last executing test programs: 31.199141175s ago: executing program 3 (id=2006): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x0) 28.807697248s ago: executing program 3 (id=2012): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x9c}, 0x1, 0xba01}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x80000000000000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r8}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}], 0x0, 0x0, 0x0, 0x0, 0x2}}) 26.384882664s ago: executing program 3 (id=2023): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc", 0x13}], 0x1}, 0x0) 25.541410006s ago: executing program 3 (id=2027): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 21.422449934s ago: executing program 3 (id=2038): socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x1b7a43, 0x23b3b6}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) set_mempolicy(0x1, 0x0, 0x9) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') fsync(r6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) 12.200507514s ago: executing program 1 (id=2071): syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0x88001) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) userfaultfd(0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x400, 0x2, 0x8092031a}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) 11.636139956s ago: executing program 1 (id=2073): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000001800)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x4, 0x4, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0xf2, 0x0, [@mcast2, @mcast1, @remote, @empty, @mcast1, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x3c, 0x3, '\x00', [@padn, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@generic={0x2, 0xd8, "2643e36b1785875b125a39346cb47490823d0f43653d5824b2ce66c6313092b2d672351681192365913f18d34f2aa5941179ff2c7f302f34b43fdd92552b21ce960cbc968128ba2be5be098cc20dc01ee6b02a87764aa7a1dc5e382785f40d81635fe5aa027d1e00940d3c65c2dc0ece79d641bb2400d72a832a6ab1d047114b2568c53779571f44f9b0869dd91c1fbaf9ee2b54e58c54bb0bc69aa8acc08b1f37e377261ad28b0b559f966c5597c385fcb4fef68e7c8ca093373f1f358df9e2b199dd67c297cb0113a46d16c0bf0e26dd8c0e18c4dd2275"}, @enc_lim={0x4, 0x1, 0xdb}, @generic={0x0, 0x5a, "e60a04df37a74fc72c6f2a751999de0c8117fae0b6ce8431ad66fe5ed9c4292083ccee155ccaf67e134652f071999d91b50294d4998cb5ec3002b4cb32098c9a6e88bcd9a67308cab5bb459129b7e315d93675f40be537529090"}]}}}], 0x2d0}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c"], 0x20}}, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x161101, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0xffffffff, {0x2}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}}, 0x0) 8.88213036s ago: executing program 2 (id=2080): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0xfff, 0x2}, {0x0, 0x0, 0x0, 0xa7}]}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.498592881s ago: executing program 2 (id=2084): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6.298525355s ago: executing program 4 (id=2086): pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012"], 0x3}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 5.615271532s ago: executing program 0 (id=2087): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000040)=@udp=r3}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="f8", 0x1}], 0x11, &(0x7f00000026c0)=ANY=[], 0x318}}], 0x2, 0x400c404) 5.524206482s ago: executing program 2 (id=2088): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x2, "930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) 5.454381777s ago: executing program 4 (id=2089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x2, 0xd0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 4.635399065s ago: executing program 0 (id=2090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="050000000091c7", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="308f6fdcd8ef95ac180e28e3b7dafa546e208e23230c54cd672deb128dccb3484fc090000000000000abc8c5ed1d0658fe873325c8de8347cf2d7dbcf7d5c0f788", 0x41, 0x240400c4, 0x0, 0x0) 4.575745252s ago: executing program 4 (id=2091): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) 4.478106699s ago: executing program 4 (id=2092): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000001800)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x4, 0xd, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0xf7, 0xbac}}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0xf2, 0x0, [@mcast2, @mcast1, @remote, @empty, @mcast1, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x3c, 0x3, '\x00', [@padn, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@generic={0x2, 0xd8, "2643e36b1785875b125a39346cb47490823d0f43653d5824b2ce66c6313092b2d672351681192365913f18d34f2aa5941179ff2c7f302f34b43fdd92552b21ce960cbc968128ba2be5be098cc20dc01ee6b02a87764aa7a1dc5e382785f40d81635fe5aa027d1e00940d3c65c2dc0ece79d641bb2400d72a832a6ab1d047114b2568c53779571f44f9b0869dd91c1fbaf9ee2b54e58c54bb0bc69aa8acc08b1f37e377261ad28b0b559f966c5597c385fcb4fef68e7c8ca093373f1f358df9e2b199dd67c297cb0113a46d16c0bf0e26dd8c0e18c4dd2275"}, @enc_lim={0x4, 0x1, 0xdb}, @generic={0x0, 0x5a, "e60a04df37a74fc72c6f2a751999de0c8117fae0b6ce8431ad66fe5ed9c4292083ccee155ccaf67e134652f071999d91b50294d4998cb5ec3002b4cb32098c9a6e88bcd9a67308cab5bb459129b7e315d93675f40be537529090"}]}}}], 0x320}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c"], 0x20}}, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x161101, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0xffffffff, {0x2}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}}, 0x0) 4.302454682s ago: executing program 0 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 3.69887797s ago: executing program 2 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x4, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc80000]}, 0x45c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) 3.449923496s ago: executing program 0 (id=2095): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="850000002e000000350000000000ba000700000008000000950000000000000064f1c09faf5d6806f8a1572b41a141d524581835d80532cb457f454698165b61a3cf5fc6dd8442230e35230163cf094949fc8b0a9114f43d1b6538f5976be4adc07e8c97d76b18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x40}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="20000000080002000200000008000200020000000800020002000000080001000000000008008427c137cf54ca14ef0b25c117ca54e82b74260008000100010000007c3095e4b389967be9de4998bcecad079761bb56cfb868359af6a237935fefbe76e39b49ae5d28bdc3c271"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.758835641s ago: executing program 4 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.566178797s ago: executing program 4 (id=2097): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000001800)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x4, 0xc, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x3f, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6f"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0xf2, 0x0, [@mcast2, @mcast1, @remote, @empty, @mcast1, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x3c, 0x3, '\x00', [@padn, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xd}]}}}, @dstopts={{0x158, 0x29, 0x37, {0x0, 0x27, '\x00', [@generic={0x2, 0xd8, "2643e36b1785875b125a39346cb47490823d0f43653d5824b2ce66c6313092b2d672351681192365913f18d34f2aa5941179ff2c7f302f34b43fdd92552b21ce960cbc968128ba2be5be098cc20dc01ee6b02a87764aa7a1dc5e382785f40d81635fe5aa027d1e00940d3c65c2dc0ece79d641bb2400d72a832a6ab1d047114b2568c53779571f44f9b0869dd91c1fbaf9ee2b54e58c54bb0bc69aa8acc08b1f37e377261ad28b0b559f966c5597c385fcb4fef68e7c8ca093373f1f358df9e2b199dd67c297cb0113a46d16c0bf0e26dd8c0e18c4dd2275"}, @enc_lim={0x4, 0x1, 0xdb}, @generic={0x0, 0x5a, "e60a04df37a74fc72c6f2a751999de0c8117fae0b6ce8431ad66fe5ed9c4292083ccee155ccaf67e134652f071999d91b50294d4998cb5ec3002b4cb32098c9a6e88bcd9a67308cab5bb459129b7e315d93675f40be537529090"}]}}}], 0x318}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c"], 0x20}}, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x161101, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0xffffffff, {0x2}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}}, 0x0) 2.329619621s ago: executing program 0 (id=2098): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.280871069s ago: executing program 2 (id=2099): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000040)=@udp=r3}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="f8", 0x1}], 0x11, &(0x7f00000026c0)=ANY=[], 0x318}}], 0x2, 0x400c404) 2.254808763s ago: executing program 1 (id=2100): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 1.159986181s ago: executing program 1 (id=2101): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 123.72221ms ago: executing program 1 (id=2102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="050000000091c7", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="308f6fdcd8ef95ac180e28e3b7dafa546e208e23230c54cd672deb128dccb3484fc090000000000000abc8c5ed1d0658fe873325c8de8347cf2d7dbcf7d5c0f788", 0x41, 0x240400c4, 0x0, 0x0) 78.32671ms ago: executing program 2 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={&(0x7f0000000b00)="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", 0xe00}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000040) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, @loopback={0x300}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5}}}}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e000100697036677265746170000000400002800400120005000b000700000008000100", @ANYRES32, @ANYBLOB="0500080000000000080004000004", @ANYRES32, @ANYBLOB="060011004e240000080003", @ANYRES32], 0x7c}, 0x1, 0x8}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 78.119577ms ago: executing program 3 (id=2075): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x2, 0xcc, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.525082ms ago: executing program 0 (id=2104): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0x2, "930f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f"], 0xfdef) 0s ago: executing program 1 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x6d, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0x3}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) kernel console output (not intermixed with test programs): b 5-1: GET_CAPABILITIES returned 0 [ 845.185030][ T5271] usbtmc 5-1:16.0: can't read capabilities [ 845.223149][T12512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.291704][T12519] team0: Port device team_slave_0 added [ 845.300248][T12519] team0: Port device team_slave_1 added [ 845.375718][T12512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.401963][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 845.440530][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.506079][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.649658][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.035759][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.172194][ T5236] Bluetooth: hci7: command tx timeout [ 846.172223][T11809] Bluetooth: hci5: command tx timeout [ 846.305682][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.517737][T11809] Bluetooth: hci2: command tx timeout [ 846.572229][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.739241][T12519] hsr_slave_0: entered promiscuous mode [ 847.121836][T12519] hsr_slave_1: entered promiscuous mode [ 847.138151][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.164160][T12519] Cannot create hsr debugfs directory [ 847.218441][ T5271] usb 5-1: USB disconnect, device number 44 [ 848.100046][T12512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 848.109035][T12512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 848.124500][ T5601] bridge_slave_1: left allmulticast mode [ 848.130462][ T5601] bridge_slave_1: left promiscuous mode [ 848.140699][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.172010][ T5601] bridge_slave_0: left allmulticast mode [ 848.182690][ T5601] bridge_slave_0: left promiscuous mode [ 848.192000][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.238491][T11809] Bluetooth: hci5: command tx timeout [ 848.244920][ T5236] Bluetooth: hci7: command tx timeout [ 848.594720][ T5270] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 848.654907][T12593] fuse: Bad value for 'fd' [ 848.755889][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.768095][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.785943][ T5270] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 848.795423][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.811320][ T5270] usb 5-1: config 0 descriptor?? [ 849.161787][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.182817][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.237124][ T5270] sony 0003:054C:024B.0011: unexpected long global item [ 849.297925][ T5601] bond0 (unregistering): Released all slaves [ 849.315255][ T5270] sony 0003:054C:024B.0011: parse failed [ 849.383880][ T5270] sony 0003:054C:024B.0011: probe with driver sony failed with error -22 [ 849.411657][T12512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 849.439601][T12512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 849.465270][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'. [ 849.481066][ T5270] usb 5-1: USB disconnect, device number 45 [ 849.766331][T12519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.900755][T12519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.049386][T12519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.117828][ T5601] hsr_slave_0: left promiscuous mode [ 850.125108][ T5601] hsr_slave_1: left promiscuous mode [ 850.356212][T11809] Bluetooth: hci5: command tx timeout [ 850.356448][ T5236] Bluetooth: hci7: command tx timeout [ 850.410342][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.568761][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.662917][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.705850][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.850304][ T5601] veth1_macvtap: left promiscuous mode [ 850.880591][ T5601] veth0_macvtap: left promiscuous mode [ 850.901946][ T5601] veth1_vlan: left promiscuous mode [ 850.920461][ T5601] veth0_vlan: left promiscuous mode [ 851.084195][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 851.245564][ T8] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 851.262140][ T8] usb 5-1: config 0 has no interface number 0 [ 851.281617][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 851.321130][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.339580][ T8] usb 5-1: config 0 descriptor?? [ 852.238845][ T29] audit: type=1326 audit(1728560209.139:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.261124][ T29] audit: type=1326 audit(1728560209.139:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.285560][ T29] audit: type=1326 audit(1728560209.139:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.313542][ T29] audit: type=1326 audit(1728560209.139:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.344116][ T29] audit: type=1326 audit(1728560209.139:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.366028][ T29] audit: type=1326 audit(1728560209.139:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.388099][ T29] audit: type=1326 audit(1728560209.139:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.414505][ T29] audit: type=1326 audit(1728560209.139:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12602 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4957dff9 code=0x7ffc0000 [ 852.787225][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 852.856499][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 854.475670][ T8] usb 5-1: string descriptor 0 read error: -71 [ 854.506633][ T8] ath6kl: Failed to submit usb control message: -71 [ 854.544976][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 854.552231][ T8] ath6kl: Unable to send get target info: -71 [ 854.569915][ T8] ath6kl: Failed to init ath6kl core: -71 [ 854.576203][ T8] ath6kl_usb 5-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 854.612334][ T8] usb 5-1: USB disconnect, device number 46 [ 855.381601][T12512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.230598][T12512] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.385971][T12519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.423586][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.430736][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.577172][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.584310][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.851832][T12646] bio_check_eod: 2 callbacks suppressed [ 856.851875][T12646] syz.2.1539: attempt to access beyond end of device [ 856.851875][T12646] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 856.871713][T12646] syz.2.1539: attempt to access beyond end of device [ 856.871713][T12646] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 856.885024][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 856.895829][T12646] syz.2.1539: attempt to access beyond end of device [ 856.895829][T12646] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 856.909114][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 856.919407][T12646] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 856.927806][T12646] UDF-fs: Scanning with blocksize 512 failed [ 856.936599][T12646] syz.2.1539: attempt to access beyond end of device [ 856.936599][T12646] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 856.950710][T12646] syz.2.1539: attempt to access beyond end of device [ 856.950710][T12646] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 856.964257][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 856.974806][T12646] syz.2.1539: attempt to access beyond end of device [ 856.974806][T12646] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 856.988169][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 856.997889][T12646] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 857.005773][T12646] UDF-fs: Scanning with blocksize 1024 failed [ 857.014045][T12646] syz.2.1539: attempt to access beyond end of device [ 857.014045][T12646] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 857.028441][T12646] syz.2.1539: attempt to access beyond end of device [ 857.028441][T12646] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 857.042353][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 857.052860][T12646] syz.2.1539: attempt to access beyond end of device [ 857.052860][T12646] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 857.066257][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 857.075938][T12646] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 857.083637][T12646] UDF-fs: Scanning with blocksize 2048 failed [ 857.091531][T12646] syz.2.1539: attempt to access beyond end of device [ 857.091531][T12646] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 857.105454][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 857.115916][T12646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 857.126188][T12646] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 857.134565][T12646] UDF-fs: Scanning with blocksize 4096 failed [ 857.140703][T12646] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 857.400397][T12512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 857.589419][T12519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 857.659733][T12519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 857.740420][T12519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 857.817839][T12519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 858.631869][ T5601] bridge_slave_1: left allmulticast mode [ 858.680491][ T5601] bridge_slave_1: left promiscuous mode [ 858.703862][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.749612][ T5601] bridge_slave_0: left allmulticast mode [ 858.800782][ T5601] bridge_slave_0: left promiscuous mode [ 858.852328][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.692188][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.708176][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.736263][ T5601] bond0 (unregistering): Released all slaves [ 859.798255][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 860.282545][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.333666][ T5601] hsr_slave_0: left promiscuous mode [ 860.359256][ T5601] hsr_slave_1: left promiscuous mode [ 860.387005][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.401780][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.415415][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.423755][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.461938][ T5601] veth1_macvtap: left promiscuous mode [ 860.472019][ T5601] veth0_macvtap: left promiscuous mode [ 860.479863][ T5601] veth1_vlan: left promiscuous mode [ 860.490535][ T5601] veth0_vlan: left promiscuous mode [ 861.684865][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 861.758758][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 866.176974][T12698] sctp: [Deprecated]: syz.4.1550 (pid 12698) Use of int in maxseg socket option. [ 866.176974][T12698] Use struct sctp_assoc_value instead [ 866.990431][T12512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.078955][T12702] Illegal XDP return value 4294967274 on prog (id 313) dev N/A, expect packet loss! [ 867.109297][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.271290][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.278479][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.328925][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.336098][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.393000][T12512] veth0_vlan: entered promiscuous mode [ 867.497737][T12512] veth1_vlan: entered promiscuous mode [ 867.518472][T12512] veth0_macvtap: entered promiscuous mode [ 867.526330][T12512] veth1_macvtap: entered promiscuous mode [ 867.538102][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.553183][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.565477][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.576057][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.586079][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.597299][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.608388][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.619033][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.630322][T12512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.659782][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.671810][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.686228][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.231089][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.243998][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.274791][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.310414][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.332463][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.388307][T12512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.445820][T12512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.468432][T12512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.477368][T12512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.486330][T12512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.792570][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.817786][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.831923][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.990272][ T5547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.016814][ T5547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.145031][T12519] veth0_vlan: entered promiscuous mode [ 869.195146][T12519] veth1_vlan: entered promiscuous mode [ 870.013141][T12726] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1506'. [ 870.023321][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 870.225851][T12519] veth0_macvtap: entered promiscuous mode [ 870.262879][T12519] veth1_macvtap: entered promiscuous mode [ 870.314409][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.326066][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.326119][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.353815][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.369356][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.382838][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.409324][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.456720][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.501751][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.535321][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.588469][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.632095][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.646764][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.668930][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.684103][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.708603][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.728892][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.752229][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.772988][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.793476][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.810824][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.831257][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.859780][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.902695][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.931501][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 870.967711][T12733] ip6gretap0: entered promiscuous mode [ 871.013803][T12733] macvtap1: entered promiscuous mode [ 871.033485][T12733] macvtap1: entered allmulticast mode [ 871.057505][T12733] ip6gretap0: entered allmulticast mode [ 871.093024][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 871.124460][T12519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.144769][T12519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.164476][T12519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.201388][T12519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.402434][T12742] sctp: [Deprecated]: syz.1.1560 (pid 12742) Use of int in maxseg socket option. [ 871.402434][T12742] Use struct sctp_assoc_value instead [ 871.496146][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.519456][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.538863][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.551978][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.238222][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 873.363847][T12765] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1566'. [ 874.242346][T12770] syzkaller0: entered promiscuous mode [ 874.248225][T12770] syzkaller0: entered allmulticast mode [ 878.443316][T12796] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 878.709673][T12800] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 879.470116][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 880.061588][T12816] xt_connbytes: Forcing CT accounting to be enabled [ 880.070714][T12816] Cannot find add_set index 0 as target [ 881.372645][T12826] sctp: [Deprecated]: syz.1.1581 (pid 12826) Use of int in maxseg socket option. [ 881.372645][T12826] Use struct sctp_assoc_value instead [ 883.210951][T12846] fuse: Bad value for 'fd' [ 886.012218][T12877] sctp: [Deprecated]: syz.0.1596 (pid 12877) Use of int in maxseg socket option. [ 886.012218][T12877] Use struct sctp_assoc_value instead [ 888.986391][T11809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.999656][T11809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 889.008113][T11809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 889.128208][T11809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 889.138277][T11809] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 889.145720][T11809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 890.894818][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 890.929593][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 890.959701][ T2971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.009809][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 891.030504][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 891.038944][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 891.046915][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 891.064868][T11809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 891.087102][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 891.099561][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 891.107378][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 891.116209][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 891.148673][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 891.311211][ T2971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.444338][ T5230] Bluetooth: hci0: command tx timeout [ 891.464885][T12908] chnl_net:caif_netlink_parms(): no params data found [ 891.681283][ T2971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.122441][ T2971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.350734][T12908] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.386940][T12908] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.596497][T12908] bridge_slave_0: entered allmulticast mode [ 892.729109][T12908] bridge_slave_0: entered promiscuous mode [ 892.983175][T12908] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.110149][T12908] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.114246][ T5230] Bluetooth: hci4: command tx timeout [ 893.118054][T12908] bridge_slave_1: entered allmulticast mode [ 893.129728][T12908] bridge_slave_1: entered promiscuous mode [ 893.295194][ T5230] Bluetooth: hci6: command tx timeout [ 893.576345][ T5230] Bluetooth: hci0: command tx timeout [ 893.717047][T12956] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1616'. [ 895.433982][ T5230] Bluetooth: hci4: command tx timeout [ 895.434099][ T5236] Bluetooth: hci6: command tx timeout [ 895.594342][ T5236] Bluetooth: hci0: command tx timeout [ 895.885202][T12908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.907972][T12908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.366343][T12908] team0: Port device team_slave_0 added [ 896.486312][T12908] team0: Port device team_slave_1 added [ 896.716768][ T2971] bridge_slave_1: left allmulticast mode [ 896.754248][ T2971] bridge_slave_1: left promiscuous mode [ 896.771509][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.781489][ T2971] bridge_slave_0: left allmulticast mode [ 896.817394][ T2971] bridge_slave_0: left promiscuous mode [ 896.838246][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.514210][ T5236] Bluetooth: hci6: command tx timeout [ 897.534390][ T5236] Bluetooth: hci4: command tx timeout [ 897.674134][ T5236] Bluetooth: hci0: command tx timeout [ 897.943314][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.970174][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.995459][ T2971] bond0 (unregistering): Released all slaves [ 898.039367][T12925] chnl_net:caif_netlink_parms(): no params data found [ 898.171735][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 898.203757][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 898.221847][T12908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.242627][T12908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.268659][T12908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.307335][T12928] chnl_net:caif_netlink_parms(): no params data found [ 898.543981][T12908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.551072][T12908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.614882][T12908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.295391][T12908] hsr_slave_0: entered promiscuous mode [ 899.452108][T12908] hsr_slave_1: entered promiscuous mode [ 899.510026][T12908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.544210][T12908] Cannot create hsr debugfs directory [ 899.594218][ T5236] Bluetooth: hci6: command tx timeout [ 899.609282][ T5236] Bluetooth: hci4: command tx timeout [ 899.765033][T12925] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.794986][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.816674][T12925] bridge_slave_0: entered allmulticast mode [ 899.842871][T12925] bridge_slave_0: entered promiscuous mode [ 899.868383][T12925] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.905188][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.921187][T12925] bridge_slave_1: entered allmulticast mode [ 899.932953][T12925] bridge_slave_1: entered promiscuous mode [ 900.116224][ T2971] hsr_slave_0: left promiscuous mode [ 900.142509][ T2971] hsr_slave_1: left promiscuous mode [ 900.224965][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.232655][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.335180][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.413376][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.535774][ T2971] veth1_macvtap: left promiscuous mode [ 900.545194][ T2971] veth0_macvtap: left promiscuous mode [ 900.550787][ T2971] veth1_vlan: left promiscuous mode [ 900.568011][ T2971] veth0_vlan: left promiscuous mode [ 902.128844][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 902.218297][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 903.069266][T13039] warning: `syz.0.1627' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 903.111160][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 903.196792][T12925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.270387][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.278562][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.286904][T12928] bridge_slave_0: entered allmulticast mode [ 903.293875][T12928] bridge_slave_0: entered promiscuous mode [ 903.386683][T12925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.443010][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.484557][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.492577][T12928] bridge_slave_1: entered allmulticast mode [ 903.521748][T12928] bridge_slave_1: entered promiscuous mode [ 903.651837][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 903.694676][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 903.835088][T12925] team0: Port device team_slave_0 added [ 903.956339][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 904.055658][T12925] team0: Port device team_slave_1 added [ 904.321254][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.400757][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.413436][T12925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.439671][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.879030][T12925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.902698][T12925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.931743][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.989738][T12925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.138839][T12928] team0: Port device team_slave_0 added [ 906.169257][T12928] team0: Port device team_slave_1 added [ 906.193426][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 906.356776][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 906.395013][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.401970][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.444056][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.557112][ T2971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.588970][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.605910][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.637523][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.679640][T12925] hsr_slave_0: entered promiscuous mode [ 907.687142][T12925] hsr_slave_1: entered promiscuous mode [ 907.693213][T12925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 907.707716][T12925] Cannot create hsr debugfs directory [ 907.940038][T12928] hsr_slave_0: entered promiscuous mode [ 907.976422][T12928] hsr_slave_1: entered promiscuous mode [ 907.995353][T12928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.016505][T12928] Cannot create hsr debugfs directory [ 908.148506][ T2971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.406097][ T2971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.578063][ T2971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.666670][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'. [ 908.897158][T12908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 909.030314][T12908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 909.047004][T12908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 909.132500][ T2971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.181514][T12908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 909.283038][ T2971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.468520][ T2971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.660073][ T2971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.765243][T12908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.861217][T12908] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.976880][ T2971] bridge_slave_1: left allmulticast mode [ 909.992767][ T2971] bridge_slave_1: left promiscuous mode [ 910.015562][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.030889][ T2971] bridge_slave_0: left allmulticast mode [ 910.038710][ T2971] bridge_slave_0: left promiscuous mode [ 910.048716][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.062893][ T2971] bridge_slave_1: left allmulticast mode [ 910.072770][ T2971] bridge_slave_1: left promiscuous mode [ 910.081256][ T5270] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 910.095812][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.111852][ T2971] bridge_slave_0: left allmulticast mode [ 910.119407][ T2971] bridge_slave_0: left promiscuous mode [ 910.131797][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.249649][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.290295][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.328368][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 910.382743][ T5270] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.418065][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.433798][ T2971] ip6gretap0 (unregistering): left allmulticast mode [ 910.441872][ T5270] usb 1-1: config 0 descriptor?? [ 910.874845][ T5270] usbhid 1-1:0.0: can't add hid device: -71 [ 910.900792][ T5270] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 910.920890][ T5270] usb 1-1: USB disconnect, device number 45 [ 912.355198][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.443394][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.472802][ T2971] bond0 (unregistering): Released all slaves [ 912.767906][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.791409][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.819866][ T2971] bond0 (unregistering): Released all slaves [ 912.843470][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.850640][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.920573][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.927721][ T5604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.070883][T13138] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 913.743860][T12925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 913.818112][T12925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 914.192205][T12925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 914.225435][T12908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.258130][T12925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 915.149617][ T2971] hsr_slave_0: left promiscuous mode [ 915.580802][ T2971] hsr_slave_1: left promiscuous mode [ 915.726546][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.743417][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.765175][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.772670][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.959545][ T2971] hsr_slave_0: left promiscuous mode [ 915.965761][ T2971] hsr_slave_1: left promiscuous mode [ 916.057773][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.066102][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.317689][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.423282][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.954859][ T2971] veth1_macvtap: left promiscuous mode [ 916.974132][ T2971] veth0_macvtap: left promiscuous mode [ 916.980141][ T2971] veth1_vlan: left promiscuous mode [ 917.606753][ T2971] veth0_vlan: left promiscuous mode [ 917.629113][ T2971] veth1_macvtap: left promiscuous mode [ 917.645005][ T2971] veth0_macvtap: left promiscuous mode [ 917.650686][ T2971] veth1_vlan: left promiscuous mode [ 917.676695][ T2971] veth0_vlan: left promiscuous mode [ 919.521980][T13220] 9pnet_fd: Insufficient options for proto=fd [ 920.471538][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 920.690524][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 924.692084][T13272] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1659'. [ 925.713105][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 925.833701][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 926.635345][ T2582] kworker/u8:6 (2582) used greatest stack depth: 18680 bytes left [ 927.336264][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 927.345782][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 927.364945][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 927.373806][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 927.385147][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 927.393260][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 927.515652][T12908] veth0_vlan: entered promiscuous mode [ 927.541335][T12908] veth1_vlan: entered promiscuous mode [ 927.577188][T12908] veth0_macvtap: entered promiscuous mode [ 927.586983][T12908] veth1_macvtap: entered promiscuous mode [ 927.611867][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.649131][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.680098][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.691096][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.707489][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.719280][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.732744][T12908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.028548][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.040897][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.054140][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.068148][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.079794][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.091518][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.112448][T12908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.273738][T12908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.300396][T12908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.322400][T12908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.346757][T12908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.754743][T12928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 928.765945][T12928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 928.824624][T12928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 928.866715][T12928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 929.030456][T10355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.041619][T10355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.241091][T12925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.274629][T13283] chnl_net:caif_netlink_parms(): no params data found [ 929.300664][T12925] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.327181][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.344046][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.434638][ T5236] Bluetooth: hci2: command tx timeout [ 929.471305][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.478455][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.515465][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.522615][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.643527][T13304] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1667'. [ 931.427695][T13283] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.436494][T13283] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.444270][T13283] bridge_slave_0: entered allmulticast mode [ 931.452359][T13283] bridge_slave_0: entered promiscuous mode [ 931.460638][T13283] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.468906][T13283] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.476357][T13283] bridge_slave_1: entered allmulticast mode [ 931.482904][T13283] bridge_slave_1: entered promiscuous mode [ 931.514465][ T5236] Bluetooth: hci2: command tx timeout [ 931.615308][T13283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.632566][T13283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.757649][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.774198][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.894197][T13283] team0: Port device team_slave_0 added [ 931.908206][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.963115][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.593005][ T2971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.688067][T13283] team0: Port device team_slave_1 added [ 932.755968][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.763096][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.887213][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.894380][T10355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.978502][ T2971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.013887][T12925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.052506][T13283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.072027][T13283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.101229][T13283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.134699][T13283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.150570][T13283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.180333][T13283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.212779][ T2971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.278431][T12928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 933.442727][ T2971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.497480][T13283] hsr_slave_0: entered promiscuous mode [ 933.503798][T13283] hsr_slave_1: entered promiscuous mode [ 933.596510][ T5236] Bluetooth: hci2: command tx timeout [ 934.149106][ T2971] bridge_slave_1: left allmulticast mode [ 934.165715][ T2971] bridge_slave_1: left promiscuous mode [ 934.171399][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.235898][ T2971] bridge_slave_0: left allmulticast mode [ 934.263073][ T2971] bridge_slave_0: left promiscuous mode [ 934.283593][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.684270][ T5236] Bluetooth: hci2: command tx timeout [ 936.167578][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.196801][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.209308][ T2971] bond0 (unregistering): Released all slaves [ 936.883124][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1678'. [ 936.933574][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.087719][ T2971] hsr_slave_0: left promiscuous mode [ 937.101866][ T2971] hsr_slave_1: left promiscuous mode [ 937.118555][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.170902][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.237109][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.252075][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.283353][ T2971] veth1_macvtap: left promiscuous mode [ 937.290388][ T2971] veth0_macvtap: left promiscuous mode [ 937.301207][ T2971] veth1_vlan: left promiscuous mode [ 937.312634][ T2971] veth0_vlan: left promiscuous mode [ 938.117227][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 938.183638][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 939.112193][T12925] veth0_vlan: entered promiscuous mode [ 939.206206][T12925] veth1_vlan: entered promiscuous mode [ 939.438186][T12928] veth0_vlan: entered promiscuous mode [ 939.479866][T12925] veth0_macvtap: entered promiscuous mode [ 939.523116][T12928] veth1_vlan: entered promiscuous mode [ 939.540784][T12925] veth1_macvtap: entered promiscuous mode [ 939.601849][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.626700][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.648638][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.660457][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.671349][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.689304][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.706032][T12925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.762093][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.772984][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.783330][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.812791][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.830101][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.850964][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.888220][T12925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.997045][T12925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.015484][T12925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.029552][T12925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.061687][T12925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.110121][T12928] veth0_macvtap: entered promiscuous mode [ 940.160760][T13283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 940.186633][T13283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 940.297776][T12928] veth1_macvtap: entered promiscuous mode [ 940.457732][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.505458][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.521678][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.552341][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.564760][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.582537][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.595609][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.606534][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.635619][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.679815][T13283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 940.741738][T13283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 941.651669][ T5602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.662824][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.681931][ T5602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.690439][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.708572][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.768806][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.801812][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.855434][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.892638][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.914241][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.938953][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.070245][T10355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.078233][T10355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.838280][T12928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.874516][T12928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.888560][T12928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.979817][T12928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.248966][T13283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.269549][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.302700][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.424599][T13283] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.457876][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.465072][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.628953][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.636093][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.685633][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.693933][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.601256][T13283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.751073][T13283] veth0_vlan: entered promiscuous mode [ 944.776819][T13283] veth1_vlan: entered promiscuous mode [ 944.835511][ T5236] block nbd3: Receive control failed (result -104) [ 944.994558][T13283] veth0_macvtap: entered promiscuous mode [ 945.003626][T13283] veth1_macvtap: entered promiscuous mode [ 945.031967][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 945.056813][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.089759][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.100715][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.115750][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.128005][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.139886][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.159874][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.174846][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.188602][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.201203][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.224396][T13283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.241214][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.252494][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.270429][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.312704][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.413144][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.458971][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.474278][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.496451][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.509532][T13283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.523146][T13283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.535523][T13283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.560481][T13283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.570305][T13283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.583850][T13283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.601877][T13283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.700887][T10355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.794251][T10355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.818938][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.830153][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.403786][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 946.581405][T13504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 946.682490][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1694'. [ 946.712837][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 946.901439][T13512] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1695'. [ 949.796084][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 950.435974][T13548] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 950.994105][ T5273] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 951.089398][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 951.164102][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 951.250731][ T5273] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 951.288027][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 951.328177][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.411441][ T5273] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.446814][ T5273] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.499307][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.588604][ T5236] Bluetooth: hci2: command tx timeout [ 954.363474][ T5273] usb 1-1: usb_control_msg returned -71 [ 954.404092][ T5273] usbtmc 1-1:16.0: can't read capabilities [ 954.899685][ T5273] usb 1-1: USB disconnect, device number 46 [ 955.014489][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.024208][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 955.035318][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 955.043353][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 955.055241][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 955.065468][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 955.360024][T11496] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 955.619771][T11496] usb 2-1: Using ep0 maxpacket: 8 [ 955.707261][T13597] netlink: 'syz.0.1720': attribute type 10 has an invalid length. [ 955.716422][T13597] syz_tun: entered promiscuous mode [ 955.725355][T13597] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 955.768014][T11496] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 955.814188][T11496] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 955.858374][T11496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.888004][T13585] chnl_net:caif_netlink_parms(): no params data found [ 956.137015][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.147065][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.827058][T13585] bridge_slave_0: entered allmulticast mode [ 956.851613][T13585] bridge_slave_0: entered promiscuous mode [ 956.900600][T13601] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 956.979884][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.997601][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.058832][T13585] bridge_slave_1: entered allmulticast mode [ 957.076535][T13585] bridge_slave_1: entered promiscuous mode [ 957.114167][ T5230] Bluetooth: hci3: command tx timeout [ 957.254383][T13585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.276851][T13585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.512896][T13585] team0: Port device team_slave_0 added [ 958.525079][ T8] usb 2-1: USB disconnect, device number 29 [ 958.580367][T13624] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 958.591576][T13585] team0: Port device team_slave_1 added [ 959.195969][T13585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.195991][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.196017][T13585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.197734][T13585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.197752][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.197778][T13585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.229888][ T5230] Bluetooth: hci3: command tx timeout [ 959.263623][T13626] xt_connbytes: Forcing CT accounting to be enabled [ 959.351111][T13626] Cannot find add_set index 0 as target [ 959.522610][T13585] hsr_slave_0: entered promiscuous mode [ 959.537889][T13585] hsr_slave_1: entered promiscuous mode [ 959.546304][T13585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.556801][T13585] Cannot create hsr debugfs directory [ 960.697767][T13629] block nbd4: shutting down sockets [ 961.042298][T13585] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.841971][ T5230] Bluetooth: hci3: command tx timeout [ 961.922653][T13585] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.062113][T13660] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1735'. [ 963.026200][T13585] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.099073][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 963.168783][T13585] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.374104][ T5273] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 963.450352][T13585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 963.489275][T13585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 963.590832][T13585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 963.620939][T13585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 963.736640][ T5273] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 963.744941][ T5273] usb 3-1: config 4 has no interface number 0 [ 963.765022][ T5273] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 963.774241][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.782304][ T5273] usb 3-1: Product: syz [ 964.504054][ T5236] Bluetooth: hci3: command tx timeout [ 964.514335][ T5273] usb 3-1: Manufacturer: syz [ 964.518986][ T5273] usb 3-1: SerialNumber: syz [ 964.574092][T13585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.590949][T13585] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.623684][T13585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 964.634262][T13585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.674156][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.681307][T10355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.703703][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.710881][T10355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.826942][ T5273] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 964.837314][ T5230] Bluetooth: hci5: command 0x0406 tx timeout [ 965.775017][T13585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.813731][T13585] veth0_vlan: entered promiscuous mode [ 965.825316][T13585] veth1_vlan: entered promiscuous mode [ 965.850159][T13585] veth0_macvtap: entered promiscuous mode [ 965.859102][T13585] veth1_macvtap: entered promiscuous mode [ 965.867091][ T5273] vp7045: USB control message 'out' went wrong. [ 965.873376][ T5273] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 965.884280][ T5273] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 965.929995][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.947367][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.996677][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.037954][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.071187][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.111178][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.146911][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.158533][ T5273] usb 3-1: USB disconnect, device number 32 [ 966.180263][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.811605][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.824859][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.835004][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.845635][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.857120][T13585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.866246][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.877166][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.887014][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.897815][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.908375][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.918924][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.928780][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.939498][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.949576][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.960622][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.970600][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.981126][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.992121][T13585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.001640][T13585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.010386][T13585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.019131][T13585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.027908][T13585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.112745][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 967.122025][T13696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 967.135341][T13696] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 968.003050][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.023591][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.031271][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.039361][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.146688][T13726] xt_connbytes: Forcing CT accounting to be enabled [ 971.153392][T13726] Cannot find add_set index 0 as target [ 974.635484][ T10] block nbd3: Possible stuck request ffff888024f13000: control (flush@18446744073709551104,0B). Runtime 30 seconds [ 977.014682][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 977.024831][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 977.034595][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 977.042996][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 977.051829][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 977.059660][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 978.504679][T13783] netlink: 'syz.0.1765': attribute type 10 has an invalid length. [ 978.766324][T13772] chnl_net:caif_netlink_parms(): no params data found [ 979.027539][T13772] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.044307][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.052206][T13772] bridge_slave_0: entered allmulticast mode [ 979.083555][T13772] bridge_slave_0: entered promiscuous mode [ 979.111127][T13772] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.126598][ T5230] Bluetooth: hci7: command tx timeout [ 979.166682][T13772] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.209874][T13772] bridge_slave_1: entered allmulticast mode [ 979.241305][T13772] bridge_slave_1: entered promiscuous mode [ 979.307785][T13772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.339126][T13772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.403825][T13772] team0: Port device team_slave_0 added [ 979.427711][T13772] team0: Port device team_slave_1 added [ 979.514401][T13772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.524874][ T5331] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 979.551564][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.589234][T13772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.611486][T13772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.622511][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.718305][T13772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.744056][ T5331] usb 4-1: Using ep0 maxpacket: 8 [ 979.917506][ T5331] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.937243][ T5331] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 980.738603][ T5331] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 980.748705][ T5331] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.762263][ T5331] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 980.771752][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.194197][ T5230] Bluetooth: hci7: command tx timeout [ 981.354437][ T5230] Bluetooth: hci3: command tx timeout [ 981.396694][T13772] hsr_slave_0: entered promiscuous mode [ 981.457855][T13772] hsr_slave_1: entered promiscuous mode [ 981.511489][T13772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.622262][T13772] Cannot create hsr debugfs directory [ 982.246976][ T5331] usb 4-1: usb_control_msg returned -71 [ 982.252775][ T5331] usbtmc 4-1:16.0: can't read capabilities [ 982.291818][ T5331] usb 4-1: USB disconnect, device number 39 [ 982.919530][T13772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.088758][T13772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.206991][T13772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.288586][ T5230] Bluetooth: hci7: command tx timeout [ 983.379153][T13772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.654213][ T35] bridge_slave_1: left allmulticast mode [ 983.660419][ T35] bridge_slave_1: left promiscuous mode [ 983.678886][T11496] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 983.818403][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.830739][ T35] bridge_slave_0: left allmulticast mode [ 983.836824][ T35] bridge_slave_0: left promiscuous mode [ 983.842493][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.896314][T11496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.907380][T11496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.948411][T11496] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 983.971308][T11496] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 984.000055][ T35] ip6gretap0 (unregistering): left allmulticast mode [ 984.016759][T11496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.069808][T11496] usb 1-1: config 0 descriptor?? [ 984.506755][T11496] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 984.539397][T11496] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 984.580066][T11496] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 984.824777][ T5295] usb 1-1: USB disconnect, device number 47 [ 984.849785][ T5296] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 985.171533][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.202562][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.228774][ T35] bond0 (unregistering): Released all slaves [ 985.289931][T13772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 985.354285][ T5230] Bluetooth: hci7: command tx timeout [ 985.360479][T13772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 985.374117][ T5296] usb 3-1: Using ep0 maxpacket: 8 [ 985.393250][ T5296] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 985.550561][T13772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 985.559518][ T5296] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.027228][T13772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.044035][ T5296] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 986.053628][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.164495][ T5296] usbtmc 3-1:16.0: bulk endpoints not found [ 986.513282][ T35] hsr_slave_0: left promiscuous mode [ 986.542875][ T35] hsr_slave_1: left promiscuous mode [ 986.605579][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.622629][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.637167][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.669915][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.796153][ T35] veth1_macvtap: left promiscuous mode [ 986.842794][ T35] veth0_macvtap: left promiscuous mode [ 986.855395][ T35] veth1_vlan: left promiscuous mode [ 986.877712][ T35] veth0_vlan: left promiscuous mode [ 987.995012][T11496] usb 3-1: USB disconnect, device number 33 [ 988.956653][T13865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1783'. [ 992.313440][ T35] team0 (unregistering): Port device team_slave_1 removed [ 992.381961][ T35] team0 (unregistering): Port device team_slave_0 removed [ 993.201916][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.208366][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.060496][T13879] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1787'. [ 994.812788][T13772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.010475][T13772] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.047025][T13772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 995.057458][T13772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.119446][T13887] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1788'. [ 995.151234][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.158385][ T5601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.305821][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.314745][ T5601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.430233][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 995.637321][T13772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.818176][T13772] veth0_vlan: entered promiscuous mode [ 995.836016][T13772] veth1_vlan: entered promiscuous mode [ 995.924469][T13772] veth0_macvtap: entered promiscuous mode [ 995.943181][T13772] veth1_macvtap: entered promiscuous mode [ 995.978716][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.014036][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.034071][T11496] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 996.044999][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.092101][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.112272][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.135256][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.151964][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.164512][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.176120][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.189076][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.209896][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.222164][T11496] usb 4-1: Using ep0 maxpacket: 8 [ 996.241051][T11496] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 996.254021][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.267142][T11496] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 996.282288][T13772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.291399][T11496] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 996.305870][T11496] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 996.320166][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.331749][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.342270][T11496] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 996.364307][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.378162][T11496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.398384][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.415519][T11496] usbtmc 4-1:16.0: bulk endpoints not found [ 996.498694][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.524067][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.571431][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.613147][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.671323][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.722993][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.774744][T13772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.789001][T13772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.808466][T13772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.843342][T13772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.859498][T13772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.872126][T13772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.881974][T13772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.027054][ T5544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.055931][ T5544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.095701][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.110055][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.974451][ T5296] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 998.414015][ T5296] usb 1-1: Using ep0 maxpacket: 8 [ 998.421582][ T5296] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 998.432430][ T5296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 998.443431][ T5296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 998.489668][ T5296] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.536461][ T5296] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.557859][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.801911][ T5273] usb 4-1: USB disconnect, device number 40 [ 999.837741][ T5230] Bluetooth: hci2: command tx timeout [ 1001.098284][ T5296] usb 1-1: usb_control_msg returned -71 [ 1001.104104][ T5296] usbtmc 1-1:16.0: can't read capabilities [ 1001.124501][ T5296] usb 1-1: USB disconnect, device number 48 [ 1001.279132][T13959] netlink: 'syz.3.1806': attribute type 10 has an invalid length. [ 1001.406661][T13959] syz_tun: entered promiscuous mode [ 1001.445232][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 1001.471608][T13959] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1002.554335][T13966] block nbd4: shutting down sockets [ 1004.717203][ T10] block nbd3: Possible stuck request ffff888024f13000: control (flush@18446744073709551104,0B). Runtime 60 seconds [ 1006.007650][ T5270] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1006.174031][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 1006.200582][ T5270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.219708][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1006.230050][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1006.240983][ T5270] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.259313][ T5270] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1006.304167][T14014] block nbd0: Device being setup by another task [ 1006.317326][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.435196][T14016] fuse: Bad value for 'fd' [ 1006.493010][T14015] block nbd0: shutting down sockets [ 1006.549141][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 1007.536400][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 1007.844191][ T5230] Bluetooth: hci0: command tx timeout [ 1007.915245][ T5270] usb 3-1: usb_control_msg returned -71 [ 1007.920883][ T5270] usbtmc 3-1:16.0: can't read capabilities [ 1007.944244][ T5270] usb 3-1: USB disconnect, device number 34 [ 1009.425147][T14054] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 1009.435246][T14054] syz_tun: entered promiscuous mode [ 1009.647327][T14054] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1011.394146][ T5273] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1011.906697][ T5273] usb 5-1: device descriptor read/64, error -71 [ 1012.187488][ T5273] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1012.774189][ T5273] usb 5-1: device descriptor read/64, error -71 [ 1012.905182][ T5273] usb usb5-port1: attempt power cycle [ 1013.304099][ T5273] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1013.324497][ T5273] usb 5-1: device descriptor read/8, error -71 [ 1015.756632][T14093] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.834012][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 1015.894049][ T5273] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1015.944031][ T5230] Bluetooth: hci4: command 0x0406 tx timeout [ 1015.987792][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 1016.004472][ T5273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1016.018210][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1016.030428][ T5273] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1016.042862][ T5273] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.056163][ T5273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1016.065525][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.209349][ T5273] usbtmc 5-1:16.0: bulk endpoints not found [ 1017.594106][ T5273] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1017.774796][ T5273] usb 4-1: device descriptor read/64, error -71 [ 1018.234080][ T5273] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1018.966838][ T5270] usb 5-1: USB disconnect, device number 50 [ 1019.944543][ T5273] usb 4-1: device descriptor read/64, error -71 [ 1020.003190][T14157] block nbd2: shutting down sockets [ 1020.011307][ T10] I/O error, dev nbd2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1020.062000][ T5273] usb usb4-port1: attempt power cycle [ 1020.394005][ T5270] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1020.564187][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 1021.066846][ T5270] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.094041][ T5270] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1021.108954][ T5270] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1021.121728][ T5270] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1021.134737][ T5270] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1021.144006][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.170671][ T5270] usbtmc 1-1:16.0: bulk endpoints not found [ 1021.603732][T14172] netlink: 'syz.4.1867': attribute type 10 has an invalid length. [ 1021.622907][T14172] syz_tun: entered promiscuous mode [ 1021.649442][T14172] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1022.311206][T14181] netlink: 'syz.4.1868': attribute type 10 has an invalid length. [ 1024.059305][ T5273] usb 1-1: USB disconnect, device number 49 [ 1024.594300][ T5273] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1025.099958][T14213] netlink: 'syz.2.1877': attribute type 72 has an invalid length. [ 1025.324090][ T5273] usb 1-1: device descriptor read/64, error -71 [ 1025.744045][ T5273] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1025.857688][T14230] netlink: 'syz.1.1883': attribute type 10 has an invalid length. [ 1026.564246][ T5273] usb 1-1: device descriptor read/64, error -71 [ 1026.677103][ T5273] usb usb1-port1: attempt power cycle [ 1027.372742][T14251] netlink: 'syz.4.1890': attribute type 72 has an invalid length. [ 1030.430865][T14289] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1900'. [ 1030.585612][T14291] netlink: 'syz.4.1902': attribute type 72 has an invalid length. [ 1032.184182][ T5273] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1032.356850][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 1032.380949][ T5273] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1032.402424][ T5273] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1032.414429][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 1032.424138][ T5273] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1032.443991][ T5273] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1032.469088][ T5273] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.512782][ T5273] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1032.555817][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.611289][ T5273] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1033.039145][T14335] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1916'. [ 1033.501771][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 1035.390121][ T10] block nbd3: Possible stuck request ffff888024f13000: control (flush@18446744073709551104,0B). Runtime 90 seconds [ 1035.518711][ T5270] usb 4-1: USB disconnect, device number 44 [ 1036.004057][ T5273] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1036.848650][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 1036.893537][ T5273] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1036.969375][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1037.100976][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1037.196043][ T5273] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.330737][ T5273] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1037.407530][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.677719][ T5273] usb 1-1: GET_CAPABILITIES returned 0 [ 1037.693562][ T5273] usbtmc 1-1:16.0: can't read capabilities [ 1037.755878][ T5270] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1037.834136][T11809] Bluetooth: hci2: command tx timeout [ 1037.880269][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1037.925887][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.963700][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1037.987660][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1038.021873][ T5270] usb 2-1: string descriptor 0 read error: -22 [ 1038.039347][ T5270] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1038.058409][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.069723][ T5270] usb 2-1: config 0 descriptor?? [ 1038.089095][ T5270] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1038.089123][ T5270] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1038.295173][T14389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.468866][ T5270] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1038.475434][ T5270] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1038.482675][ T5270] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1038.494692][ T5270] em28xx 2-1:0.0: No AC97 audio processor [ 1038.515674][ T5270] usb 2-1: USB disconnect, device number 30 [ 1039.293057][ T5273] usb 1-1: USB disconnect, device number 53 [ 1039.301370][ T5270] em28xx 2-1:0.0: Disconnecting em28xx [ 1039.386274][ T5270] em28xx 2-1:0.0: Freeing device [ 1039.567131][T14407] sctp: [Deprecated]: syz.4.1936 (pid 14407) Use of int in maxseg socket option. [ 1039.567131][T14407] Use struct sctp_assoc_value instead [ 1039.645232][ T5331] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1039.833046][ T5331] usb 4-1: Using ep0 maxpacket: 8 [ 1039.857139][ T5331] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1039.896380][ T5331] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1039.941188][ T5331] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.986596][ T5331] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.999880][ T5331] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1040.009200][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.236252][ T5331] usb 4-1: usb_control_msg returned -32 [ 1040.241964][ T5331] usbtmc 4-1:16.0: can't read capabilities [ 1040.267257][ T5331] usb 4-1: USB disconnect, device number 45 [ 1044.016037][T14464] block nbd1: shutting down sockets [ 1044.057615][ T8329] I/O error, dev nbd1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1044.614988][ T5269] kworker/0:4 (5269) used greatest stack depth: 18616 bytes left [ 1047.018860][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1960'. [ 1047.034047][T11496] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1047.888710][T11496] usb 1-1: Using ep0 maxpacket: 8 [ 1047.904131][T11496] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1047.917549][T11496] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1047.938169][T11496] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1047.967172][T11496] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.988528][T11496] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1048.006809][T11496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.242119][T11496] usb 1-1: usb_control_msg returned -32 [ 1048.263377][T11496] usbtmc 1-1:16.0: can't read capabilities [ 1048.299083][T11496] usb 1-1: USB disconnect, device number 54 [ 1048.955996][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 1052.044137][ T5331] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1052.199816][ T5331] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1052.211958][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1052.258953][ T5331] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.286041][ T5331] usb 4-1: string descriptor 0 read error: -22 [ 1052.293312][ T5331] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1052.309179][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.325343][ T5331] usb 4-1: config 0 descriptor?? [ 1052.333592][ T5331] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1052.350544][ T5331] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1052.492240][T14553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.564276][ T5273] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1052.583512][T14534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.724261][ T5270] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1052.755314][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 1052.770036][ T5273] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 1052.796663][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 1052.803033][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.834261][ T5273] usb 5-1: Product: syz [ 1052.851820][ T5273] usb 5-1: Manufacturer: syz [ 1052.861027][ T5273] usb 5-1: SerialNumber: syz [ 1052.875955][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 1052.882720][ T5273] usb 5-1: config 0 descriptor?? [ 1052.891627][ T5270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1052.899660][ T5273] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1052.902163][ T5331] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1052.929909][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1052.957429][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1052.968657][ T5331] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1052.980924][ T5270] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.003481][ T5331] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1053.011434][ T5331] em28xx 4-1:0.0: No AC97 audio processor [ 1053.059903][ T5270] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1053.070111][ T5331] usb 4-1: USB disconnect, device number 46 [ 1053.083383][ T5331] em28xx 4-1:0.0: Disconnecting em28xx [ 1053.093187][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.118242][ T5331] em28xx 4-1:0.0: Freeing device [ 1053.225109][T14551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.288713][T14551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.335225][ T5270] usb 3-1: usb_control_msg returned -32 [ 1053.347593][ T5270] usbtmc 3-1:16.0: can't read capabilities [ 1053.356843][ T5331] usb 5-1: USB disconnect, device number 51 [ 1053.376570][ T5270] usb 3-1: USB disconnect, device number 35 [ 1054.662526][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.670303][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.194407][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1055.925891][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1055.982391][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1056.039500][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1056.184492][ T8] usb 3-1: string descriptor 0 read error: -22 [ 1056.192766][ T8] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1056.202161][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.220340][ T8] usb 3-1: config 0 descriptor?? [ 1056.247852][ T8] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1056.257277][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1056.473348][T14579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.037601][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1057.044334][ T8] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1057.094093][ T8] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1057.123656][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 1057.154284][ T8] usb 3-1: USB disconnect, device number 36 [ 1057.160747][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 1057.241966][ T8] em28xx 3-1:0.0: Freeing device [ 1058.674032][T11496] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1058.825534][T11496] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1058.837832][T11496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1058.890971][T11496] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.947015][T11496] usb 2-1: string descriptor 0 read error: -22 [ 1058.960911][T11496] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1059.002327][T11496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.005499][ T5273] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1059.037740][T11496] usb 2-1: config 0 descriptor?? [ 1059.069989][T11496] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1059.105386][T11496] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1059.277599][T14626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1059.324277][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 1059.368674][ T5273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1059.378773][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1059.388734][ T5273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1059.398993][ T5273] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.412372][ T5273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1059.421600][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.649733][ T5273] usb 5-1: usb_control_msg returned -32 [ 1059.655423][ T5273] usbtmc 5-1:16.0: can't read capabilities [ 1059.678868][ T5273] usb 5-1: USB disconnect, device number 52 [ 1059.784332][T11496] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1059.790972][T11496] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1059.798930][T11496] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1059.807630][T11496] em28xx 2-1:0.0: No AC97 audio processor [ 1059.825166][ T5296] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1059.835975][T11496] usb 2-1: USB disconnect, device number 31 [ 1059.889006][T11496] em28xx 2-1:0.0: Disconnecting em28xx [ 1059.920021][T11496] em28xx 2-1:0.0: Freeing device [ 1059.995837][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1060.014371][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1060.033791][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.060827][ T5296] usb 4-1: string descriptor 0 read error: -22 [ 1060.068917][ T5296] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1060.097483][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.135313][ T5296] usb 4-1: config 0 descriptor?? [ 1060.158087][ T5296] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1060.167169][ T5296] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1060.368384][T14640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.997349][ T5296] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1061.007430][ T5296] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1061.637115][ T5296] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1061.644716][ T5296] em28xx 4-1:0.0: No AC97 audio processor [ 1061.655170][ T5296] usb 4-1: USB disconnect, device number 47 [ 1061.669252][ T5296] em28xx 4-1:0.0: Disconnecting em28xx [ 1061.675951][ T5296] em28xx 4-1:0.0: Freeing device [ 1061.942190][T14660] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 1062.584109][T11496] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1063.674110][T11496] usb 5-1: device descriptor read/64, error -71 [ 1063.943851][T11496] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1064.104707][T11496] usb 5-1: device descriptor read/64, error -71 [ 1064.141184][T14677] netlink: 'syz.0.2010': attribute type 10 has an invalid length. [ 1064.261508][T11496] usb usb5-port1: attempt power cycle [ 1064.404107][ T5270] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1064.514059][ T5272] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1064.575747][T14692] block nbd0: shutting down sockets [ 1064.575864][ T8329] I/O error, dev nbd0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1064.590633][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 1064.599836][ T5270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1064.612076][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1064.622297][T11496] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1064.630539][ T5270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.644117][ T5270] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.659911][ T5270] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1064.669217][T11496] usb 5-1: device descriptor read/8, error -71 [ 1064.675756][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.695972][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1064.718342][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1064.784051][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.847153][ T5272] usb 4-1: string descriptor 0 read error: -22 [ 1064.855711][ T5272] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1064.879084][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.907153][ T5270] usb 3-1: usb_control_msg returned -32 [ 1064.912781][ T5270] usbtmc 3-1:16.0: can't read capabilities [ 1064.924396][T11496] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1064.952469][ T5272] usb 4-1: config 0 descriptor?? [ 1064.975425][T11496] usb 5-1: device descriptor read/8, error -71 [ 1064.983354][ T5270] usb 3-1: USB disconnect, device number 37 [ 1065.002140][ T5272] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1065.033787][ T5272] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1065.094317][T11496] usb usb5-port1: unable to enumerate USB device [ 1065.214911][T14680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.224293][ T5273] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1065.421771][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 1065.448794][ T5273] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.489631][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.505768][ T5272] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1065.514361][ T8329] block nbd3: Possible stuck request ffff888024f13000: control (flush@18446744073709551104,0B). Runtime 120 seconds [ 1065.524756][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.554096][ T5272] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1065.584234][ T5272] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1065.591237][ T5272] em28xx 4-1:0.0: No AC97 audio processor [ 1065.759707][ T5273] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.773188][ T5273] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1065.782369][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.795233][ T5272] usb 4-1: USB disconnect, device number 48 [ 1065.802344][ T5272] em28xx 4-1:0.0: Disconnecting em28xx [ 1066.411997][ T5272] em28xx 4-1:0.0: Freeing device [ 1067.484828][T14723] block nbd4: shutting down sockets [ 1067.495896][ T8329] I/O error, dev nbd4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1067.814033][T11496] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1067.837574][ T5273] usb 1-1: usb_control_msg returned -71 [ 1067.843238][ T5273] usbtmc 1-1:16.0: can't read capabilities [ 1067.864838][ T5273] usb 1-1: USB disconnect, device number 55 [ 1067.934361][ T5295] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1068.032976][T11496] usb 4-1: no configurations [ 1068.051280][T11496] usb 4-1: can't read configurations, error -22 [ 1068.163696][ T5295] usb 5-1: Using ep0 maxpacket: 8 [ 1068.194033][ T5295] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1068.194089][T11496] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1068.254009][ T5295] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1068.294061][ T5295] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1068.304219][ T5273] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1068.344084][ T5295] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.403338][T11496] usb 4-1: no configurations [ 1068.427107][T11496] usb 4-1: can't read configurations, error -22 [ 1068.428652][ T5295] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1068.443716][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.452311][T11496] usb usb4-port1: attempt power cycle [ 1068.544074][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.612265][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1068.634040][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.730312][ T5273] usb 1-1: string descriptor 0 read error: -22 [ 1068.770441][ T5273] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1068.784114][T11496] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1068.811370][ T5295] usb 5-1: usb_control_msg returned -32 [ 1068.827447][T11496] usb 4-1: no configurations [ 1068.832059][T11496] usb 4-1: can't read configurations, error -22 [ 1068.848742][ T5295] usbtmc 5-1:16.0: can't read capabilities [ 1068.866379][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.921051][ T5295] usb 5-1: USB disconnect, device number 57 [ 1068.929204][ T5273] usb 1-1: config 0 descriptor?? [ 1068.981265][ T5273] em28xx 1-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1068.984216][T11496] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1069.020870][ T5273] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1069.035538][T11496] usb 4-1: no configurations [ 1069.047759][T11496] usb 4-1: can't read configurations, error -22 [ 1069.055019][T11496] usb usb4-port1: unable to enumerate USB device [ 1069.171426][T14731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.394354][ T5273] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1069.452808][ T5273] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1069.545859][T11496] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1069.553468][ T5273] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1069.553536][ T5273] em28xx 1-1:0.0: No AC97 audio processor [ 1069.642345][ T5273] usb 1-1: USB disconnect, device number 56 [ 1069.656317][ T5273] em28xx 1-1:0.0: Disconnecting em28xx [ 1069.673742][ T5273] em28xx 1-1:0.0: Freeing device [ 1069.749537][T11496] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1069.765484][T11496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1069.783825][T11496] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.823140][T11496] usb 2-1: string descriptor 0 read error: -22 [ 1069.829848][T11496] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1069.887589][T11496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.929136][T11496] usb 2-1: config 0 descriptor?? [ 1069.950545][T11496] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1069.960346][T11496] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1070.078668][T14748] netlink: 1672 bytes leftover after parsing attributes in process `syz.4.2033'. [ 1070.149699][T14737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.213795][T11496] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1071.221141][T11496] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1071.229007][T11496] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1071.236674][T11496] em28xx 2-1:0.0: No AC97 audio processor [ 1072.023332][T11496] usb 2-1: USB disconnect, device number 32 [ 1072.042833][T11496] em28xx 2-1:0.0: Disconnecting em28xx [ 1072.082431][T11496] em28xx 2-1:0.0: Freeing device [ 1072.140715][T14768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 1072.330766][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2037'. [ 1072.849939][T14781] netlink: 'syz.1.2041': attribute type 10 has an invalid length. [ 1073.724184][T14787] netlink: 'syz.4.2043': attribute type 10 has an invalid length. [ 1073.861939][T14789] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1077.194281][T11809] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.798196][T14840] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 1077.809299][T14840] syz_tun: entered promiscuous mode [ 1077.817725][T14840] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1079.108744][T14858] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 1082.043707][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2073'. [ 1082.443227][T11809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1082.459702][T11809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1082.471873][T11809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1082.557402][T11809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1082.570086][T11809] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1082.584329][T11809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1082.817513][T14900] chnl_net:caif_netlink_parms(): no params data found [ 1083.207934][T14913] netlink: 'syz.4.2078': attribute type 10 has an invalid length. [ 1084.025435][T14900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.032599][T14900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.066973][T14900] bridge_slave_0: entered allmulticast mode [ 1084.106213][T14900] bridge_slave_0: entered promiscuous mode [ 1084.165393][T14900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.172537][T14900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.192727][T14900] bridge_slave_1: entered allmulticast mode [ 1084.199661][T14900] bridge_slave_1: entered promiscuous mode [ 1084.228968][T14900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.246255][T14900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.279713][T14900] team0: Port device team_slave_0 added [ 1084.293443][T14900] team0: Port device team_slave_1 added [ 1084.393679][T14900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.416346][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.483802][T14900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.522617][T14900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.543471][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.609114][T14900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.635332][ T5230] Bluetooth: hci5: command tx timeout [ 1084.704697][T14900] hsr_slave_0: entered promiscuous mode [ 1084.734575][T14900] hsr_slave_1: entered promiscuous mode [ 1084.740715][T14900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.754034][T14900] Cannot create hsr debugfs directory [ 1085.604859][T14900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.403779][T14900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.714262][ T5230] Bluetooth: hci5: command tx timeout [ 1086.810184][T14900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.901529][T14900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.436915][T14900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1087.478641][T14900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1087.563590][T14900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1087.747660][T14900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1088.455161][T14900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.494925][T14900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.543510][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.550802][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.580081][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.587237][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.799584][ T5230] Bluetooth: hci5: command tx timeout [ 1088.858025][T14900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.906949][T14900] veth0_vlan: entered promiscuous mode [ 1088.928246][T14900] veth1_vlan: entered promiscuous mode [ 1089.012101][T14900] veth0_macvtap: entered promiscuous mode [ 1089.031839][T14900] veth1_macvtap: entered promiscuous mode [ 1089.078105][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.100703][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.123818][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.135833][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.146339][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.157749][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.172271][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.184361][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.205983][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.228903][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.240919][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.253610][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.276746][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.297657][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.332620][T14900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.352416][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 1089.548354][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.814919][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.926185][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.214256][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.240485][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.274121][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.303010][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.321327][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.332449][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.348838][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.412453][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.433239][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.451161][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.463767][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.486068][T14900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.498026][T14900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.516297][T14900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.531362][T14900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.540815][T14900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.874630][ T5230] Bluetooth: hci5: command tx timeout [ 1091.064027][ T5601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.109730][ T5604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.118131][ T5604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.284424][ T5601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.034236][ T30] INFO: task syz.3.1609:13478 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1093.117623][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1093.147482][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1093.256500][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1093.265763][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2103'. [ 1093.291775][T15012] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1093.842911][ T30] task:syz.3.1609 state:D stack:26368 pid:13478 tgid:13477 ppid:12928 flags:0x00004004 [ 1093.913970][ T30] Call Trace: [ 1093.917299][ T30] [ 1093.920226][ T30] __schedule+0x1843/0x4ae0 [ 1093.928292][ T30] ? __pfx___schedule+0x10/0x10 [ 1093.933197][ T30] ? __pfx_lock_release+0x10/0x10 [ 1093.941485][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1093.948007][ T30] ? schedule+0x90/0x320 [ 1093.952281][ T30] schedule+0x14b/0x320 [ 1093.957008][ T30] blk_mq_freeze_queue_wait+0xff/0x190 [ 1093.962594][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1093.968759][ T30] ? percpu_ref_put+0x1f/0x250 [ 1093.973547][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1093.979831][ T30] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 1093.985916][ T30] nbd_set_size+0xe7/0x8a0 [ 1093.990366][ T30] ? queue_work_on+0x1e3/0x380 [ 1093.995504][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1094.000739][ T30] ? queue_work_on+0x25f/0x380 [ 1094.005714][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 1094.010819][ T30] ? __pfx_queue_work_on+0x10/0x10 [ 1094.016071][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 1094.021578][ T30] ? nbd_start_device+0x86f/0xaa0 [ 1094.026712][ T30] nbd_ioctl+0x5dc/0xf40 [ 1094.030986][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 1094.035877][ T30] ? __asan_memset+0x23/0x50 [ 1094.040495][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 1094.045840][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1094.051985][ T30] ? file_to_blk_mode+0xcc/0x140 [ 1094.057025][ T30] ? __pfx_nbd_ioctl+0x10/0x10 [ 1094.061819][ T30] blkdev_ioctl+0x57d/0x6a0 [ 1094.066408][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1094.071460][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1094.076793][ T30] __se_sys_ioctl+0xf9/0x170 [ 1094.081735][ T30] do_syscall_64+0xf3/0x230 [ 1094.086423][ T30] ? clear_bhb_loop+0x35/0x90 [ 1094.091131][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.097303][ T30] RIP: 0033:0x7faf15d7dff9 [ 1094.101748][ T30] RSP: 002b:00007faf16b30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.110245][ T30] RAX: ffffffffffffffda RBX: 00007faf15f35f80 RCX: 00007faf15d7dff9 [ 1094.118284][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1094.126347][ T30] RBP: 00007faf15df0296 R08: 0000000000000000 R09: 0000000000000000 [ 1094.134521][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.142513][ T30] R13: 0000000000000000 R14: 00007faf15f35f80 R15: 00007fffbef61e48 [ 1094.150845][ T30] [ 1094.156111][ T30] [ 1094.156111][ T30] Showing all locks held in the system: [ 1094.164587][ T30] 1 lock held by khungtaskd/30: [ 1094.169484][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1094.204138][ T30] 2 locks held by getty/4974: [ 1094.208895][ T30] #0: ffff8880323ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1094.219412][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1094.241786][ T30] 3 locks held by kworker/0:5/5270: [ 1094.247849][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1094.264802][ T30] #1: ffffc9000452fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1094.282252][ T30] #2: ffff88805f40c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 1094.294208][ T30] 1 lock held by syz.3.1609/13478: [ 1094.299347][ T30] #0: ffff88802514a198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 1094.309259][ T30] 1 lock held by syz.3.2038/14765: [ 1094.316902][ T30] #0: ffff88802514a198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 1094.328254][ T30] 1 lock held by syz.3.2038/14767: [ 1094.333489][ T30] #0: ffff88802514a198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 1094.355673][ T30] 1 lock held by syz.3.2038/14770: [ 1094.360857][ T30] #0: ffff88802514a198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 1094.384769][ T30] 1 lock held by syz.3.2038/14771: [ 1094.389966][ T30] #0: ffff88802514a198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 1094.408859][ T30] 1 lock held by syz.3.2038/14772: [ 1094.431239][ T30] #0: ffff88802514a198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x13c/0xf40 [ 1094.444538][ T30] 1 lock held by syz.4.2097/14987: [ 1094.449772][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1094.586141][ T30] [ 1094.588503][ T30] ============================================= [ 1094.588503][ T30] [ 1094.624338][ T30] NMI backtrace for cpu 0 [ 1094.628736][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1094.639972][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1094.650065][ T30] Call Trace: [ 1094.653364][ T30] [ 1094.656307][ T30] dump_stack_lvl+0x241/0x360 [ 1094.661031][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.666258][ T30] ? __pfx__printk+0x10/0x10 [ 1094.670882][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1094.675845][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1094.681316][ T30] ? _printk+0xd5/0x120 [ 1094.685495][ T30] ? __pfx__printk+0x10/0x10 [ 1094.690103][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1094.694978][ T30] ? __pfx__printk+0x10/0x10 [ 1094.699585][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1094.704640][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1094.710637][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1094.716644][ T30] watchdog+0xff4/0x1040 [ 1094.720915][ T30] ? watchdog+0x1ea/0x1040 [ 1094.725340][ T30] ? __pfx_watchdog+0x10/0x10 [ 1094.730018][ T30] kthread+0x2f0/0x390 [ 1094.734102][ T30] ? __pfx_watchdog+0x10/0x10 [ 1094.738867][ T30] ? __pfx_kthread+0x10/0x10 [ 1094.743464][ T30] ret_from_fork+0x4b/0x80 [ 1094.747890][ T30] ? __pfx_kthread+0x10/0x10 [ 1094.752477][ T30] ret_from_fork_asm+0x1a/0x30 [ 1094.757252][ T30] [ 1094.762065][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1094.768808][ C1] NMI backtrace for cpu 1 [ 1094.768822][ C1] CPU: 1 UID: 0 PID: 2971 Comm: kworker/u8:7 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1094.768843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1094.768855][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1094.768882][ C1] RIP: 0010:in_lock_functions+0x11/0x30 [ 1094.768905][ C1] Code: 89 00 e9 62 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c0 30 aa c6 8b 48 39 c7 0f 93 c0 <48> c7 c1 1a e4 c6 8b 48 39 cf 0f 92 c1 20 c1 0f b6 c1 c3 cc cc cc [ 1094.768925][ C1] RSP: 0018:ffffc900097e72a8 EFLAGS: 00000283 [ 1094.768940][ C1] RAX: ffffffff8bc6aa00 RBX: 0000000000000001 RCX: ffffffff9a397903 [ 1094.768952][ C1] RDX: dffffc0000000000 RSI: ffffc900097e8000 RDI: ffffffff814166e0 [ 1094.768965][ C1] RBP: ffffc900097e7438 R08: ffffc900097e7401 R09: 0000000000000000 [ 1094.768978][ C1] R10: ffffc900097e7400 R11: fffff520012fce8c R12: dffffc0000000000 [ 1094.768991][ C1] R13: ffffc900097e7400 R14: ffffffff814166e0 R15: dffffc0000000000 [ 1094.769004][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1094.769017][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.769029][ C1] CR2: 000000002004a000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1094.769044][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1094.769055][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1094.769066][ C1] Call Trace: [ 1094.769072][ C1] [ 1094.769080][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1094.769100][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1094.769124][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1094.769143][ C1] ? nmi_handle+0x2a/0x5a0 [ 1094.769167][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1094.769189][ C1] ? nmi_handle+0x14f/0x5a0 [ 1094.769205][ C1] ? nmi_handle+0x2a/0x5a0 [ 1094.769223][ C1] ? in_lock_functions+0x11/0x30 [ 1094.769242][ C1] ? default_do_nmi+0x63/0x160 [ 1094.769262][ C1] ? exc_nmi+0x123/0x1f0 [ 1094.769281][ C1] ? end_repeat_nmi+0xf/0x53 [ 1094.769296][ C1] ? unwind_next_frame+0xb0/0x22d0 [ 1094.769314][ C1] ? ldsem_down_write+0x10/0x38 [ 1094.769334][ C1] ? unwind_next_frame+0xb0/0x22d0 [ 1094.769349][ C1] ? in_lock_functions+0x11/0x30 [ 1094.769368][ C1] ? in_lock_functions+0x11/0x30 [ 1094.769388][ C1] ? in_lock_functions+0x11/0x30 [ 1094.769407][ C1] [ 1094.769413][ C1] [ 1094.769419][ C1] preempt_count_add+0x93/0x190 [ 1094.769439][ C1] ? __unwind_start+0xf8/0x740 [ 1094.769454][ C1] unwind_next_frame+0xb0/0x22d0 [ 1094.769473][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 1094.769496][ C1] __unwind_start+0x59a/0x740 [ 1094.769513][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1094.769533][ C1] arch_stack_walk+0xe5/0x150 [ 1094.769553][ C1] ? __unwind_start+0xf8/0x740 [ 1094.769569][ C1] stack_trace_save+0x118/0x1d0 [ 1094.769589][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1094.769609][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1094.769636][ C1] kasan_save_track+0x3f/0x80 [ 1094.769680][ C1] kasan_save_free_info+0x40/0x50 [ 1094.769698][ C1] __kasan_slab_free+0x59/0x70 [ 1094.769719][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 1094.769742][ C1] kfree+0x1a0/0x440 [ 1094.769757][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 1094.769786][ C1] ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 1094.769815][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 1094.769836][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1094.769862][ C1] ? mark_lock+0x9a/0x360 [ 1094.769879][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1094.769903][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1094.769927][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1094.769954][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 1094.769980][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 1094.770000][ C1] ? process_scheduled_works+0x976/0x1850 [ 1094.770023][ C1] process_scheduled_works+0xa63/0x1850 [ 1094.770056][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1094.770082][ C1] ? assign_work+0x364/0x3d0 [ 1094.770104][ C1] worker_thread+0x870/0xd30 [ 1094.770129][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1094.770153][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1094.770177][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1094.770198][ C1] kthread+0x2f0/0x390 [ 1094.770213][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1094.770234][ C1] ? __pfx_kthread+0x10/0x10 [ 1094.770250][ C1] ret_from_fork+0x4b/0x80 [ 1094.770272][ C1] ? __pfx_kthread+0x10/0x10 [ 1094.770287][ C1] ret_from_fork_asm+0x1a/0x30 [ 1094.770316][ C1] [ 1095.321695][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1095.328565][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 1095.339068][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1095.349207][ T30] Call Trace: [ 1095.352473][ T30] [ 1095.355398][ T30] dump_stack_lvl+0x241/0x360 [ 1095.360062][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.365242][ T30] ? __pfx__printk+0x10/0x10 [ 1095.369816][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1095.375791][ T30] ? vscnprintf+0x5d/0x90 [ 1095.380119][ T30] panic+0x349/0x880 [ 1095.384009][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1095.390148][ T30] ? __pfx_panic+0x10/0x10 [ 1095.394550][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1095.399905][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1095.405438][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1095.410795][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1095.416936][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1095.423083][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1095.429223][ T30] watchdog+0x1033/0x1040 [ 1095.433541][ T30] ? watchdog+0x1ea/0x1040 [ 1095.438030][ T30] ? __pfx_watchdog+0x10/0x10 [ 1095.442693][ T30] kthread+0x2f0/0x390 [ 1095.446757][ T30] ? __pfx_watchdog+0x10/0x10 [ 1095.451415][ T30] ? __pfx_kthread+0x10/0x10 [ 1095.456161][ T30] ret_from_fork+0x4b/0x80 [ 1095.460562][ T30] ? __pfx_kthread+0x10/0x10 [ 1095.465150][ T30] ret_from_fork_asm+0x1a/0x30 [ 1095.469906][ T30] [ 1095.473201][ T30] Kernel Offset: disabled [ 1095.477551][ T30] Rebooting in 86400 seconds..