 descriptor?? [ 191.135275][ T7973] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.141525][ T7973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.204208][ T7973] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 191.242640][ T7973] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 191.287384][ T5916] HFC-S_USB 3-1:0.100: probe with driver HFC-S_USB failed with error -5 [ 191.485245][ T5916] usb 3-1: USB disconnect, device number 21 [ 191.573260][ T7989] netem: change failed [ 191.624603][ T5913] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 191.734404][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.810796][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 191.862881][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 191.923062][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.940632][ T5913] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.953967][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.259278][ T5913] usb 6-1: config 0 descriptor?? [ 192.304628][ T3615] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 192.338765][ T7980] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 192.567013][ T3615] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.579166][ T3615] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.599363][ T3615] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.622603][ T3615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.666121][ T7996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 192.682037][ T3615] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.774409][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.802699][ T5913] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 192.811255][ T5913] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 192.819714][ T5913] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 192.839403][ T5913] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 192.858230][ T5913] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 192.872868][ T5913] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 192.908497][ T5913] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 192.921486][ T8010] Bluetooth: MGMT ver 1.23 [ 192.953142][ T5913] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 192.977368][ T8012] trusted_key: syz.3.781 sent an empty control message without MSG_MORE. [ 193.020014][ T5827] usb 7-1: USB disconnect, device number 10 [ 193.131779][ T5913] usb 6-1: USB disconnect, device number 9 [ 193.174959][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.176753][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.254832][ T5846] Bluetooth: hci6: command 0x0c1a tx timeout [ 193.254845][ T5140] Bluetooth: hci5: command 0x041b tx timeout [ 193.814417][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.114449][ T3615] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 194.279984][ T3615] usb 7-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 194.289776][ T3615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.301466][ T3615] usb 7-1: Product: syz [ 194.318163][ T3615] usb 7-1: Manufacturer: syz [ 194.331451][ T3615] usb 7-1: SerialNumber: syz [ 194.354230][ T3615] usb 7-1: config 0 descriptor?? [ 194.378296][ T3615] gspca_main: spca500-2.14.0 probing 8086:0630 [ 194.633261][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.640945][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.658239][ T5913] usb 7-1: USB disconnect, device number 11 [ 194.854400][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 195.182004][ T8078] smc: net device lo applied user defined pnetid SYZ2 [ 195.200860][ T8078] smc: net device lo erased user defined pnetid SYZ2 [ 195.392119][ T3615] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 195.589017][ T3615] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 195.604747][ T3615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.633307][ T3615] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 195.643020][ T3615] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 195.651295][ T3615] usb 6-1: Manufacturer: syz [ 195.691781][ T3615] usb 6-1: config 0 descriptor?? [ 195.845149][ T3615] rc_core: IR keymap rc-hauppauge not found [ 195.851122][ T3615] Registered IR keymap rc-empty [ 195.861797][ T3615] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 195.882900][ T3615] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 195.894730][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.119883][ T3615] usb 6-1: USB disconnect, device number 10 [ 196.934441][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.994582][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 197.154048][ T5881] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.166776][ T5881] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 197.176207][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.201640][ T5881] usb 7-1: config 0 descriptor?? [ 197.228231][ T5881] pwc: Askey VC010 type 2 USB webcam detected. [ 197.316065][ T5827] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 197.438159][ T5881] pwc: send_video_command error -71 [ 197.445060][ T5881] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 197.452734][ T5881] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 197.470971][ T5881] usb 7-1: USB disconnect, device number 12 [ 197.506685][ T5827] usb 6-1: config 0 has no interfaces? [ 197.516207][ T5827] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.526028][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.535371][ T5827] usb 6-1: Product: syz [ 197.539704][ T5827] usb 6-1: Manufacturer: syz [ 197.544901][ T5827] usb 6-1: SerialNumber: syz [ 197.558441][ T5827] usb 6-1: config 0 descriptor?? [ 197.798778][ T5881] usb 6-1: USB disconnect, device number 11 [ 197.914472][ T5913] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 197.977251][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.066254][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.076689][ T5913] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 198.091057][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.109882][ T5913] usb 7-1: config 0 descriptor?? [ 198.121915][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 198.529836][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 198.543631][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 198.560612][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 198.563798][ T8108] syz.5.818[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.576748][ T8108] syz.5.818[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.577592][ T5913] pwc: recv_control_msg error -71 req 04 val 1000 [ 198.597224][ T8108] syz.5.818[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.606205][ T5913] pwc: recv_control_msg error -71 req 04 val 1300 [ 198.606612][ T5913] pwc: recv_control_msg error -71 req 04 val 1400 [ 198.657544][ T5913] pwc: recv_control_msg error -71 req 02 val 2000 [ 198.665502][ T5913] pwc: recv_control_msg error -71 req 02 val 2100 [ 198.678933][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 198.686008][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 198.692848][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 198.700530][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 198.713842][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 198.720934][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 198.728364][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 198.736785][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 198.747960][ T5913] pwc: Registered as video103. [ 198.754128][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 198.804782][ T5913] usb 7-1: USB disconnect, device number 13 [ 199.014394][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.025752][ T8091] erspan0: entered promiscuous mode [ 199.031085][ T8091] vlan2: entered promiscuous mode [ 199.047153][ T8091] erspan0: left promiscuous mode [ 200.054485][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.375154][ T5916] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 200.671857][ T5916] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.797725][ T5916] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.822178][ T5916] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.834730][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.846137][ T8136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 200.882376][ T5916] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.094398][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.231084][ T5879] usb 7-1: USB disconnect, device number 14 [ 201.817227][ T8165] dccp_xmit_packet: Payload too large (65475) for featneg. [ 201.929649][ T8164] kvm: emulating exchange as write [ 202.134408][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.174574][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.214567][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.293428][ T29] audit: type=1326 audit(1729795588.292:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8213 comm="syz.3.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c9397e719 code=0x0 [ 204.315323][ T5913] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 204.504388][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 204.518910][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.550339][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.591291][ T5913] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.616107][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.627008][ T5913] usb 7-1: config 0 descriptor?? [ 205.254430][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.289999][ T5913] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 205.496666][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.238109][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.294623][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.468833][ T5913] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 206.480436][ T5913] microsoft 0003:045E:07DA.0019: no inputs found [ 206.487150][ T5913] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 206.508188][ T5913] usb 7-1: USB disconnect, device number 15 [ 207.039229][ T8257] netlink: 'syz.3.867': attribute type 4 has an invalid length. [ 207.287948][ T8265] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.298093][ T8265] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 207.334530][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.852320][ T8284] syz_tun: entered promiscuous mode [ 207.881340][ T8284] batadv_slave_0: entered promiscuous mode [ 207.915133][ T8284] hsr1: entered allmulticast mode [ 207.928037][ T8284] syz_tun: entered allmulticast mode [ 207.949302][ T8284] batadv_slave_0: entered allmulticast mode [ 207.995389][ T8288] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3435572954 (219876669056 ns) > initial count (59054907904 ns). Using initial count to start timer. [ 208.024103][ T29] audit: type=1326 audit(1729795592.022:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8290 comm="syz.2.881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cedb7e719 code=0x0 [ 208.374481][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.439255][ T8307] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 208.451455][ T8307] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 208.460846][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.468475][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.497125][ T8307] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.504807][ T8307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.512594][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.519818][ T8307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.541899][ T8307] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.556420][ T35] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 208.702690][ T29] audit: type=1326 audit(1729795592.702:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8310 comm="syz.0.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd66257e719 code=0x0 [ 209.414402][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.454421][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.302373][ T8371] bridge_slave_1: left allmulticast mode [ 211.324598][ T8371] bridge_slave_1: left promiscuous mode [ 211.330492][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.444783][ T5140] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 211.491490][ T8374] bridge_slave_0: left allmulticast mode [ 211.497247][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.513379][ T8374] bridge_slave_0: left promiscuous mode [ 211.552454][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.322535][ T8398] syzkaller1: entered promiscuous mode [ 212.334062][ T8398] syzkaller1: entered allmulticast mode [ 212.449612][ T8401] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.461891][ T29] audit: type=1400 audit(1729795596.462:31): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=8400 comm="syz.5.923" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 212.534590][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.574415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.555561][ T5140] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 214.614407][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.896130][ T8446] bridge_slave_1: left allmulticast mode [ 214.916296][ T8446] bridge_slave_1: left promiscuous mode [ 214.931505][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.962007][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.938'. [ 214.971390][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 215.009756][ T8446] bridge_slave_0: left allmulticast mode [ 215.056317][ T8446] bridge_slave_0: left promiscuous mode [ 215.068064][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.654501][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.529219][ T8478] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 216.543607][ T8478] netlink: 2 bytes leftover after parsing attributes in process `syz.3.948'. [ 216.558134][ T8478] team0: entered promiscuous mode [ 216.563238][ T8478] team_slave_0: entered promiscuous mode [ 216.570696][ T8478] team_slave_1: entered promiscuous mode [ 216.586892][ T8478] bridge0: entered promiscuous mode [ 216.593100][ T8478] bridge0: port 1(team0) entered blocking state [ 216.601971][ T8478] bridge0: port 1(team0) entered disabled state [ 216.610697][ T8478] team0: entered allmulticast mode [ 216.618966][ T8478] team_slave_0: entered allmulticast mode [ 216.627695][ T8478] team_slave_1: entered allmulticast mode [ 216.633546][ T8478] bridge0: entered allmulticast mode [ 216.642120][ T8478] team0: left allmulticast mode [ 216.649278][ T8478] team_slave_0: left allmulticast mode [ 216.657154][ T8478] team_slave_1: left allmulticast mode [ 216.662783][ T8478] bridge0: left allmulticast mode [ 216.694404][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.876651][ T5880] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 217.116265][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.159829][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.228647][ T8487] syz.3.951: attempt to access beyond end of device [ 217.228647][ T8487] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 217.245347][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.260194][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.276027][ T8487] syz.3.951: attempt to access beyond end of device [ 217.276027][ T8487] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 217.302850][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.314983][ T8487] syz.3.951: attempt to access beyond end of device [ 217.314983][ T8487] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 217.334580][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.348137][ T5880] usb 3-1: config 0 descriptor?? [ 217.398183][ T8487] syz.3.951: attempt to access beyond end of device [ 217.398183][ T8487] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 217.438243][ T8487] syz.3.951: attempt to access beyond end of device [ 217.438243][ T8487] loop3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 217.487826][ T8487] syz.3.951: attempt to access beyond end of device [ 217.487826][ T8487] loop3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 217.518566][ T8487] VFS: unable to find oldfs superblock on device loop3 [ 217.552629][ T8505] vxcan1: entered allmulticast mode [ 217.651403][ T8506] netlink: 'syz.6.958': attribute type 39 has an invalid length. [ 217.677801][ T8506] vxcan1: left allmulticast mode [ 217.734466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.782564][ T5880] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 217.808976][ T5880] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 218.049985][ T5879] usb 3-1: USB disconnect, device number 22 [ 218.329214][ T8520] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 218.397060][ T8520] netlink: 2 bytes leftover after parsing attributes in process `syz.0.962'. [ 218.463537][ T8520] team0: entered promiscuous mode [ 218.509761][ T8520] team_slave_0: entered promiscuous mode [ 218.553654][ T8520] team_slave_1: entered promiscuous mode [ 218.596445][ T8520] macvlan1: entered promiscuous mode [ 218.702952][ T8520] bridge0: port 3(team0) entered blocking state [ 218.774415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.786356][ T8520] bridge0: port 3(team0) entered disabled state [ 218.837669][ T8520] team0: entered allmulticast mode [ 218.989901][ T8520] team_slave_0: entered allmulticast mode [ 219.052299][ T8520] team_slave_1: entered allmulticast mode [ 219.129690][ T8520] macvlan1: entered allmulticast mode [ 219.150285][ T8520] veth1_vlan: entered allmulticast mode [ 219.166605][ T8520] bridge0: port 3(team0) entered blocking state [ 219.172945][ T8520] bridge0: port 3(team0) entered forwarding state [ 219.814466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.450822][ T8569] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 220.477841][ T8569] netlink: 2 bytes leftover after parsing attributes in process `syz.2.979'. [ 220.490612][ T8569] team0: entered promiscuous mode [ 220.495869][ T8569] team_slave_0: entered promiscuous mode [ 220.501926][ T8569] team_slave_1: entered promiscuous mode [ 220.509318][ T8569] bridge0: port 1(team0) entered blocking state [ 220.540354][ T8569] bridge0: port 1(team0) entered disabled state [ 220.553347][ T8569] team0: entered allmulticast mode [ 220.554586][ T5879] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 220.566447][ T8569] team_slave_0: entered allmulticast mode [ 220.584564][ T8569] team_slave_1: entered allmulticast mode [ 220.611397][ T8569] bridge0: port 1(team0) entered blocking state [ 220.617898][ T8569] bridge0: port 1(team0) entered forwarding state [ 220.724758][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.754509][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.772801][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.794293][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.816051][ T5879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.831994][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.851713][ T5879] usb 1-1: config 0 descriptor?? [ 220.857286][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.965730][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.985'. [ 221.442359][ T5879] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 221.584170][ T5879] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 221.811842][ T5879] usb 1-1: USB disconnect, device number 18 [ 221.894487][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.653647][ T8609] netlink: 'syz.5.995': attribute type 10 has an invalid length. [ 222.684558][ T8609] netlink: 2 bytes leftover after parsing attributes in process `syz.5.995'. [ 222.701323][ T8609] team0: entered promiscuous mode [ 222.711888][ T8609] team_slave_0: entered promiscuous mode [ 222.732292][ T8609] team_slave_1: entered promiscuous mode [ 222.738740][ T8609] bridge0: port 1(team0) entered blocking state [ 222.774876][ T8609] bridge0: port 1(team0) entered disabled state [ 222.784019][ T8609] team0: entered allmulticast mode [ 222.801146][ T8609] team_slave_0: entered allmulticast mode [ 222.826242][ T8609] team_slave_1: entered allmulticast mode [ 222.888507][ T8609] bridge0: port 1(team0) entered blocking state [ 222.894978][ T8609] bridge0: port 1(team0) entered forwarding state [ 222.934424][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.675074][ T3615] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 223.885376][ T3615] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.974462][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.142918][ T3615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.170157][ T3615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.181918][ T3615] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.200751][ T3615] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.212441][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.641158][ T3615] usb 6-1: config 0 descriptor?? [ 225.014415][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.301373][ T8642] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 225.498746][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1013'. [ 225.540441][ T3615] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 225.576685][ T3615] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 225.784577][ T5881] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 225.816713][ T5879] usb 6-1: USB disconnect, device number 12 [ 225.904590][ T5880] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 225.936025][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.961548][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.974070][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.987867][ T5881] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 225.997975][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.009353][ T5881] usb 1-1: config 0 descriptor?? [ 226.054389][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.068409][ T5880] usb 7-1: config 0 has an invalid interface number: 206 but max is 0 [ 226.078693][ T5880] usb 7-1: config 0 has no interface number 0 [ 226.085708][ T5880] usb 7-1: config 0 interface 206 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 226.099627][ T5880] usb 7-1: config 0 interface 206 has no altsetting 0 [ 226.107753][ T5880] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 226.117478][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.132110][ T5880] usb 7-1: config 0 descriptor?? [ 226.467715][ T5140] Bluetooth: hci5: unexpected event for opcode 0x080c [ 226.469374][ T5881] uclogic 0003:5543:0003.001D: item fetching failed at offset 5/7 [ 226.541110][ T5881] uclogic 0003:5543:0003.001D: parse failed [ 226.579910][ T5881] uclogic 0003:5543:0003.001D: probe with driver uclogic failed with error -22 [ 226.679791][ T5881] usb 1-1: USB disconnect, device number 19 [ 226.796442][ T5880] usb 7-1: Cannot read MAC address [ 226.805504][ T5880] MOSCHIP usb-ethernet driver 7-1:0.206: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 226.830487][ T5880] usb 7-1: USB disconnect, device number 16 [ 227.094416][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.805806][ T8674] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 227.833954][ T8674] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1023'. [ 228.134435][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.304599][ T5827] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 228.465160][ T5827] usb 7-1: Using ep0 maxpacket: 8 [ 228.472391][ T5827] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 228.481548][ T5827] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.501924][ T5827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.520980][ T5827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.541910][ T5827] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.565511][ T5827] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.608195][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.845901][ T5827] usb 7-1: GET_CAPABILITIES returned 0 [ 228.851510][ T5827] usbtmc 7-1:16.0: can't read capabilities [ 229.173483][ T5913] usb 7-1: USB disconnect, device number 17 [ 229.180577][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.195506][ T8685] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 229.203683][ T8691] usb 7-1: usbtmc_ioctl_clear_out_halt returned -19 [ 229.847370][ T8684] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1025'. [ 230.214378][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.231940][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1032'. [ 230.536028][ T5140] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 230.545208][ T5140] Bluetooth: hci5: Injecting HCI hardware error event [ 230.556430][ T5140] Bluetooth: hci5: hardware error 0x00 [ 231.224654][ T8723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.254171][ T8725] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 231.261075][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.294385][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.596880][ T8737] syz.6.1043 (8737): drop_caches: 2 [ 232.615334][ T5140] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 233.334392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.376480][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.410498][ T8804] syz.0.1067 (8804): drop_caches: 2 [ 235.414465][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.454395][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.494482][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.517885][ T8840] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 237.527415][ T8840] netlink: 'syz.0.1081': attribute type 4 has an invalid length. [ 237.538713][ T8840] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1081'. [ 237.611739][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 237.621441][ T8837] netlink: 'syz.2.1080': attribute type 5 has an invalid length. [ 237.694248][ T8837] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.704160][ T8837] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.713320][ T8837] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.722482][ T8837] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.750082][ T8837] vxlan0: entered promiscuous mode [ 238.534485][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.574392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.614390][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.654390][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.694412][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.734404][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.774377][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.814374][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.854364][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.894395][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.934388][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.974407][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.014363][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.054389][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.094386][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.134409][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.174454][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.064826][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.214393][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.254357][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.294389][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.334357][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.374357][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.414392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.454465][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.494359][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.534357][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.574356][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.614702][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.654421][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.694410][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.430847][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.468162][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.472642][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 269.476947][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.492792][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.500569][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 269.509996][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 269.514468][ T5830] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.518688][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 269.532454][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.540206][ T5839] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 269.548405][ T5140] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 269.734353][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.817621][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.882768][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.894884][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.907065][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.921226][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.933100][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.942935][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.943328][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.958002][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.969348][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.995647][ T7620] syz_tun (unregistering): left promiscuous mode [ 270.027608][ T5830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.044537][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.203284][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.229598][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.259671][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.279825][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.296256][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.310955][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.611290][ T3464] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.759913][ T3464] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.774705][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.827456][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 270.878189][ T3464] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.991468][ T3464] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.136926][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 271.177306][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.184940][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.192170][ T8865] bridge_slave_0: entered allmulticast mode [ 271.202526][ T8865] bridge_slave_0: entered promiscuous mode [ 271.210797][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 271.223508][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.234807][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.242003][ T8865] bridge_slave_1: entered allmulticast mode [ 271.253159][ T8865] bridge_slave_1: entered promiscuous mode [ 271.303228][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 271.324021][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 271.480044][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.492361][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.602258][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.613143][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.620898][ T8873] bridge_slave_0: entered allmulticast mode [ 271.628371][ T8873] bridge_slave_0: entered promiscuous mode [ 271.636720][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.643963][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.651730][ T8873] bridge_slave_1: entered allmulticast mode [ 271.658505][ T5830] Bluetooth: hci8: command tx timeout [ 271.665572][ T5140] Bluetooth: hci7: command tx timeout [ 271.674202][ T8873] bridge_slave_1: entered promiscuous mode [ 271.699793][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.707065][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.715163][ T8875] bridge_slave_0: entered allmulticast mode [ 271.721822][ T8875] bridge_slave_0: entered promiscuous mode [ 271.729628][ T3464] team0: left allmulticast mode [ 271.735238][ T3464] team_slave_0: left allmulticast mode [ 271.740936][ T3464] team_slave_1: left allmulticast mode [ 271.751603][ T3464] bridge0: port 1(team0) entered disabled state [ 271.814466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.055111][ T5140] Bluetooth: hci2: command tx timeout [ 272.137851][ T5140] Bluetooth: hci6: command tx timeout [ 272.183821][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.198883][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.210861][ T3464] bond0 (unregistering): Released all slaves [ 272.256404][ T8865] team0: Port device team_slave_0 added [ 272.331363][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.352224][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.365650][ T8875] bridge_slave_1: entered allmulticast mode [ 272.372417][ T8875] bridge_slave_1: entered promiscuous mode [ 272.384388][ T5140] Bluetooth: hci3: command tx timeout [ 272.410975][ T8865] team0: Port device team_slave_1 added [ 272.432030][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.517154][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.524639][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.531891][ T8871] bridge_slave_0: entered allmulticast mode [ 272.539319][ T8871] bridge_slave_0: entered promiscuous mode [ 272.602128][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.640044][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.663721][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.678384][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.697264][ T8871] bridge_slave_1: entered allmulticast mode [ 272.714864][ T8871] bridge_slave_1: entered promiscuous mode [ 272.743193][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.764416][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.811860][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.825701][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.832848][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.852984][ T8867] bridge_slave_0: entered allmulticast mode [ 272.859206][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.877778][ T8867] bridge_slave_0: entered promiscuous mode [ 272.909374][ T8873] team0: Port device team_slave_0 added [ 272.926874][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.061509][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.074477][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.109801][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.122343][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.133774][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.142596][ T8867] bridge_slave_1: entered allmulticast mode [ 273.151856][ T8867] bridge_slave_1: entered promiscuous mode [ 273.163276][ T8873] team0: Port device team_slave_1 added [ 273.190138][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.278942][ T8875] team0: Port device team_slave_0 added [ 273.288046][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.310301][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.320687][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.328781][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.355703][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.369762][ T8875] team0: Port device team_slave_1 added [ 273.420140][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.428032][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.437701][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.446431][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.467635][ T3464] veth1_macvtap: left promiscuous mode [ 273.473599][ T3464] veth0_macvtap: left promiscuous mode [ 273.737162][ T5140] Bluetooth: hci7: command tx timeout [ 273.742609][ T5140] Bluetooth: hci8: command tx timeout [ 273.894499][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.942581][ T3464] team_slave_1 (unregistering): left promiscuous mode [ 273.961746][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 274.002492][ T3464] team_slave_0 (unregistering): left promiscuous mode [ 274.011741][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 274.146382][ T5140] Bluetooth: hci2: command tx timeout [ 274.219591][ T5140] Bluetooth: hci6: command tx timeout [ 274.458036][ T5140] Bluetooth: hci3: command tx timeout [ 274.481417][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.491239][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.504419][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.530646][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.564702][ T8871] team0: Port device team_slave_0 added [ 274.668675][ T8867] team0: Port device team_slave_0 added [ 274.698099][ T8867] team0: Port device team_slave_1 added [ 274.776959][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.783995][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.822993][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.846906][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.853886][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.892138][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.929679][ T8871] team0: Port device team_slave_1 added [ 274.934583][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.013774][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.021246][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.067237][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.092153][ T8873] hsr_slave_0: entered promiscuous mode [ 275.098752][ T8873] hsr_slave_1: entered promiscuous mode [ 275.106629][ T8873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.114202][ T8873] Cannot create hsr debugfs directory [ 275.127099][ T8865] hsr_slave_0: entered promiscuous mode [ 275.133448][ T8865] hsr_slave_1: entered promiscuous mode [ 275.140015][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.147749][ T8865] Cannot create hsr debugfs directory [ 275.169774][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.177527][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.204142][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.254759][ T30] INFO: task syz.4.351:6805 blocked for more than 143 seconds. [ 275.258052][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.262367][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 275.269981][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.318830][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.328665][ T30] task:syz.4.351 state:D stack:25872 pid:6805 tgid:6805 ppid:5825 flags:0x00004000 [ 275.339827][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.350886][ T30] Call Trace: [ 275.354197][ T30] [ 275.381409][ T30] __schedule+0x185a/0x4b70 [ 275.400903][ T30] ? __pfx___schedule+0x10/0x10 [ 275.406448][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.422864][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.435209][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.444582][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 275.449752][ T30] ? schedule+0x90/0x320 [ 275.454021][ T30] schedule+0x14b/0x320 [ 275.470192][ T30] schedule_preempt_disabled+0x13/0x30 [ 275.475873][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 275.481635][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 275.487741][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 275.493936][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 275.499411][ T30] ? exit_mmap+0x28b/0xc40 [ 275.503874][ T30] down_write+0x1d7/0x220 [ 275.508300][ T30] ? __pfx_down_write+0x10/0x10 [ 275.513160][ T30] exit_mmap+0x2bd/0xc40 [ 275.518503][ T30] ? __mutex_lock+0x2ef/0xd70 [ 275.523240][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 275.528104][ T30] ? __pfx_exit_aio+0x10/0x10 [ 275.532792][ T30] ? uprobe_clear_state+0x271/0x290 [ 275.538176][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 275.543516][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 275.548900][ T30] __mmput+0x115/0x380 [ 275.553010][ T30] exit_mm+0x220/0x310 [ 275.557216][ T30] ? __pfx_exit_mm+0x10/0x10 [ 275.562193][ T30] ? taskstats_exit+0x326/0xa60 [ 275.567228][ T30] do_exit+0x9b2/0x28e0 [ 275.571416][ T30] ? preempt_schedule_common+0x84/0xd0 [ 275.577210][ T30] ? __pfx_do_exit+0x10/0x10 [ 275.581837][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.587960][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.594434][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 275.599881][ T30] do_group_exit+0x207/0x2c0 [ 275.604616][ T30] __x64_sys_exit_group+0x3f/0x40 [ 275.609681][ T30] x64_sys_call+0x2634/0x2640 [ 275.614555][ T30] do_syscall_64+0xf3/0x230 [ 275.619101][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.623795][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.629805][ T30] RIP: 0033:0x7fb406b7e719 [ 275.634342][ T30] RSP: 002b:00007fffd6e063c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 275.642921][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb406b7e719 [ 275.650987][ T30] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.659311][ T30] RBP: 00007fffd6e0641c R08: 00007fffd6e064af R09: 000000000001e4df [ 275.667747][ T30] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 275.675799][ T30] R13: 000000000001e4df R14: 000000000001e11d R15: 00007fffd6e06470 [ 275.683796][ T30] [ 275.704993][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.711970][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.738058][ T30] [ 275.738058][ T30] Showing all locks held in the system: [ 275.754658][ T30] 3 locks held by kworker/u8:1/12: [ 275.771026][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.786915][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.798162][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.808750][ T30] #2: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 275.817955][ T5140] Bluetooth: hci7: command tx timeout [ 275.823389][ T5140] Bluetooth: hci8: command tx timeout [ 275.834536][ T30] 1 lock held by khungtaskd/30: [ 275.839426][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 275.856901][ T30] 2 locks held by kworker/u8:5/741: [ 275.862128][ T30] 4 locks held by kworker/u8:7/3464: [ 275.884591][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.896681][ T30] #1: ffffc9000c70fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.908505][ T30] #2: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 275.918063][ T30] #3: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 275.927566][ T30] 2 locks held by dhcpcd/5495: [ 275.932354][ T30] #0: ffffffff8fca5468 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 275.943917][ T30] #1: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 275.953692][ T30] 2 locks held by getty/5581: [ 275.959804][ T30] #0: ffff88814e5f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 275.969837][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 275.980144][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.989353][ T30] 3 locks held by kworker/0:3/5827: [ 275.994639][ T30] 1 lock held by syz.4.351/6805: [ 275.999604][ T30] #0: ffff8880330af398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 276.008994][ T30] 1 lock held by syz-executor/8865: [ 276.014218][ T30] #0: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 276.025602][ T30] 3 locks held by syz-executor/8867: [ 276.030920][ T30] #0: ffff88805e78cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 276.041013][ T30] #1: ffff88805e78c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 276.051011][ T30] #2: ffffffff8fe2d268 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 276.063621][ T30] 1 lock held by syz-executor/8875: [ 276.070835][ T30] #0: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 276.083260][ T30] [ 276.134663][ T30] ============================================= [ 276.134663][ T30] [ 276.143166][ T30] NMI backtrace for cpu 1 [ 276.147540][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 276.158053][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.168117][ T30] Call Trace: [ 276.171396][ T30] [ 276.174330][ T30] dump_stack_lvl+0x241/0x360 [ 276.179042][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.184249][ T30] ? __pfx__printk+0x10/0x10 [ 276.188880][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 276.193835][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.199303][ T30] ? _printk+0xd5/0x120 [ 276.203455][ T30] ? __pfx__printk+0x10/0x10 [ 276.208041][ T30] ? __wake_up_klogd+0xcc/0x110 [ 276.212894][ T30] ? __pfx__printk+0x10/0x10 [ 276.217502][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 276.222543][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.228542][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 276.234554][ T30] watchdog+0xff4/0x1040 [ 276.238821][ T30] ? watchdog+0x1ea/0x1040 [ 276.243245][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.247926][ T30] kthread+0x2f0/0x390 [ 276.251995][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.256672][ T30] ? __pfx_kthread+0x10/0x10 [ 276.261265][ T30] ret_from_fork+0x4b/0x80 [ 276.265695][ T30] ? __pfx_kthread+0x10/0x10 [ 276.270292][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.275102][ T30] [ 276.279262][ T30] Sending NMI from CPU 1 to CPUs 0: [ 276.285132][ C0] NMI backtrace for cpu 0 [ 276.285146][ C0] CPU: 0 UID: 0 PID: 8867 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 276.285167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.285178][ C0] RIP: 0010:validate_chain+0x1d7b/0x5920 [ 276.285204][ C0] Code: 80 3c 20 00 74 08 4c 89 f7 e8 a1 5e 8a 00 49 8b 1e 48 85 db 0f 84 60 27 00 00 48 83 c3 5c 49 89 df 49 c1 ef 03 43 0f b6 04 27 <84> c0 0f 85 2f 03 00 00 44 8b 25 46 63 bd 14 44 39 23 0f 84 95 fe [ 276.285225][ C0] RSP: 0018:ffffc900035fe860 EFLAGS: 00000803 [ 276.285242][ C0] RAX: 0000000000000000 RBX: ffffffff93c82254 RCX: dffffc0000000000 [ 276.285255][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc900035fe980 [ 276.285267][ C0] RBP: ffffc900035feb60 R08: ffffffff94293807 R09: 1ffffffff2852700 [ 276.285281][ C0] R10: dffffc0000000000 R11: fffffbfff2852701 R12: dffffc0000000000 [ 276.285294][ C0] R13: ffffffff96c88d08 R14: ffffffff96c88d18 R15: 1ffffffff279044a [ 276.285308][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 276.285323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.285336][ C0] CR2: 00007f4497fe3966 CR3: 0000000035168000 CR4: 00000000003526f0 [ 276.285352][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000cdb2 [ 276.285363][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 276.285375][ C0] Call Trace: [ 276.285381][ C0] [ 276.285388][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 276.285411][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 276.285439][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.285476][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 276.285501][ C0] ? nmi_handle+0x14f/0x5a0 [ 276.285519][ C0] ? nmi_handle+0x2a/0x5a0 [ 276.285537][ C0] ? validate_chain+0x1d7b/0x5920 [ 276.285556][ C0] ? default_do_nmi+0x63/0x160 [ 276.285591][ C0] ? exc_nmi+0x123/0x1f0 [ 276.285622][ C0] ? end_repeat_nmi+0xf/0x53 [ 276.285640][ C0] ? validate_chain+0x1d7b/0x5920 [ 276.285657][ C0] ? validate_chain+0x1d7b/0x5920 [ 276.285673][ C0] ? validate_chain+0x1d7b/0x5920 [ 276.285689][ C0] [ 276.285694][ C0] [ 276.285708][ C0] ? __pfx_validate_chain+0x10/0x10 [ 276.285741][ C0] ? check_noncircular+0x259/0x4a0 [ 276.285762][ C0] ? check_path+0x21/0x40 [ 276.285779][ C0] ? check_noncircular+0x259/0x4a0 [ 276.285802][ C0] ? validate_chain+0x11e/0x5920 [ 276.285822][ C0] ? mark_lock+0x9a/0x360 [ 276.285838][ C0] __lock_acquire+0x1384/0x2050 [ 276.285868][ C0] lock_acquire+0x1ed/0x550 [ 276.285891][ C0] ? ktime_get+0x3c/0xb0 [ 276.285911][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 276.285940][ C0] ? ktime_get+0x3c/0xb0 [ 276.285957][ C0] seqcount_lockdep_reader_access+0xfc/0x220 [ 276.285977][ C0] ? ktime_get+0x3c/0xb0 [ 276.285994][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 276.286019][ C0] ktime_get+0x3c/0xb0 [ 276.286036][ C0] start_dl_timer+0x221/0x4d0 [ 276.286055][ C0] update_curr_dl_se+0x472/0x840 [ 276.286075][ C0] update_curr+0x56c/0xdb0 [ 276.286094][ C0] ? sched_clock+0x4a/0x70 [ 276.286116][ C0] pick_task_fair+0xaa/0x260 [ 276.286139][ C0] pick_next_task_fair+0x23/0xc90 [ 276.286163][ C0] __pick_next_task+0xdd/0x400 [ 276.286182][ C0] __schedule+0x7c8/0x4b70 [ 276.286205][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.286232][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 276.286252][ C0] ? __pfx___schedule+0x10/0x10 [ 276.286275][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 276.286299][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.286327][ C0] ? preempt_schedule+0xe1/0xf0 [ 276.286350][ C0] preempt_schedule_common+0x84/0xd0 [ 276.286374][ C0] preempt_schedule+0xe1/0xf0 [ 276.286398][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 276.286424][ C0] preempt_schedule_thunk+0x1a/0x30 [ 276.286444][ C0] free_unref_page+0x6b5/0xf00 [ 276.286472][ C0] __slab_free+0x31b/0x3d0 [ 276.286494][ C0] ? __phys_addr+0xba/0x170 [ 276.286510][ C0] qlist_free_all+0x9a/0x140 [ 276.286533][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 276.286555][ C0] __kasan_slab_alloc+0x23/0x80 [ 276.286578][ C0] ? kobject_uevent_env+0x28b/0x8e0 [ 276.286597][ C0] __kmalloc_cache_noprof+0x132/0x2c0 [ 276.286616][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 276.286637][ C0] kobject_uevent_env+0x28b/0x8e0 [ 276.286659][ C0] device_del+0x7db/0x9b0 [ 276.286678][ C0] ? __pfx_device_del+0x10/0x10 [ 276.286694][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.286711][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 276.286728][ C0] device_unregister+0x20/0xc0 [ 276.286744][ C0] hci_conn_del+0x8c4/0xc40 [ 276.286762][ C0] hci_conn_hash_flush+0x18e/0x240 [ 276.286782][ C0] hci_dev_close_sync+0x9ef/0x11a0 [ 276.286808][ C0] hci_unregister_dev+0x20b/0x510 [ 276.286831][ C0] vhci_release+0x80/0xd0 [ 276.286853][ C0] ? __pfx_vhci_release+0x10/0x10 [ 276.286876][ C0] __fput+0x23f/0x880 [ 276.286898][ C0] task_work_run+0x24f/0x310 [ 276.286916][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 276.286938][ C0] ? __pfx_task_work_run+0x10/0x10 [ 276.286955][ C0] ? do_exit+0xa2a/0x28e0 [ 276.286970][ C0] ? kmem_cache_free+0x1a2/0x420 [ 276.286986][ C0] ? do_exit+0xa2a/0x28e0 [ 276.287002][ C0] do_exit+0xa2f/0x28e0 [ 276.287020][ C0] ? __pfx_do_exit+0x10/0x10 [ 276.287036][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.287067][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.287090][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.287112][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 276.287134][ C0] do_group_exit+0x207/0x2c0 [ 276.287148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.287169][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 276.287184][ C0] get_signal+0x16a3/0x1740 [ 276.287206][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 276.287222][ C0] ? __pfx_get_signal+0x10/0x10 [ 276.287242][ C0] arch_do_signal_or_restart+0x96/0x860 [ 276.287264][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 276.287284][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.287310][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 276.287327][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 276.287360][ C0] do_syscall_64+0x100/0x230 [ 276.287377][ C0] ? clear_bhb_loop+0x35/0x90 [ 276.287406][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.287430][ C0] RIP: 0033:0x7f258f7805ac [ 276.287442][ C0] Code: Unable to access opcode bytes at 0x7f258f780582. [ 276.287472][ C0] RSP: 002b:00007ffc544fb830 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 276.287488][ C0] RAX: 0000000000000020 RBX: 00007f2590464620 RCX: 00007f258f7805ac [ 276.287499][ C0] RDX: 0000000000000020 RSI: 00007f2590464670 RDI: 0000000000000003 [ 276.287509][ C0] RBP: 0000000000000000 R08: 00007ffc544fb884 R09: 000000000000000c [ 276.287520][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 276.287530][ C0] R13: 0000000000000000 R14: 00007f2590464670 R15: 0000000000000000 [ 276.287546][ C0] [ 277.014447][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.040586][ T5140] Bluetooth: hci2: command tx timeout [ 277.045003][ T5830] Bluetooth: hci6: command tx timeout [ 277.047729][ T5140] Bluetooth: hci3: command tx timeout [ 277.167391][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 277.174289][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 277.184795][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.194853][ T30] Call Trace: [ 277.198135][ T30] [ 277.201073][ T30] dump_stack_lvl+0x241/0x360 [ 277.205761][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.210968][ T30] ? __pfx__printk+0x10/0x10 [ 277.215575][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.221590][ T30] ? vscnprintf+0x5d/0x90 [ 277.225940][ T30] panic+0x349/0x880 [ 277.229848][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 277.236007][ T30] ? __pfx_panic+0x10/0x10 [ 277.240422][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 277.245793][ T30] ? __irq_work_queue_local+0x137/0x410 [ 277.251339][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 277.256711][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 277.262867][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 277.269029][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 277.275193][ T30] watchdog+0x1033/0x1040 [ 277.279535][ T30] ? watchdog+0x1ea/0x1040 [ 277.283960][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.288641][ T30] kthread+0x2f0/0x390 [ 277.292709][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.297390][ T30] ? __pfx_kthread+0x10/0x10 [ 277.301979][ T30] ret_from_fork+0x4b/0x80 [ 277.306406][ T30] ? __pfx_kthread+0x10/0x10 [ 277.310996][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.315773][ T30] [ 277.319148][ T30] Kernel Offset: disabled [ 277.323472][ T30] Rebooting in 86400 seconds..