last executing test programs: 2m36.426539347s ago: executing program 2 (id=2775): r0 = socket$packet(0x11, 0x3, 0x300) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) socket(0x1, 0x80802, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x400000c) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff1704b45a00005c0000000000019078ac1ef701ac1414aa05009078ac1414aa40fb00050067040002060008ac1414bbe0000002441c2ab364010101000000080001010200000009ac1414aa00005bd494040000860a000000000704a5217f0013151f1913c7232febdea9b0a929e88349306b3671"], 0x0) 2m34.575347053s ago: executing program 2 (id=2778): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000580)={{@local, 0x9}, @hyper, 0xe, 0x6, 0x7f, 0x100000001, 0xffffffffffff0000, 0x101, 0x5}) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x88007fffffff, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={[0x80]}, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000240), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2m34.496883008s ago: executing program 2 (id=2779): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) sched_getscheduler(0x0) 2m34.076568462s ago: executing program 2 (id=2780): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2m33.093164994s ago: executing program 2 (id=2785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x53) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000200)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a100)="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", 0x2000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000200000008"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m32.564968413s ago: executing program 2 (id=2787): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m17.136411494s ago: executing program 32 (id=2787): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 8.828973605s ago: executing program 5 (id=3304): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 8.566201471s ago: executing program 1 (id=3306): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair(0x1e, 0x1, 0xa1, &(0x7f00000000c0)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20048041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x15, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x10, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 8.448924806s ago: executing program 5 (id=3307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8.121104932s ago: executing program 5 (id=3308): r0 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4b00) 8.058534376s ago: executing program 1 (id=3309): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r4, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 7.971342342s ago: executing program 5 (id=3310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.079986682s ago: executing program 3 (id=3313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x4ab}, 0x18) socket$kcm(0x10, 0x2, 0x0) 6.95812292s ago: executing program 3 (id=3314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x7a00}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_emit_vhci(&(0x7f00000019c0)=ANY=[@ANYBLOB="040e7b070c20"], 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 6.856155709s ago: executing program 5 (id=3316): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 5.746103478s ago: executing program 4 (id=3318): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r2, r2, 0x2, r4, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)="00000102", 0xfffff, r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 5.530508707s ago: executing program 1 (id=3319): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair(0x1e, 0x1, 0xa1, &(0x7f00000000c0)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20048041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket(0x15, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x10, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 5.500609184s ago: executing program 0 (id=3320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x55, &(0x7f0000000380)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0x0, 0x4, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x10) 4.801639036s ago: executing program 4 (id=3321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 4.558675846s ago: executing program 0 (id=3322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000cb5e00008500000086000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.493397828s ago: executing program 1 (id=3323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 4.442918347s ago: executing program 4 (id=3324): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x4ab}, 0x18) socket$kcm(0x10, 0x2, 0x0) 4.402948084s ago: executing program 0 (id=3325): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="efde8dd407c63e7cd27e14c82e63bea5ced69ca7c638ce21d5dd", 0x1a}], 0x1, 0x0, 0x0, 0x2004c014}}], 0x1, 0x4000045) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 4.401768332s ago: executing program 1 (id=3326): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r2, r2, 0x2, r4, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)="00000102", 0xfffff, r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 4.287452534s ago: executing program 3 (id=3327): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x5, {0x200000000000000, 0x40200, 0x0, {0x0, 0xffffffffffffffff, 0x1, 0x40000000, 0x3, 0x0, 0x0, 0x5, 0xfffffff8, 0x4000, 0x8, 0x0, 0x0, 0x1000000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000002000000010000060400000000006800007f00000000002e"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@nullb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.274544619s ago: executing program 4 (id=3328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000400000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000480)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x2d596fb6, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000600), 0x7, &(0x7f0000001880)=""/4096, 0x1000}, 0xf}, {{&(0x7f0000002880)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000003a80)=""/239, 0xef}], 0x1, &(0x7f0000002a00)=""/4096, 0x1000}, 0x7}], 0x2, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, 0x0) 1.331393071s ago: executing program 0 (id=3329): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="efde8dd407c63e7cd27e14c82e63bea5ced69ca7c638ce21d5dd", 0x1a}], 0x1, 0x0, 0x0, 0x2004c014}}], 0x1, 0x4000045) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.183692906s ago: executing program 1 (id=3330): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r4, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 1.082768258s ago: executing program 4 (id=3331): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.00825264s ago: executing program 3 (id=3332): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_tgsigqueueinfo(0x0, 0x0, 0x3f, 0x0) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x800) syz_usb_disconnect(r3) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4fec}, 0x1, 0x0, 0x0, 0x10}, 0x814) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 940.083553ms ago: executing program 0 (id=3333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000001008500000082000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x800) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) readv(0xffffffffffffffff, &(0x7f00000011c0)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x32, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000700000000000000060000001811", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff0000", @ANYRES32, @ANYBLOB="0000000000000000b70f0000000000008500000086a10000bf9100000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 344.622341ms ago: executing program 5 (id=3334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r8 = getpgid(r1) prlimit64(r8, 0xb, &(0x7f0000000040)={0x2c5, 0x2}, &(0x7f00000000c0)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa00000000000000"], 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 240.587655ms ago: executing program 3 (id=3335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000cb5e00008500000086000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 105.611879ms ago: executing program 3 (id=3336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 104.815782ms ago: executing program 4 (id=3337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 0s ago: executing program 0 (id=3338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x7a00}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_emit_vhci(&(0x7f00000019c0)=ANY=[@ANYBLOB="040e7b070c20"], 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) kernel console output (not intermixed with test programs): ng attributes in process `syz.3.2774'. [ 701.866643][T16163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.923869][T16158] tty tty1: ldisc open failed (-12), clearing slot 0 [ 702.524775][ T24] libceph: connect (1)[c::]:6789 error -101 [ 702.785306][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 703.055666][ T24] libceph: connect (1)[c::]:6789 error -101 [ 703.081492][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 703.625472][ T24] libceph: connect (1)[c::]:6789 error -101 [ 703.648605][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 704.513851][T16195] program syz.2.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.626390][T16189] 9pnet_fd: Insufficient options for proto=fd [ 705.117713][T16167] ceph: No mds server is up or the cluster is laggy [ 705.226302][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 705.477528][T16218] netlink: 'syz.3.2791': attribute type 11 has an invalid length. [ 705.486504][T16218] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2791'. [ 706.350905][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2793'. [ 706.618954][T16244] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2796'. [ 708.313126][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 708.355901][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 708.416845][T16286] ceph: No mds server is up or the cluster is laggy [ 708.525104][T12680] Bluetooth: hci4: command 0x0406 tx timeout [ 708.905239][T16283] lo speed is unknown, defaulting to 1000 [ 709.005834][T16304] lo speed is unknown, defaulting to 1000 [ 709.248316][T16312] binder: 16310:16312 ioctl c00c620f 2000000002c0 returned -22 [ 710.879741][T16332] fuse: Bad value for 'fd' [ 711.617148][ T5870] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 711.771931][ T9] libceph: connect (1)[c::]:6789 error -101 [ 711.795259][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 712.332002][T16351] ceph: No mds server is up or the cluster is laggy [ 712.684222][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 712.693021][ T5870] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 712.701346][ T5870] usb 1-1: config 0 has no interface number 0 [ 712.707499][ T5870] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 712.718436][ T5870] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 712.730110][ T5870] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 713.205801][ T5870] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 713.216062][ T5870] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 713.228188][ T5870] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.239428][ T5870] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 713.251778][ T5870] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 2 [ 713.261820][ T5870] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.313951][ T5870] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 713.338402][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.395221][ T5870] usb 1-1: Product: syz [ 713.428110][ T5870] usb 1-1: Manufacturer: syz [ 713.452761][ T5870] usb 1-1: SerialNumber: syz [ 713.551944][ T5870] usb 1-1: config 0 descriptor?? [ 713.620874][T16341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 713.731368][T16341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 713.828098][ T5870] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 713.878333][ T5870] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 713.947103][ T5870] scsi host1: microtekX6 [ 714.187010][ T5870] usb 1-1: USB disconnect, device number 29 [ 715.108066][T16385] blk_print_req_error: 64 callbacks suppressed [ 715.108077][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.137660][T16385] buffer_io_error: 64 callbacks suppressed [ 715.137675][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.152032][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.161494][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.187539][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.208390][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.214205][T16390] syz_tun: tun_net_xmit 42 [ 715.220416][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.230868][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.239206][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.248637][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.257962][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.267845][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.276019][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.285258][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.297661][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.306878][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.314705][T16385] ldm_validate_partition_table(): Disk read failed. [ 715.323079][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.332201][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.340165][T16385] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 715.349318][T16385] Buffer I/O error on dev nbd0, logical block 0, async page read [ 715.357502][T16385] Dev nbd0: unable to read RDB block 0 [ 715.363468][T16385] nbd0: unable to read partition table [ 715.374584][T16389] ldm_validate_partition_table(): Disk read failed. [ 715.383398][T16389] Dev nbd0: unable to read RDB block 0 [ 715.390772][T16389] nbd0: unable to read partition table [ 715.683522][T16377] lo speed is unknown, defaulting to 1000 [ 716.295073][ C0] syz_tun: tun_net_xmit 42 [ 716.947917][ T5188] udevd[5188]: worker [12510] terminated by signal 33 (Unknown signal 33) [ 716.971477][ T5188] udevd[5188]: worker [12510] failed while handling '/devices/virtual/block/loop4' [ 717.325092][ C0] syz_tun: tun_net_xmit 42 [ 718.487622][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 718.558223][T16438] lo speed is unknown, defaulting to 1000 [ 719.448344][ T5923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 719.860796][T16461] lo speed is unknown, defaulting to 1000 [ 720.285181][T12680] Bluetooth: hci4: unexpected event for opcode 0x200c [ 720.378861][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.393286][ T5923] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 720.428898][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.536169][ T5923] usb 2-1: config 0 descriptor?? [ 720.587492][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 721.086565][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 721.100181][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 721.112407][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 721.124113][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 721.340145][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 721.397793][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 721.547323][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 721.648626][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 721.742067][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 721.844669][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 721.951247][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 722.041445][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 722.121273][ T5923] pwc: recv_control_msg error -32 req 02 val 2800 [ 722.233162][ T5923] pwc: recv_control_msg error -32 req 04 val 1100 [ 722.320195][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 722.446700][ T5923] pwc: Registered as video103. [ 722.560062][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 722.725299][ T5923] usb 2-1: USB disconnect, device number 15 [ 722.811584][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.820412][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.828926][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.849679][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.861611][T16480] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2851'. [ 722.874181][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.909934][ T30] audit: type=1400 audit(1750231108.612:739): avc: denied { mounton } for pid=16477 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 723.170697][T16477] lo speed is unknown, defaulting to 1000 [ 723.227504][ T30] audit: type=1400 audit(1750231108.902:740): avc: denied { firmware_load } for pid=16484 comm="syz.4.2853" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 723.863190][T16503] lo speed is unknown, defaulting to 1000 [ 724.290717][T16477] chnl_net:caif_netlink_parms(): no params data found [ 724.506994][T16517] netlink: 'syz.4.2859': attribute type 6 has an invalid length. [ 724.644855][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.654114][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.676662][T16477] bridge_slave_0: entered allmulticast mode [ 724.704162][T16477] bridge_slave_0: entered promiscuous mode [ 724.727670][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.734780][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.765603][T16477] bridge_slave_1: entered allmulticast mode [ 724.772914][T16477] bridge_slave_1: entered promiscuous mode [ 724.903451][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.926368][ T5829] Bluetooth: hci5: command tx timeout [ 724.948247][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.993479][T16531] blk_print_req_error: 22 callbacks suppressed [ 724.993497][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.009442][T16531] buffer_io_error: 22 callbacks suppressed [ 725.009457][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.061907][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.071434][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.091645][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.123704][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.141285][T16477] team0: Port device team_slave_0 added [ 725.149501][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.238250][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.247471][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.258274][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.617614][T16477] team0: Port device team_slave_1 added [ 725.625240][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.634646][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.644183][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.653572][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.663506][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.673175][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.681326][T16531] ldm_validate_partition_table(): Disk read failed. [ 725.689603][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.698976][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.707974][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.717214][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.748705][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.779796][T16531] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 725.846433][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.869495][T16531] Buffer I/O error on dev nbd4, logical block 0, async page read [ 725.875045][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.895446][T16531] Dev nbd4: unable to read RDB block 0 [ 725.903080][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.916402][T16531] nbd4: unable to read partition table [ 725.923418][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.322406][T16477] hsr_slave_0: entered promiscuous mode [ 726.330165][T16477] hsr_slave_1: entered promiscuous mode [ 726.336477][T16477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.344027][T16477] Cannot create hsr debugfs directory [ 727.008568][ T5829] Bluetooth: hci5: command tx timeout [ 727.658148][ T5829] Bluetooth: hci1: unexpected event for opcode 0x200c [ 728.089752][T16477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.167987][T16477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.194522][T16557] lo speed is unknown, defaulting to 1000 [ 728.197175][T16477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 728.242848][T16477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 728.471469][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.568760][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.612007][T16578] netlink: 'syz.4.2875': attribute type 11 has an invalid length. [ 728.619964][T16578] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2875'. [ 728.660243][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.667458][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.704477][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.711658][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.178154][ T5829] Bluetooth: hci5: command tx timeout [ 729.420176][T16592] lo speed is unknown, defaulting to 1000 [ 730.125338][T16074] block nbd3: Possible stuck request ffff888026b35080: control (read@0,1024B). Runtime 240 seconds [ 730.142663][T16074] block nbd3: Possible stuck request ffff888026b35240: control (read@1024,1024B). Runtime 240 seconds [ 730.186647][T16074] block nbd3: Possible stuck request ffff888026b35400: control (read@2048,1024B). Runtime 240 seconds [ 730.229256][T16074] block nbd3: Possible stuck request ffff888026b355c0: control (read@3072,1024B). Runtime 240 seconds [ 731.127901][ T6317] block nbd2: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 300 seconds [ 731.145106][ T6317] block nbd2: Possible stuck request ffff888026ab01c0: control (read@1024,1024B). Runtime 300 seconds [ 731.158849][ T6317] block nbd2: Possible stuck request ffff888026ab0380: control (read@2048,1024B). Runtime 300 seconds [ 731.171372][ T6317] block nbd2: Possible stuck request ffff888026ab0540: control (read@3072,1024B). Runtime 300 seconds [ 731.245829][ T5829] Bluetooth: hci5: command tx timeout [ 731.533184][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.124061][T16477] veth0_vlan: entered promiscuous mode [ 732.155287][T16477] veth1_vlan: entered promiscuous mode [ 732.188559][T16630] binder: 16629:16630 ioctl c00c620f 2000000002c0 returned -22 [ 732.209908][T16477] veth0_macvtap: entered promiscuous mode [ 732.230201][T16477] veth1_macvtap: entered promiscuous mode [ 732.352456][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.974883][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.991127][T16477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.054032][T16477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.085016][T16477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.093723][T16477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.265396][ T7499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.296644][ T7499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.405499][T16619] Can't find ip_set type hash:net,ne [ 733.604410][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.654042][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.717551][ T30] audit: type=1400 audit(1750231119.422:741): avc: denied { mounton } for pid=16477 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 734.865079][ T5923] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 736.154307][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.167645][ T5923] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 736.177503][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.196311][T16667] lo speed is unknown, defaulting to 1000 [ 736.360169][ T5923] usb 2-1: config 0 descriptor?? [ 736.398141][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 736.903481][T16682] rdma_rxe: rxe_newlink: failed to add lo [ 736.957265][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 737.370848][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 737.393294][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 737.436534][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 737.535505][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 737.648348][T16690] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.783057][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 737.800137][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 737.804271][T16690] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.831948][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 737.838679][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 737.852911][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 737.861703][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 737.872420][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 737.879567][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 737.889614][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 737.897996][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.906618][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 737.914554][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 737.926809][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 737.933838][ T5923] pwc: recv_control_msg error -32 req 02 val 2800 [ 737.950869][T16690] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.970709][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 738.064500][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 738.112030][T16690] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.142924][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 738.160133][ T5923] pwc: Registered as video103. [ 738.166626][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 738.214431][ T5923] usb 2-1: USB disconnect, device number 16 [ 738.235205][ T2151] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 738.347017][T16690] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.376571][T16690] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.398572][ T2151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41216, setting to 64 [ 738.417009][T16690] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.437482][ T2151] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 738.455460][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.478768][T16690] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.503964][ T2151] usb 4-1: config 0 descriptor?? [ 738.521476][T16698] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 738.708540][ T30] audit: type=1400 audit(1750231124.412:742): avc: denied { transfer } for pid=16703 comm="syz.5.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 739.163556][T16698] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2903'. [ 739.249368][T12680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 739.271906][T12680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 739.288781][T12680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 739.304816][T12680] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 739.316935][T12680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 739.645574][ T24] usb 5-1: USB disconnect, device number 24 [ 740.292120][T16698] bridge0: port 3(batadv0) entered disabled state [ 740.299754][T16698] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.307013][T16698] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.372413][T16715] lo speed is unknown, defaulting to 1000 [ 741.135191][ T5829] Bluetooth: hci4: unexpected event for opcode 0x200c [ 741.188535][T16009] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.370750][ T2151] usb 4-1: USB disconnect, device number 30 [ 741.372586][T16009] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.406857][ T5829] Bluetooth: hci6: command tx timeout [ 741.484196][T16727] lo speed is unknown, defaulting to 1000 [ 741.598045][T16734] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 741.636886][T16734] kvm: pic: non byte read [ 741.659889][T16734] kvm: pic: non byte read [ 741.682267][T16734] kvm: pic: non byte read [ 741.795399][T16734] kvm: pic: non byte read [ 741.801282][T16009] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.856740][T16734] kvm: pic: non byte read [ 741.864865][T16734] kvm: pic: non byte read [ 742.032449][T16009] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.468092][T16754] fuse: Bad value for 'fd' [ 743.549166][ T5829] Bluetooth: hci6: command tx timeout [ 743.617633][T16009] batadv0: left allmulticast mode [ 743.644420][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 743.644537][T16009] batadv0: left promiscuous mode [ 743.665159][T16009] bridge0: port 3(batadv0) entered disabled state [ 743.684658][T16009] bridge_slave_1: left allmulticast mode [ 743.691018][T16009] bridge_slave_1: left promiscuous mode [ 743.696987][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.710802][T16009] bridge_slave_0: left allmulticast mode [ 743.717087][T16009] bridge_slave_0: left promiscuous mode [ 743.717179][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 743.722758][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.827426][T16761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2920'. [ 744.276960][T16009] bond1 (unregistering): (slave gretap1): Releasing active interface [ 744.720005][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.729337][T16009] bond_slave_0: left promiscuous mode [ 744.737797][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.746856][T16009] bond_slave_1: left promiscuous mode [ 744.753013][T16009] bond0 (unregistering): Released all slaves [ 744.763716][T16009] bond1 (unregistering): Released all slaves [ 744.871267][T16781] lo speed is unknown, defaulting to 1000 [ 744.969927][T16009] tipc: Left network mode [ 745.341484][T16715] chnl_net:caif_netlink_parms(): no params data found [ 745.501772][T16009] IPVS: stopping backup sync thread 14095 ... [ 745.828439][ T5829] Bluetooth: hci6: command tx timeout [ 746.084122][T16794] lo speed is unknown, defaulting to 1000 [ 746.158057][T16715] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.180352][T16715] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.197945][T16715] bridge_slave_0: entered allmulticast mode [ 746.214130][T16715] bridge_slave_0: entered promiscuous mode [ 746.257603][T16715] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.265170][T16715] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.272376][T16715] bridge_slave_1: entered allmulticast mode [ 746.278598][ T2151] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 746.287729][T16715] bridge_slave_1: entered promiscuous mode [ 746.468622][T16715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.491987][T16715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.581588][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 746.618819][ T2151] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 746.652897][ T2151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 746.680431][ T2151] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 746.748564][ T2151] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 746.770421][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.780736][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.781292][ T2151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.803471][T16715] team0: Port device team_slave_0 added [ 746.840269][ T2151] usb 6-1: Product: syz [ 746.844441][ T2151] usb 6-1: Manufacturer: syz [ 746.907309][ T2151] usb 6-1: SerialNumber: syz [ 746.918138][T16009] hsr_slave_0: left promiscuous mode [ 746.934853][ T2151] usb 6-1: config 0 descriptor?? [ 746.950650][T16009] hsr_slave_1: left promiscuous mode [ 746.958827][ T2151] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 746.968436][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.976941][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.986120][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.993596][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.036105][T16009] veth1_macvtap: left promiscuous mode [ 747.042002][T16009] veth0_macvtap: left promiscuous mode [ 747.048011][T16009] veth1_vlan: left promiscuous mode [ 747.053434][T16009] veth0_vlan: left promiscuous mode [ 747.218922][ T2151] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 747.384524][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2930'. [ 747.624778][T16009] team0 (unregistering): Port device team_slave_1 removed [ 747.658163][T16009] team0 (unregistering): Port device team_slave_0 removed [ 747.885994][ T5829] Bluetooth: hci6: command tx timeout [ 747.915832][T16715] team0: Port device team_slave_1 added [ 747.957855][T16823] veth3: entered promiscuous mode [ 747.967429][T16826] vlan2: entered allmulticast mode [ 747.972608][T16826] veth0_to_batadv: entered allmulticast mode [ 748.026304][T16715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.033259][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.047011][T12779] usb 6-1: USB disconnect, device number 2 [ 748.078454][T16715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.111400][T16715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.126592][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.152478][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.159490][T16715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.377686][T16715] hsr_slave_0: entered promiscuous mode [ 748.403641][T16715] hsr_slave_1: entered promiscuous mode [ 748.411503][T16715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.421048][T16715] Cannot create hsr debugfs directory [ 748.463597][T16834] blk_print_req_error: 6 callbacks suppressed [ 748.463612][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.488169][T16834] buffer_io_error: 6 callbacks suppressed [ 748.488187][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.512530][T16009] IPVS: stop unused estimator thread 0... [ 748.525447][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.605229][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.613803][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.653462][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.688354][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.729069][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.773342][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.806597][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.845456][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.897276][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.941518][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.965041][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 748.978588][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 748.987879][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 749.137469][T16834] ldm_validate_partition_table(): Disk read failed. [ 749.178362][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 749.219260][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 749.259539][T16834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 749.288105][T16834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 749.310623][T16834] Dev nbd4: unable to read RDB block 0 [ 749.470446][T16834] nbd4: unable to read partition table [ 750.384397][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 751.321381][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 751.525433][T16855] ceph: No mds server is up or the cluster is laggy [ 751.620815][T16867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.734701][T16715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 751.784277][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 751.788566][T16715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 751.795390][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 751.912879][T16715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 751.964002][T16715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 752.259273][T16715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.281571][T16715] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.321618][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.328785][ T6485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.376272][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.383477][ T6485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.415542][T12680] Bluetooth: hci6: command 0x0405 tx timeout [ 753.457493][T16715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.507935][T16715] veth0_vlan: entered promiscuous mode [ 753.539591][T16715] veth1_vlan: entered promiscuous mode [ 753.682256][T16715] veth0_macvtap: entered promiscuous mode [ 753.722615][T16715] veth1_macvtap: entered promiscuous mode [ 753.970654][T16715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.982252][T16715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.994335][T16715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.004712][T16715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.014499][T16715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.180600][T16715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.605888][ T7063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.613762][ T7063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.783218][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.791581][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.168470][T16920] blk_print_req_error: 6 callbacks suppressed [ 755.168482][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 755.685153][T16920] buffer_io_error: 6 callbacks suppressed [ 755.685170][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 755.708271][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 755.740235][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 755.755260][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 755.790590][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 755.852795][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 755.917843][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 756.044511][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 756.211518][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 756.311944][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 756.425452][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 757.545562][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 757.712124][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 757.771307][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 757.842658][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 757.865112][T16920] ldm_validate_partition_table(): Disk read failed. [ 757.871820][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 757.913396][T16936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input33 [ 757.925731][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 757.934122][T16920] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 758.005757][T16920] Buffer I/O error on dev nbd0, logical block 0, async page read [ 758.013856][T16920] Dev nbd0: unable to read RDB block 0 [ 758.089510][T16920] nbd0: unable to read partition table [ 758.125298][T16934] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 758.207232][T12680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.228320][T12680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.237482][T12680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.245377][T12680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.254408][T12680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.335304][T16934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.357158][T16934] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.385360][T16934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.451074][T16934] usb 2-1: config 0 descriptor?? [ 758.929334][T16934] pwc: Askey VC010 type 2 USB webcam detected. [ 758.948866][T16941] lo speed is unknown, defaulting to 1000 [ 759.010138][T16950] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 759.049586][T16950] kvm: pic: non byte read [ 759.054214][T16950] kvm: pic: level sensitive irq not supported [ 759.054287][T16950] kvm: pic: non byte read [ 759.096718][T16950] kvm: pic: level sensitive irq not supported [ 759.097434][T16950] kvm: pic: non byte read [ 759.141956][T16950] kvm: pic: level sensitive irq not supported [ 759.142076][T16950] kvm: pic: non byte read [ 759.260987][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 759.270296][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 759.283151][T16954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2967'. [ 759.338206][T16934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.367207][T16934] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.379712][T16934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 759.417589][T16934] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.502231][T16934] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.535861][T16934] pwc: recv_control_msg error -32 req 04 val 1400 [ 759.546386][T16934] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.569207][T16934] pwc: recv_control_msg error -32 req 02 val 2100 [ 759.580403][T16934] pwc: recv_control_msg error -32 req 04 val 1500 [ 759.588404][T16934] pwc: recv_control_msg error -32 req 02 val 2500 [ 759.616243][T16934] pwc: recv_control_msg error -32 req 02 val 2400 [ 759.623501][T16934] pwc: recv_control_msg error -32 req 02 val 2600 [ 759.631149][T16934] pwc: recv_control_msg error -32 req 02 val 2900 [ 759.642691][T16934] pwc: recv_control_msg error -32 req 02 val 2800 [ 759.659537][T16941] chnl_net:caif_netlink_parms(): no params data found [ 759.864195][T16934] pwc: recv_control_msg error -71 req 04 val 1200 [ 759.916490][T16934] pwc: Registered as video103. [ 759.922889][T16934] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 760.041802][T16934] usb 2-1: USB disconnect, device number 17 [ 761.016846][T12680] Bluetooth: hci3: command tx timeout [ 761.057626][T10339] block nbd3: Possible stuck request ffff888026b35080: control (read@0,1024B). Runtime 270 seconds [ 761.127234][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 761.133605][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 761.687852][T10339] block nbd3: Possible stuck request ffff888026b35240: control (read@1024,1024B). Runtime 270 seconds [ 761.698953][T10339] block nbd3: Possible stuck request ffff888026b35400: control (read@2048,1024B). Runtime 270 seconds [ 761.712365][T10339] block nbd3: Possible stuck request ffff888026b355c0: control (read@3072,1024B). Runtime 270 seconds [ 761.795690][T16980] ceph: No mds server is up or the cluster is laggy [ 761.887633][T16990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 761.911797][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 762.077443][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 762.219361][ T6317] block nbd2: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 330 seconds [ 762.230249][ T6317] block nbd2: Possible stuck request ffff888026ab01c0: control (read@1024,1024B). Runtime 330 seconds [ 762.241258][ T6317] block nbd2: Possible stuck request ffff888026ab0380: control (read@2048,1024B). Runtime 330 seconds [ 762.252245][ T6317] block nbd2: Possible stuck request ffff888026ab0540: control (read@3072,1024B). Runtime 330 seconds [ 762.323237][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.464959][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.547209][T16941] bridge_slave_0: entered allmulticast mode [ 762.613321][T16941] bridge_slave_0: entered promiscuous mode [ 762.676691][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.694631][T16863] Set syz1 is full, maxelem 65536 reached [ 762.695170][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.725861][T17002] fuse: Bad value for 'fd' [ 762.728827][T16941] bridge_slave_1: entered allmulticast mode [ 762.756526][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'. [ 762.764646][T16941] bridge_slave_1: entered promiscuous mode [ 762.766673][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2978'. [ 762.799916][ T30] audit: type=1400 audit(1750231148.502:743): avc: denied { read write } for pid=17000 comm="syz.0.2977" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 762.830912][T17003] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2978'. [ 762.838449][ T30] audit: type=1400 audit(1750231148.502:744): avc: denied { open } for pid=17000 comm="syz.0.2977" path="/586/file0" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 762.872883][ T30] audit: type=1800 audit(1750231148.512:745): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2977" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 762.956122][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.000076][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.085218][T12680] Bluetooth: hci3: command tx timeout [ 763.575222][ T5870] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 763.627688][T16941] team0: Port device team_slave_0 added [ 763.642652][T16941] team0: Port device team_slave_1 added [ 763.745054][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 763.767732][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 763.793478][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.810226][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 763.834180][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.868230][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.876908][ T5870] usb 2-1: Product: syz [ 763.881126][ T5870] usb 2-1: Manufacturer: syz [ 763.888756][ T5870] usb 2-1: SerialNumber: syz [ 763.897440][ T5870] usb 2-1: config 0 descriptor?? [ 763.911455][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.927149][ T5870] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 763.963303][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.975122][ T5870] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 763.986225][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.015498][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.246404][T12779] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 764.406253][T17030] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2983'. [ 764.565007][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 764.618680][T12779] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.641720][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 764.670973][ T5870] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 764.716653][T12779] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 764.794230][T12779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.087285][ T24] libceph: connect (1)[c::]:6789 error -101 [ 765.124506][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 765.165053][T12680] Bluetooth: hci3: command tx timeout [ 765.165558][T17025] ceph: No mds server is up or the cluster is laggy [ 765.186570][T16941] hsr_slave_0: entered promiscuous mode [ 765.192919][T12779] usb 6-1: config 0 descriptor?? [ 765.251045][T16941] hsr_slave_1: entered promiscuous mode [ 765.257685][T16941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.273070][T12779] pwc: Askey VC010 type 2 USB webcam detected. [ 765.273484][T16941] Cannot create hsr debugfs directory [ 765.423910][ T5870] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 765.446632][ T5870] em28xx 2-1:0.0: board has no eeprom [ 765.446696][T17036] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input36 [ 765.565872][ T5870] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 765.581445][ T5870] em28xx 2-1:0.0: dvb set to bulk mode. [ 765.599513][T16934] em28xx 2-1:0.0: Binding DVB extension [ 765.607123][T16941] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.619777][ T5870] usb 2-1: USB disconnect, device number 18 [ 765.675480][ T5870] em28xx 2-1:0.0: Disconnecting em28xx [ 765.697592][T12779] pwc: recv_control_msg error -32 req 02 val 2b00 [ 765.707771][T12779] pwc: recv_control_msg error -32 req 02 val 2700 [ 765.735764][T16941] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.759052][T12779] pwc: recv_control_msg error -32 req 02 val 2c00 [ 765.767640][T12779] pwc: recv_control_msg error -32 req 04 val 1000 [ 765.780049][T16934] em28xx 2-1:0.0: Registering input extension [ 765.781276][T12779] pwc: recv_control_msg error -32 req 04 val 1300 [ 765.795614][ T5870] em28xx 2-1:0.0: Closing input extension [ 765.800685][T12779] pwc: recv_control_msg error -32 req 04 val 1400 [ 765.814081][T12779] pwc: recv_control_msg error -32 req 02 val 2000 [ 765.822197][T12779] pwc: recv_control_msg error -32 req 02 val 2100 [ 765.833663][T12779] pwc: recv_control_msg error -32 req 04 val 1500 [ 765.843628][T12779] pwc: recv_control_msg error -32 req 02 val 2500 [ 765.851487][T12779] pwc: recv_control_msg error -32 req 02 val 2400 [ 765.856486][ T5870] em28xx 2-1:0.0: Freeing device [ 765.859957][T16941] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.873756][T12779] pwc: recv_control_msg error -32 req 02 val 2600 [ 765.883007][T12779] pwc: recv_control_msg error -32 req 02 val 2900 [ 765.890462][T12779] pwc: recv_control_msg error -32 req 02 val 2800 [ 765.941731][T16941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.100259][T12779] pwc: recv_control_msg error -71 req 04 val 1200 [ 766.109702][T12779] pwc: Registered as video103. [ 766.121167][T12779] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 766.172159][T12779] usb 6-1: USB disconnect, device number 3 [ 766.216433][T16941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 766.238702][T16941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 766.245841][T17049] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2989'. [ 766.266872][T17054] netfs: Couldn't get user pages (rc=-14) [ 766.288850][T16941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 766.318182][T16941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.483239][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.514539][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.539468][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.546659][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.584516][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.592672][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.756978][T17072] lo speed is unknown, defaulting to 1000 [ 767.250687][T12680] Bluetooth: hci3: command tx timeout [ 767.617046][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.839149][T17103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39 [ 768.672389][T17121] binder: 17120:17121 ioctl c00c620f 2000000002c0 returned -22 [ 769.525520][T16941] veth0_vlan: entered promiscuous mode [ 769.538085][T16941] veth1_vlan: entered promiscuous mode [ 769.564561][T16941] veth0_macvtap: entered promiscuous mode [ 769.580744][T16941] veth1_macvtap: entered promiscuous mode [ 769.606313][T16941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.637457][T16941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.678007][T16941] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.695121][T16941] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.714011][T16941] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.729947][T16941] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.952706][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.004990][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.123043][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.168995][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.294722][ T24] libceph: connect (1)[c::]:6789 error -101 [ 770.301443][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 770.527741][T17143] ceph: No mds server is up or the cluster is laggy [ 770.535069][ T5923] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 770.577006][ T24] libceph: connect (1)[c::]:6789 error -101 [ 770.586266][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 770.688423][T17152] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2959'. [ 770.704295][ T24] libceph: connect (1)[c::]:6789 error -101 [ 770.715450][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 770.734868][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.770387][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 770.840683][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 770.892772][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.982143][ T5923] usb 4-1: Product: syz [ 771.000981][ T5923] usb 4-1: Manufacturer: syz [ 771.022896][ T5923] usb 4-1: SerialNumber: syz [ 771.049157][ T5923] usb 4-1: config 0 descriptor?? [ 771.073514][ T5923] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 771.096031][T12779] libceph: connect (1)[c::]:6789 error -101 [ 771.109726][T12779] libceph: mon0 (1)[c::]:6789 connect error [ 771.121410][ T5923] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 771.171691][T17149] ceph: No mds server is up or the cluster is laggy [ 771.662570][T17167] fuse: Bad value for 'fd' [ 771.806204][ T5923] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 772.389109][ T5923] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 772.407751][ T5923] em28xx 4-1:0.0: board has no eeprom [ 773.595971][T17140] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 773.934264][T17172] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3019'. [ 774.052765][ T5923] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 774.107016][ T5923] em28xx 4-1:0.0: dvb set to bulk mode. [ 774.112655][ T24] em28xx 4-1:0.0: Binding DVB extension [ 774.269006][ T2151] usb 4-1: USB disconnect, device number 31 [ 774.336446][ T2151] em28xx 4-1:0.0: Disconnecting em28xx [ 774.348060][ T24] em28xx 4-1:0.0: Registering input extension [ 774.385155][ T2151] em28xx 4-1:0.0: Closing input extension [ 774.475770][ T2151] em28xx 4-1:0.0: Freeing device [ 774.513419][ T5923] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 774.692455][T17193] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3026'. [ 774.750952][ T9] libceph: connect (1)[c::]:6789 error -101 [ 774.802996][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 775.075314][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 775.086373][ T5923] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 775.115154][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.157155][ T5923] usb 5-1: config 0 descriptor?? [ 775.195720][ T9] libceph: connect (1)[c::]:6789 error -101 [ 775.201812][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 775.232476][T17192] ceph: No mds server is up or the cluster is laggy [ 775.397371][ T5923] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 775.460213][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.504533][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.512754][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.523193][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.573402][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 775.646102][T17203] lo speed is unknown, defaulting to 1000 [ 775.681210][ T7063] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.841272][ T7063] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.970562][ T7063] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.077980][ T7063] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.595035][T17198] lo speed is unknown, defaulting to 1000 [ 776.925975][ T7063] batadv0: left allmulticast mode [ 776.932431][ T7063] batadv0: left promiscuous mode [ 776.939934][ T7063] bridge0: port 3(batadv0) entered disabled state [ 776.993230][ T7063] bridge_slave_1: left allmulticast mode [ 777.005785][ T7063] bridge_slave_1: left promiscuous mode [ 777.037315][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.090614][ T7063] bridge_slave_0: left allmulticast mode [ 777.134592][ T7063] bridge_slave_0: left promiscuous mode [ 777.169755][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.633674][ T7063] team0: Port device geneve0 removed [ 777.741138][ T5829] Bluetooth: hci0: command tx timeout [ 777.752274][ T5923] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 777.772237][ T5923] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 777.784666][ T5923] asix 5-1:0.0: probe with driver asix failed with error -71 [ 777.799454][ T5923] usb 5-1: USB disconnect, device number 25 [ 778.305421][ T7063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.811049][ T7063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.838078][ T7063] bond0 (unregistering): Released all slaves [ 779.098780][T17247] netfs: Couldn't get user pages (rc=-14) [ 779.297643][T17198] chnl_net:caif_netlink_parms(): no params data found [ 779.451405][ T24] IPVS: starting estimator thread 0... [ 779.502361][T17266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input41 [ 779.515841][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.535176][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.542409][T17198] bridge_slave_0: entered allmulticast mode [ 779.563619][T17198] bridge_slave_0: entered promiscuous mode [ 779.589471][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.607987][T17264] IPVS: using max 46 ests per chain, 110400 per kthread [ 779.615260][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.622615][T17198] bridge_slave_1: entered allmulticast mode [ 779.636578][T17198] bridge_slave_1: entered promiscuous mode [ 779.744863][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.784756][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.808291][ T5829] Bluetooth: hci0: command tx timeout [ 780.034423][T17277] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 780.618631][T16934] libceph: connect (1)[c::]:6789 error -101 [ 780.626442][T16934] libceph: mon0 (1)[c::]:6789 connect error [ 780.687948][T17198] team0: Port device team_slave_0 added [ 780.696426][T17198] team0: Port device team_slave_1 added [ 780.716312][T17290] ceph: No mds server is up or the cluster is laggy [ 781.048705][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.091403][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.185154][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.444151][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.451422][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.504110][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.885331][ T5829] Bluetooth: hci0: command tx timeout [ 781.917272][T17198] hsr_slave_0: entered promiscuous mode [ 781.923558][T17198] hsr_slave_1: entered promiscuous mode [ 781.946286][T17198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.962853][T17198] Cannot create hsr debugfs directory [ 782.269623][ T7063] hsr_slave_0: left promiscuous mode [ 782.315168][ T7063] hsr_slave_1: left promiscuous mode [ 782.333432][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.353133][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.370513][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.397469][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.430141][ T7063] veth1_macvtap: left promiscuous mode [ 782.436729][ T7063] veth0_macvtap: left promiscuous mode [ 782.442354][ T7063] veth1_vlan: left promiscuous mode [ 782.448229][ T7063] veth0_vlan: left promiscuous mode [ 782.570443][T16934] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 782.597418][ T5870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 782.767423][T16934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.802355][T16934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 782.815043][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 782.849712][T16934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.872060][ T5870] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 782.895139][T16934] usb 4-1: config 0 descriptor?? [ 782.904479][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.932643][T16934] pwc: Askey VC010 type 2 USB webcam detected. [ 782.945116][ T5870] usb 2-1: Product: syz [ 782.949308][ T5870] usb 2-1: Manufacturer: syz [ 782.970470][ T5870] usb 2-1: SerialNumber: syz [ 782.994816][ T5870] usb 2-1: config 0 descriptor?? [ 783.008765][ T5870] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 783.122104][T17328] rdma_rxe: rxe_newlink: failed to add lo [ 783.446928][ T2151] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 783.507532][T16934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 783.545279][T16934] pwc: recv_control_msg error -32 req 02 val 2700 [ 783.559320][T16934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 783.566577][T16934] pwc: recv_control_msg error -32 req 04 val 1000 [ 783.574155][T16934] pwc: recv_control_msg error -32 req 04 val 1300 [ 783.586052][T16934] pwc: recv_control_msg error -32 req 04 val 1400 [ 783.594149][T16934] pwc: recv_control_msg error -32 req 02 val 2000 [ 783.605751][T16934] pwc: recv_control_msg error -32 req 02 val 2100 [ 783.614534][T16934] pwc: recv_control_msg error -32 req 04 val 1500 [ 783.630458][T16934] pwc: recv_control_msg error -32 req 02 val 2500 [ 783.642119][T16934] pwc: recv_control_msg error -32 req 02 val 2400 [ 783.650313][T16934] pwc: recv_control_msg error -32 req 02 val 2600 [ 783.657942][T16934] pwc: recv_control_msg error -32 req 02 val 2900 [ 783.666662][ T2151] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.676538][T16934] pwc: recv_control_msg error -32 req 02 val 2800 [ 783.693375][ T2151] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 783.725999][ T2151] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 783.748414][ T2151] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.775534][ T2151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.807775][ T2151] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.888406][T16934] pwc: recv_control_msg error -71 req 04 val 1200 [ 783.917577][ T5870] gspca_sonixj: reg_r err -32 [ 783.922348][ T5870] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 783.939732][T16934] pwc: Registered as video103. [ 783.952842][ T6334] udevd[6334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.962086][ T2151] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 783.972532][T16934] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 783.979341][ T5829] Bluetooth: hci0: command tx timeout [ 784.055477][T16934] usb 4-1: USB disconnect, device number 32 [ 784.167396][ T7063] team0 (unregistering): Port device team_slave_1 removed [ 784.200874][ T7063] team0 (unregistering): Port device team_slave_0 removed [ 784.570304][T17330] lo speed is unknown, defaulting to 1000 [ 785.147250][T16934] libceph: connect (1)[c::]:6789 error -101 [ 785.234206][T16934] libceph: mon0 (1)[c::]:6789 connect error [ 785.483743][ T7063] IPVS: stop unused estimator thread 0... [ 785.529412][T16934] usb 2-1: USB disconnect, device number 19 [ 785.630795][T17341] ceph: No mds server is up or the cluster is laggy [ 785.645949][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 785.657036][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 785.975828][ T2151] usb 6-1: USB disconnect, device number 4 [ 786.940047][T17359] lo speed is unknown, defaulting to 1000 [ 787.606028][T17371] ceph: No mds server is up or the cluster is laggy [ 787.624365][T17198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.944632][T17198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.969535][T17198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 788.021470][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 788.027767][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 788.048787][T17198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.987633][T17198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.054375][T17198] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.169270][T14831] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.176463][T14831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.219369][T14831] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.226602][T14831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.746986][T17198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 791.079495][T17408] No control pipe specified [ 791.957298][T17198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.002597][T17421] syzkaller1: entered promiscuous mode [ 792.025764][T17421] syzkaller1: entered allmulticast mode [ 792.115081][T12779] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 792.152725][T17430] fuse: Bad value for 'fd' [ 792.161231][T17198] veth0_vlan: entered promiscuous mode [ 792.197031][T17198] veth1_vlan: entered promiscuous mode [ 792.217264][T10339] block nbd3: Possible stuck request ffff888026b35080: control (read@0,1024B). Runtime 300 seconds [ 792.229163][T10339] block nbd3: Possible stuck request ffff888026b35240: control (read@1024,1024B). Runtime 300 seconds [ 792.242233][T10339] block nbd3: Possible stuck request ffff888026b35400: control (read@2048,1024B). Runtime 300 seconds [ 792.253548][T10339] block nbd3: Possible stuck request ffff888026b355c0: control (read@3072,1024B). Runtime 300 seconds [ 792.260147][ T30] audit: type=1800 audit(1750231177.942:746): pid=17430 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3079" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 792.289544][T17198] veth0_macvtap: entered promiscuous mode [ 792.307163][T17198] veth1_macvtap: entered promiscuous mode [ 792.435100][T12779] usb 4-1: Using ep0 maxpacket: 16 [ 792.449389][T12779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 792.450217][T17198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.477668][T12779] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 792.518122][T12779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.984543][T17198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.996654][T17198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.009047][ T6317] block nbd2: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 360 seconds [ 793.032344][ T6317] block nbd2: Possible stuck request ffff888026ab01c0: control (read@1024,1024B). Runtime 360 seconds [ 793.032354][T17198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.032382][T17198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.045185][ T6317] block nbd2: Possible stuck request ffff888026ab0380: control (read@2048,1024B). Runtime 360 seconds [ 793.073666][ T6317] block nbd2: Possible stuck request ffff888026ab0540: control (read@3072,1024B). Runtime 360 seconds [ 793.085939][T12779] usb 4-1: Product: syz [ 793.090166][T12779] usb 4-1: Manufacturer: syz [ 793.096069][T12779] usb 4-1: SerialNumber: syz [ 793.104423][T12779] usb 4-1: config 0 descriptor?? [ 793.110123][T17198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.120728][T12779] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 793.147082][T12779] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 793.192801][T17437] lo speed is unknown, defaulting to 1000 [ 793.787338][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 793.794058][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 794.476262][T12779] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 794.747747][T17449] ceph: No mds server is up or the cluster is laggy [ 794.797498][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.839963][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.076984][T17459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.081235][T14882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.101908][T14882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.147513][T12779] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 795.165093][T12779] em28xx 4-1:0.0: board has no eeprom [ 795.308026][T17463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3088'. [ 795.315108][T12779] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 795.324883][T12779] em28xx 4-1:0.0: dvb set to bulk mode. [ 795.326521][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3088'. [ 795.340138][ T24] em28xx 4-1:0.0: Binding DVB extension [ 795.361093][T12779] usb 4-1: USB disconnect, device number 33 [ 795.368878][T17463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3088'. [ 795.379269][T12779] em28xx 4-1:0.0: Disconnecting em28xx [ 795.432471][T17463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3088'. [ 795.479400][T17468] syzkaller1: entered promiscuous mode [ 795.527891][T17468] syzkaller1: entered allmulticast mode [ 795.622149][ T24] em28xx 4-1:0.0: Registering input extension [ 795.629916][T12779] em28xx 4-1:0.0: Closing input extension [ 795.642461][T12779] em28xx 4-1:0.0: Freeing device [ 795.679833][T17472] fuse: Bad value for 'fd' [ 795.743082][T17472] Cache volume key already in use (9p,(null),) [ 795.762209][ T30] audit: type=1800 audit(1750231181.462:747): pid=17472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3090" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 796.755038][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 796.945207][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 796.953007][ T5923] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 796.964250][T17500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.982335][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.990496][T17500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.998835][T17500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 797.016226][T17500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 797.033378][ T5923] usb 6-1: Product: syz [ 797.037823][T17500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.044862][ T5923] usb 6-1: Manufacturer: syz [ 797.055391][ T5923] usb 6-1: SerialNumber: syz [ 797.074054][ T5923] usb 6-1: config 0 descriptor?? [ 797.087927][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 797.158103][T17499] lo speed is unknown, defaulting to 1000 [ 797.514453][T12680] Bluetooth: hci0: unexpected event for opcode 0x200c [ 797.596687][T17504] lo speed is unknown, defaulting to 1000 [ 797.961781][ T5923] gspca_sonixj: reg_r err -32 [ 797.969417][ T5923] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 798.143397][T17499] chnl_net:caif_netlink_parms(): no params data found [ 798.376471][T17499] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.383846][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.391151][T17499] bridge_slave_0: entered allmulticast mode [ 798.398909][T17499] bridge_slave_0: entered promiscuous mode [ 798.416007][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.423365][T17499] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.430700][T17499] bridge_slave_1: entered allmulticast mode [ 798.439583][T17499] bridge_slave_1: entered promiscuous mode [ 798.612197][T17499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.645536][T17499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.700250][T17536] blk_print_req_error: 6 callbacks suppressed [ 798.700265][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.725863][T17533] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3105'. [ 798.743023][T17536] buffer_io_error: 6 callbacks suppressed [ 798.743039][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.757198][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.780931][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.793318][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.814785][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.823530][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.825650][T17499] team0: Port device team_slave_0 added [ 798.836489][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.854341][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.867824][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.881352][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.885203][T17499] team0: Port device team_slave_1 added [ 798.894775][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.908657][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.920023][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.932001][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.942319][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 798.950712][T17536] ldm_validate_partition_table(): Disk read failed. [ 798.957659][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 798.983971][T17499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.986017][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 799.001796][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.011136][T17536] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 799.085276][T12680] Bluetooth: hci1: command tx timeout [ 799.096369][T17536] Buffer I/O error on dev nbd4, logical block 0, async page read [ 799.119515][T17536] Dev nbd4: unable to read RDB block 0 [ 799.121261][T17499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.150601][T17536] nbd4: unable to read partition table [ 799.187181][T17539] ldm_validate_partition_table(): Disk read failed. [ 799.210085][T17499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.217654][T17539] Dev nbd4: unable to read RDB block 0 [ 799.223683][T17539] nbd4: unable to read partition table [ 799.229316][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.263454][T17499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.380786][T17499] hsr_slave_0: entered promiscuous mode [ 799.389272][T17499] hsr_slave_1: entered promiscuous mode [ 799.395466][T17499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.403096][T17499] Cannot create hsr debugfs directory [ 799.551351][ T5870] usb 6-1: USB disconnect, device number 5 [ 799.673876][T17499] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.745415][T17499] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.811431][T17499] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.852247][T17499] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.953722][T17499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 799.967330][T17499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 799.977793][T17499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 799.987898][T17499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 800.035410][ T5880] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 800.043281][T17499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.055453][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 800.059996][T17499] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.081985][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.089074][ T7063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.102276][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.109372][ T6485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.185280][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 800.212091][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 800.224928][ T5880] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 800.234311][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.244416][ T5880] usb 2-1: Product: syz [ 800.266692][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.277357][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 800.293474][ T5880] usb 2-1: Manufacturer: syz [ 800.305270][ T5880] usb 2-1: SerialNumber: syz [ 800.340729][ T5880] usb 2-1: config 0 descriptor?? [ 800.350009][ T5870] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 800.367059][ T5880] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 800.370655][T17563] fuse: Bad value for 'fd' [ 800.381536][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.390190][ T5880] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 800.408472][ T5870] usb 6-1: config 0 descriptor?? [ 800.423129][T17499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.426839][ T5870] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 800.451956][ T30] audit: type=1800 audit(1750231186.152:748): pid=17563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3113" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 800.528397][T17499] veth0_vlan: entered promiscuous mode [ 800.895958][T17499] veth1_vlan: entered promiscuous mode [ 800.996861][ T5880] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 801.019632][T17499] veth0_macvtap: entered promiscuous mode [ 801.051970][T17499] veth1_macvtap: entered promiscuous mode [ 801.083694][T17499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.104273][T17499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.117527][T17499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.135001][T17499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.143822][T17499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.153061][T17499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.176304][T12680] Bluetooth: hci1: command tx timeout [ 801.239608][T17577] lo speed is unknown, defaulting to 1000 [ 801.370243][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.398510][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.426701][ T5880] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 801.461521][ T5880] em28xx 2-1:0.0: board has no eeprom [ 801.503275][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.516401][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.055682][ T5880] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 802.063545][ T5880] em28xx 2-1:0.0: dvb set to bulk mode. [ 802.126948][ T5870] em28xx 2-1:0.0: Binding DVB extension [ 802.218650][ T5880] usb 2-1: USB disconnect, device number 20 [ 802.294389][ T5880] em28xx 2-1:0.0: Disconnecting em28xx [ 802.324258][ T5870] em28xx 2-1:0.0: Registering input extension [ 802.362999][ T5880] em28xx 2-1:0.0: Closing input extension [ 802.506424][ T5880] em28xx 2-1:0.0: Freeing device [ 802.597400][T17591] lo speed is unknown, defaulting to 1000 [ 802.777709][T12779] usb 6-1: USB disconnect, device number 6 [ 802.862788][ T5880] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 803.035087][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 803.054844][ T5880] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 803.085013][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.093019][ T5880] usb 2-1: Product: syz [ 803.129399][ T5880] usb 2-1: Manufacturer: syz [ 803.134044][ T5880] usb 2-1: SerialNumber: syz [ 803.154829][ T5880] usb 2-1: config 0 descriptor?? [ 803.167370][T12779] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 803.223147][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 803.245355][T12680] Bluetooth: hci1: command tx timeout [ 803.337329][T12779] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.348086][T12779] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 803.357493][T12779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.384681][T12779] usb 6-1: config 0 descriptor?? [ 803.409798][T12779] pwc: Askey VC010 type 2 USB webcam detected. [ 803.821163][T12779] pwc: recv_control_msg error -32 req 02 val 2b00 [ 803.885355][T12779] pwc: recv_control_msg error -32 req 02 val 2700 [ 804.011859][ T5880] gspca_sonixj: reg_r err -32 [ 804.019812][ T5880] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 804.066605][T12779] pwc: recv_control_msg error -32 req 02 val 2c00 [ 804.347025][T17625] blk_print_req_error: 22 callbacks suppressed [ 804.347037][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.378572][T17625] buffer_io_error: 22 callbacks suppressed [ 804.378587][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.393087][T12779] pwc: recv_control_msg error -32 req 04 val 1300 [ 804.402701][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.427693][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.438739][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.465634][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.474633][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.494284][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.504675][T12779] pwc: recv_control_msg error -32 req 04 val 1400 [ 804.524733][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.539630][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.548213][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.570134][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.578466][T12779] pwc: recv_control_msg error -32 req 02 val 2000 [ 804.588282][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.600964][T12779] pwc: recv_control_msg error -32 req 02 val 2100 [ 804.617478][T12779] pwc: recv_control_msg error -32 req 04 val 1500 [ 804.626137][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.639327][T12779] pwc: recv_control_msg error -32 req 02 val 2500 [ 804.654435][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.664532][T12779] pwc: recv_control_msg error -32 req 02 val 2400 [ 804.671172][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.671274][T17625] ldm_validate_partition_table(): Disk read failed. [ 804.671363][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.695786][T12779] pwc: recv_control_msg error -32 req 02 val 2600 [ 804.708331][T12779] pwc: recv_control_msg error -32 req 02 val 2900 [ 804.718390][T12779] pwc: recv_control_msg error -32 req 02 val 2800 [ 804.737919][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.783194][T17625] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 804.792882][T17625] Buffer I/O error on dev nbd4, logical block 0, async page read [ 804.803097][T17625] Dev nbd4: unable to read RDB block 0 [ 804.811133][T17625] nbd4: unable to read partition table [ 804.828328][T17627] ldm_validate_partition_table(): Disk read failed. [ 804.847294][T17627] Dev nbd4: unable to read RDB block 0 [ 804.853356][T17627] nbd4: unable to read partition table [ 804.944723][T12779] pwc: recv_control_msg error -71 req 04 val 1200 [ 804.971637][T12779] pwc: Registered as video103. [ 805.004405][T12779] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 805.025141][ T2151] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 805.070123][T12779] usb 6-1: USB disconnect, device number 7 [ 805.216425][ T2151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.229608][ T5880] usb 2-1: USB disconnect, device number 21 [ 805.238019][ T2151] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 805.344522][T17643] ldm_validate_partition_table(): Disk read failed. [ 805.368601][T17643] Dev nbd4: unable to read RDB block 0 [ 805.374647][T17643] nbd4: unable to read partition table [ 805.385363][T12680] Bluetooth: hci1: command tx timeout [ 805.544914][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.556035][ T2151] usb 1-1: config 0 descriptor?? [ 805.567511][ T2151] pwc: Askey VC010 type 2 USB webcam detected. [ 805.971077][ T2151] pwc: recv_control_msg error -32 req 02 val 2b00 [ 805.982270][ T2151] pwc: recv_control_msg error -32 req 02 val 2700 [ 805.990158][ T2151] pwc: recv_control_msg error -32 req 02 val 2c00 [ 805.997435][ T5923] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 806.106853][T17657] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3143'. [ 806.184178][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.185101][ T5923] usb 2-1: device descriptor read/64, error -71 [ 806.192402][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.206990][ T2151] pwc: recv_control_msg error -32 req 04 val 1300 [ 806.214725][T17664] bridge0: entered allmulticast mode [ 806.216318][ T2151] pwc: recv_control_msg error -32 req 04 val 1400 [ 806.228016][ T2151] pwc: recv_control_msg error -32 req 02 val 2000 [ 806.237947][ T2151] pwc: recv_control_msg error -32 req 02 val 2100 [ 806.239312][T17664] bridge_slave_1: left allmulticast mode [ 806.245057][ T2151] pwc: recv_control_msg error -32 req 04 val 1500 [ 806.257553][T17664] bridge_slave_1: left promiscuous mode [ 806.259552][ T2151] pwc: recv_control_msg error -32 req 02 val 2500 [ 806.267021][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.272674][ T2151] pwc: recv_control_msg error -32 req 02 val 2400 [ 806.291312][ T2151] pwc: recv_control_msg error -71 req 02 val 2600 [ 806.305585][T17664] bridge_slave_0: left allmulticast mode [ 806.311364][T17664] bridge_slave_0: left promiscuous mode [ 806.315292][ T2151] pwc: recv_control_msg error -71 req 02 val 2900 [ 806.337197][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.370458][ T2151] pwc: recv_control_msg error -71 req 02 val 2800 [ 806.384919][ T2151] pwc: recv_control_msg error -71 req 04 val 1100 [ 806.394314][ T2151] pwc: recv_control_msg error -71 req 04 val 1200 [ 806.435245][ T5923] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 806.447340][ T30] audit: type=1326 audit(1750231192.142:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e9d8e929 code=0x7ffc0000 [ 806.450247][ T2151] pwc: Registered as video103. [ 806.525964][ T30] audit: type=1326 audit(1750231192.142:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e9d8e929 code=0x7ffc0000 [ 806.569476][ T30] audit: type=1326 audit(1750231192.142:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc1e9d8e929 code=0x7ffc0000 [ 806.573227][ T2151] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 806.602718][ T30] audit: type=1326 audit(1750231192.142:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e9d8e929 code=0x7ffc0000 [ 806.602764][ T30] audit: type=1326 audit(1750231192.142:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.4.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e9d8e929 code=0x7ffc0000 [ 806.732722][ T5923] usb 2-1: device descriptor read/64, error -71 [ 806.785813][ T2151] usb 1-1: USB disconnect, device number 30 [ 806.845530][ T5923] usb usb2-port1: attempt power cycle [ 807.185345][ T5923] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 807.251028][ T5923] usb 2-1: device descriptor read/8, error -71 [ 807.302489][T17684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3151'. [ 807.311698][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3151'. [ 807.320874][T17684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3151'. [ 807.336638][T17684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3151'. [ 807.496352][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 807.525925][ T5923] usb 2-1: device descriptor read/8, error -71 [ 807.635739][ T5923] usb usb2-port1: unable to enumerate USB device [ 808.120995][T17712] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input47 [ 808.223939][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.230546][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.811766][T17729] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 810.830401][T17715] lo speed is unknown, defaulting to 1000 [ 810.845661][T17729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 810.878913][T17729] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 810.887728][ T30] audit: type=1400 audit(1750231196.582:754): avc: denied { firmware_load } for pid=17727 comm="syz.1.3165" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 811.153911][T17746] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 811.227973][T17746] kvm: pic: level sensitive irq not supported [ 811.228045][T17746] kvm: pic: non byte read [ 811.340166][T17746] kvm: pic: level sensitive irq not supported [ 811.340235][T17746] kvm: pic: non byte read [ 811.365107][T16934] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 811.385370][T17746] kvm: pic: level sensitive irq not supported [ 811.385432][T17746] kvm: pic: non byte read [ 811.404817][T17746] kvm: pic: level sensitive irq not supported [ 811.404880][T17746] kvm: pic: non byte read [ 811.417602][T17746] kvm: pic: level sensitive irq not supported [ 811.417661][T17746] kvm: pic: non byte read [ 811.431838][T17746] kvm: pic: level sensitive irq not supported [ 811.431915][T17746] kvm: pic: non byte read [ 811.443869][T17746] kvm: pic: level sensitive irq not supported [ 811.443930][T17746] kvm: pic: non byte read [ 811.458909][T17746] kvm: pic: level sensitive irq not supported [ 811.458985][T17746] kvm: pic: non byte read [ 811.471026][T17746] kvm: pic: level sensitive irq not supported [ 811.471086][T17746] kvm: pic: non byte read [ 811.479005][T17754] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input48 [ 811.489972][T17746] kvm: pic: level sensitive irq not supported [ 811.492460][T17746] kvm: pic: non byte read [ 811.549380][T16934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 811.559678][T16934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 811.570269][T16934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 811.584173][T16934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 811.608313][T16934] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 811.621432][T16934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.630352][T16934] usb 1-1: Product: syz [ 811.634566][T16934] usb 1-1: Manufacturer: syz [ 811.639563][T16934] usb 1-1: SerialNumber: syz [ 811.646760][T16934] usb 1-1: config 0 descriptor?? [ 811.653674][T16934] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 811.914631][T16934] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 812.120649][T17743] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 813.015195][T12680] Bluetooth: hci6: unexpected event for opcode 0x200c [ 814.516720][T17743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.546710][T17768] veth3: entered promiscuous mode [ 814.564861][T17766] lo speed is unknown, defaulting to 1000 [ 814.660568][ T974] usb 1-1: USB disconnect, device number 31 [ 815.829779][T17807] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3187'. [ 815.875126][ T5923] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 816.066638][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.072612][T14831] syzkaller0: tun_net_xmit 76 [ 816.086306][T14831] syzkaller0: tun_net_xmit 48 [ 816.095147][ T5923] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 816.149254][T16934] syzkaller0: tun_net_xmit 76 [ 816.154122][T16934] syzkaller0: tun_net_xmit 76 [ 816.162241][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.182177][ T5923] usb 6-1: config 0 descriptor?? [ 816.190190][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 816.201058][T16934] syzkaller0: tun_net_xmit 76 [ 816.555158][ T24] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 816.596463][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 816.603845][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 816.613676][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 816.621217][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 816.629847][ T5923] pwc: recv_control_msg error -32 req 04 val 1300 [ 816.637640][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 816.645353][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 816.652623][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 816.660175][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 816.667499][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 816.674660][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 816.681881][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 816.689202][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 816.727606][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41216, setting to 64 [ 816.739275][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 816.748426][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.765540][ T24] usb 2-1: config 0 descriptor?? [ 816.772698][T17816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 816.900866][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 816.918075][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 816.930220][ T5923] pwc: Registered as video103. [ 816.954122][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 817.030152][ T5923] usb 6-1: USB disconnect, device number 8 [ 817.399794][T17816] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3191'. [ 818.627048][T17816] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.634637][T17816] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.726909][T17837] lo speed is unknown, defaulting to 1000 [ 818.777865][T17849] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.958856][T17849] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.985378][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 819.082330][T17849] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.136376][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 819.150944][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.168431][ T24] usb 5-1: config 0 has no interfaces? [ 819.180785][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 819.196356][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.223786][ T24] usb 5-1: config 0 descriptor?? [ 819.265306][T17849] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.445513][ T5923] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 819.534835][T17849] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.551193][T17849] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.574171][T17849] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.592537][T17849] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.615223][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 819.624594][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 819.650195][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 819.669005][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.702611][T16934] usb 2-1: USB disconnect, device number 26 [ 819.821714][ T5923] usb 4-1: Product: syz [ 819.826800][ T5923] usb 4-1: Manufacturer: syz [ 819.831461][ T5923] usb 4-1: SerialNumber: syz [ 819.838693][ T5923] usb 4-1: config 0 descriptor?? [ 819.847247][ T5923] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 819.856632][ T5923] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 820.029568][T17863] lo speed is unknown, defaulting to 1000 [ 821.237256][ T5923] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 821.576876][T17880] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3206'. [ 821.658586][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 821.829709][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 821.986838][T12779] usb 5-1: USB disconnect, device number 26 [ 822.058329][ T5923] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 822.075067][ T5923] em28xx 4-1:0.0: board has no eeprom [ 822.115078][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 822.147863][ T5923] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 822.156875][ T5923] em28xx 4-1:0.0: dvb set to bulk mode. [ 822.162515][T17888] em28xx 4-1:0.0: Binding DVB extension [ 822.165458][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 822.180154][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 822.192004][ T5923] usb 4-1: USB disconnect, device number 34 [ 822.206083][ T5923] em28xx 4-1:0.0: Disconnecting em28xx [ 822.220735][T17888] em28xx 4-1:0.0: Registering input extension [ 822.240718][T17886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3209'. [ 822.250574][ T5923] em28xx 4-1:0.0: Closing input extension [ 822.265623][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 822.272235][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 822.287538][T10339] block nbd3: Possible stuck request ffff888026b35080: control (read@0,1024B). Runtime 330 seconds [ 822.298523][T10339] block nbd3: Possible stuck request ffff888026b35240: control (read@1024,1024B). Runtime 330 seconds [ 822.309981][T10339] block nbd3: Possible stuck request ffff888026b35400: control (read@2048,1024B). Runtime 330 seconds [ 822.317469][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.321374][T10339] block nbd3: Possible stuck request ffff888026b355c0: control (read@3072,1024B). Runtime 330 seconds [ 822.331694][ T5923] em28xx 4-1:0.0: Freeing device [ 822.363386][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.478677][ T24] usb 2-1: Product: syz [ 822.495113][ T24] usb 2-1: Manufacturer: syz [ 822.499786][ T24] usb 2-1: SerialNumber: syz [ 822.519436][ T24] usb 2-1: config 0 descriptor?? [ 822.540695][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 822.551715][ T24] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 822.695967][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 822.714595][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 823.224646][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 823.423089][ T30] audit: type=1326 audit(1750231209.002:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 823.460048][T17901] lo speed is unknown, defaulting to 1000 [ 823.548129][ T30] audit: type=1326 audit(1750231209.002:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 823.575792][T17752] block nbd2: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 390 seconds [ 823.601262][T17752] block nbd2: Possible stuck request ffff888026ab01c0: control (read@1024,1024B). Runtime 390 seconds [ 823.615536][T17752] block nbd2: Possible stuck request ffff888026ab0380: control (read@2048,1024B). Runtime 390 seconds [ 823.630602][T17752] block nbd2: Possible stuck request ffff888026ab0540: control (read@3072,1024B). Runtime 390 seconds [ 823.926443][ T30] audit: type=1326 audit(1750231209.002:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 824.102400][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 824.445483][T16934] libceph: connect (1)[c::]:6789 error -101 [ 824.591479][T16934] libceph: mon0 (1)[c::]:6789 connect error [ 824.825189][ T24] em28xx 2-1:0.0: board has no eeprom [ 824.879066][ T30] audit: type=1326 audit(1750231209.002:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 824.945480][T17909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3215'. [ 824.954460][T17909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3215'. [ 824.969585][T17909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3215'. [ 824.994521][ T30] audit: type=1326 audit(1750231209.002:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 825.024684][T17909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3215'. [ 825.035237][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 825.043064][ T24] em28xx 2-1:0.0: dvb set to bulk mode. [ 825.140014][T12779] em28xx 2-1:0.0: Binding DVB extension [ 825.154131][ T24] usb 2-1: USB disconnect, device number 27 [ 825.254607][ T30] audit: type=1326 audit(1750231209.002:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 825.284759][ T30] audit: type=1326 audit(1750231209.002:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44d98e929 code=0x7ffc0000 [ 825.328513][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 825.344468][T17879] ceph: No mds server is up or the cluster is laggy [ 825.361033][T12779] em28xx 2-1:0.0: Registering input extension [ 825.454011][ T24] em28xx 2-1:0.0: Closing input extension [ 825.474654][ T24] em28xx 2-1:0.0: Freeing device [ 825.985785][T17935] fuse: Bad value for 'fd' [ 826.886395][T17944] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3225'. [ 827.506628][T17959] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3230'. [ 827.568574][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 827.788116][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 828.039274][T17969] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.046867][T17969] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.062522][T17969] bridge0: entered allmulticast mode [ 828.084848][T17969] bridge_slave_1: left allmulticast mode [ 828.103612][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 828.109970][T17969] bridge_slave_1: left promiscuous mode [ 828.115913][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 828.132069][T17969] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.133115][T17972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 828.141998][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 828.225968][T17969] bridge_slave_0: left allmulticast mode [ 828.247228][T17969] bridge_slave_0: left promiscuous mode [ 828.257731][T17969] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.326806][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 828.349427][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 828.364255][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 828.376565][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.385883][ T24] usb 4-1: Product: syz [ 828.390870][ T24] usb 4-1: Manufacturer: syz [ 828.396151][ T24] usb 4-1: SerialNumber: syz [ 828.403420][ T24] usb 4-1: config 0 descriptor?? [ 828.426090][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 828.452057][ T24] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 828.771721][T12779] libceph: connect (1)[c::]:6789 error -101 [ 828.778442][T12779] libceph: mon0 (1)[c::]:6789 connect error [ 830.436531][T12779] libceph: connect (1)[c::]:6789 error -101 [ 830.537850][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 831.786797][T12779] libceph: mon0 (1)[c::]:6789 connect error [ 831.923365][T17888] libceph: connect (1)[c::]:6789 error -101 [ 831.935350][T17888] libceph: mon0 (1)[c::]:6789 connect error [ 831.975538][T17957] ceph: No mds server is up or the cluster is laggy [ 832.682116][ T24] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 832.706869][ T24] em28xx 4-1:0.0: board has no eeprom [ 832.785088][ T24] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 832.806500][ T24] em28xx 4-1:0.0: dvb set to bulk mode. [ 832.843687][T17888] em28xx 4-1:0.0: Binding DVB extension [ 832.920812][ T24] usb 4-1: USB disconnect, device number 35 [ 832.940776][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 833.019740][T17888] em28xx 4-1:0.0: Registering input extension [ 833.032329][ T24] em28xx 4-1:0.0: Closing input extension [ 833.062539][ T24] em28xx 4-1:0.0: Freeing device [ 833.725122][T16934] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 833.738507][ T974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 833.794673][T18021] tmpfs: Unknown parameter 'quot' [ 834.001996][ T974] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 834.022747][T16934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.097544][ T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.167269][T16934] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 834.245467][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 834.266559][ T974] usb 6-1: config 0 has no interface number 0 [ 834.272999][T16934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.282413][ T974] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 834.296387][ T974] usb 6-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.315273][T16934] usb 1-1: config 0 descriptor?? [ 834.328749][T16934] pwc: Askey VC010 type 2 USB webcam detected. [ 834.346444][ T974] usb 6-1: config 0 interface 11 has no altsetting 0 [ 834.354725][ T974] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 834.370248][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.395408][ T974] usb 6-1: config 0 descriptor?? [ 834.402108][T18016] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 834.417597][ T974] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 834.418776][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.426018][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 87 [ 834.450707][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 834.459186][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 834.463529][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.467096][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 834.500111][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 834.508333][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 834.522596][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 834.531786][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.545485][ T24] usb 4-1: config 0 descriptor?? [ 834.599895][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 834.629228][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 834.655466][ T974] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 834.681897][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 834.699989][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 834.711650][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 834.746687][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 834.754554][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 834.771775][ T974] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 834.788724][ T974] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 834.828272][ T974] usb 6-1: USB disconnect, device number 9 [ 834.843154][ T974] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 834.879329][ T974] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 834.897269][ T974] keyspan 6-1:0.11: device disconnected [ 835.016675][T16934] pwc: recv_control_msg error -71 req 02 val 2700 [ 835.062700][T16934] pwc: recv_control_msg error -71 req 02 val 2c00 [ 835.095387][T16934] pwc: recv_control_msg error -71 req 04 val 1000 [ 835.118794][T16934] pwc: recv_control_msg error -71 req 04 val 1300 [ 835.138517][T16934] pwc: recv_control_msg error -71 req 04 val 1400 [ 835.218302][T16934] pwc: recv_control_msg error -71 req 02 val 2000 [ 835.228457][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 835.274144][T16934] pwc: recv_control_msg error -71 req 02 val 2100 [ 835.304517][T16934] pwc: recv_control_msg error -71 req 04 val 1500 [ 835.337972][T16934] pwc: recv_control_msg error -71 req 02 val 2500 [ 835.362205][T16934] pwc: recv_control_msg error -71 req 02 val 2400 [ 835.400144][T16934] pwc: recv_control_msg error -71 req 02 val 2600 [ 835.405433][T17888] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 835.415788][T16934] pwc: recv_control_msg error -71 req 02 val 2900 [ 835.423808][T16934] pwc: recv_control_msg error -71 req 02 val 2800 [ 835.452932][T16934] pwc: recv_control_msg error -71 req 04 val 1100 [ 835.515817][T16934] pwc: recv_control_msg error -71 req 04 val 1200 [ 835.667990][T16934] pwc: Registered as video103. [ 835.828198][T16934] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input53 [ 835.927449][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 835.955344][ T24] usb 4-1: USB disconnect, device number 36 [ 836.022421][T16934] usb 1-1: USB disconnect, device number 32 [ 836.095550][T17888] usb 5-1: Using ep0 maxpacket: 16 [ 836.111890][T17888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 836.138123][T17888] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 836.164166][T17888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.176775][T18038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 836.177183][T17888] usb 5-1: Product: syz [ 836.190279][T17888] usb 5-1: Manufacturer: syz [ 836.209550][T17888] usb 5-1: SerialNumber: syz [ 836.240956][T17888] usb 5-1: config 0 descriptor?? [ 836.356017][T17888] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 836.373993][T17888] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 836.558972][T18043] lo speed is unknown, defaulting to 1000 [ 836.895080][T16934] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 837.447502][T17888] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 837.615248][T16934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.644100][T16934] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 837.670416][T16934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.682605][T16934] usb 1-1: config 0 descriptor?? [ 837.707041][T16934] pwc: Askey VC010 type 2 USB webcam detected. [ 837.905240][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 838.056890][ T24] usb 2-1: device descriptor read/64, error -71 [ 838.124425][T16934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 838.131490][T16934] pwc: recv_control_msg error -32 req 02 val 2700 [ 838.139462][T16934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 838.231653][T18060] tmpfs: Unknown parameter 'quot' [ 838.431960][T16934] pwc: recv_control_msg error -32 req 04 val 1300 [ 838.439444][T16934] pwc: recv_control_msg error -71 req 04 val 1400 [ 838.446977][T16934] pwc: recv_control_msg error -71 req 02 val 2000 [ 838.454285][T16934] pwc: recv_control_msg error -71 req 02 val 2100 [ 838.462673][T16934] pwc: recv_control_msg error -71 req 04 val 1500 [ 838.470954][T16934] pwc: recv_control_msg error -71 req 02 val 2500 [ 838.478345][T16934] pwc: recv_control_msg error -71 req 02 val 2400 [ 838.486052][T16934] pwc: recv_control_msg error -71 req 02 val 2600 [ 838.493117][T16934] pwc: recv_control_msg error -71 req 02 val 2900 [ 838.500614][T16934] pwc: recv_control_msg error -71 req 02 val 2800 [ 838.510899][T16934] pwc: recv_control_msg error -71 req 04 val 1100 [ 838.533498][T16934] pwc: recv_control_msg error -71 req 04 val 1200 [ 838.551352][T16934] pwc: Registered as video103. [ 838.564729][T16934] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input54 [ 838.615363][T16934] usb 1-1: USB disconnect, device number 33 [ 838.645103][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 838.785657][ T24] usb 2-1: device descriptor read/64, error -71 [ 838.916506][ T24] usb usb2-port1: attempt power cycle [ 839.090105][T17888] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 839.102630][T17888] em28xx 5-1:0.0: board has no eeprom [ 839.108472][T18027] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 839.188909][T17888] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 839.209923][T17888] em28xx 5-1:0.0: dvb set to bulk mode. [ 839.228473][ T5923] em28xx 5-1:0.0: Binding DVB extension [ 839.269291][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 839.288170][T17888] usb 5-1: USB disconnect, device number 27 [ 839.316923][ T2151] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 839.328154][ T24] usb 2-1: device descriptor read/8, error -71 [ 839.351163][T17888] em28xx 5-1:0.0: Disconnecting em28xx [ 839.552400][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 839.610021][ T2151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 839.620593][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 839.678250][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 839.691657][ T24] usb 2-1: device descriptor read/8, error -71 [ 839.776463][ T2151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 839.818212][ T24] usb usb2-port1: unable to enumerate USB device [ 839.864009][ T2151] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 839.907506][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.952248][ T2151] usb 1-1: Product: syz [ 839.975717][ T2151] usb 1-1: Manufacturer: syz [ 840.006732][ T2151] usb 1-1: SerialNumber: syz [ 840.096966][ T2151] usb 1-1: config 0 descriptor?? [ 840.145462][ T2151] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 840.272932][ T5923] em28xx 5-1:0.0: Registering input extension [ 840.287528][T17888] em28xx 5-1:0.0: Closing input extension [ 840.345607][T17888] em28xx 5-1:0.0: Freeing device [ 840.614377][ T2151] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 840.679825][T18066] netlink: 'syz.0.3265': attribute type 1 has an invalid length. [ 844.439487][T18077] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 844.439936][T18066] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 844.451449][T18077] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 844.470558][T18081] veth5: entered promiscuous mode [ 844.471376][T18077] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 844.542725][ T974] usb 1-1: USB disconnect, device number 34 [ 844.639310][T18117] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3278'. [ 846.265671][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 846.435738][ T5923] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 846.445104][T12680] Bluetooth: hci5: command 0x0406 tx timeout [ 847.092990][T12680] Bluetooth: hci1: command 0x0405 tx timeout [ 847.201646][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 847.218440][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 847.387216][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41216, setting to 64 [ 847.396367][T18172] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3290'. [ 847.398580][ T5923] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 847.418336][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.434308][ T5923] usb 1-1: config 0 descriptor?? [ 847.454002][T18147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 847.902976][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 847.909142][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 848.171564][T18163] ceph: No mds server is up or the cluster is laggy [ 848.286948][T18183] lo speed is unknown, defaulting to 1000 [ 848.445353][ T5880] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 848.620483][T18189] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3289'. [ 848.642972][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 848.655515][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.666901][ T5880] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 848.695464][ T5880] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 848.704557][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.718793][ T5880] usb 4-1: Product: syz [ 848.723011][ T5880] usb 4-1: Manufacturer: syz [ 848.727705][ T5880] usb 4-1: SerialNumber: syz [ 848.745968][ T5880] usb 4-1: config 0 descriptor?? [ 848.976609][ T5880] usb 4-1: USB disconnect, device number 37 [ 849.618296][T18211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.069393][T18211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.443852][T18211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.496723][ T2151] usb 1-1: USB disconnect, device number 35 [ 850.746493][T18211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.967821][T12680] Bluetooth: hci1: unexpected event for opcode 0x200c [ 851.267283][T18236] lo speed is unknown, defaulting to 1000 [ 851.360497][T18232] lo speed is unknown, defaulting to 1000 [ 851.528982][T18211] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.603529][T18211] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.656138][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 851.681510][T18211] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.729935][T18211] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.365339][T10339] block nbd3: Possible stuck request ffff888026b35080: control (read@0,1024B). Runtime 360 seconds [ 852.376483][T10339] block nbd3: Possible stuck request ffff888026b35240: control (read@1024,1024B). Runtime 360 seconds [ 852.387739][T10339] block nbd3: Possible stuck request ffff888026b35400: control (read@2048,1024B). Runtime 360 seconds [ 852.398913][T10339] block nbd3: Possible stuck request ffff888026b355c0: control (read@3072,1024B). Runtime 360 seconds [ 852.859959][T18256] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3321'. [ 855.156238][ T25] block nbd2: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 420 seconds [ 855.167034][ T25] block nbd2: Possible stuck request ffff888026ab01c0: control (read@1024,1024B). Runtime 420 seconds [ 855.200636][ T25] block nbd2: Possible stuck request ffff888026ab0380: control (read@2048,1024B). Runtime 420 seconds [ 855.233045][ T25] block nbd2: Possible stuck request ffff888026ab0540: control (read@3072,1024B). Runtime 420 seconds [ 856.199665][ T5188] udevd[5188]: worker [5827] /devices/virtual/block/nbd2 timeout; kill it [ 856.246814][ T5188] udevd[5188]: seq 14361 '/devices/virtual/block/nbd2' killed [ 856.254479][ T5188] udevd[5188]: worker [5823] /devices/virtual/block/nbd3 timeout; kill it [ 856.280930][T18282] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.311876][ T5188] udevd[5188]: seq 15142 '/devices/virtual/block/nbd3' killed [ 856.442357][T18282] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.551384][T18282] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.618607][T18287] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3332'. [ 856.639218][T18282] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.230801][T18282] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.285970][T18282] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.370401][T18282] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.505214][ T31] INFO: task syz.2.2787:16203 blocked for more than 143 seconds. [ 857.519523][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 857.533872][T18282] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.551398][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 857.591886][ T31] task:syz.2.2787 state:D stack:28888 pid:16203 tgid:16202 ppid:5813 task_flags:0x400040 flags:0x00004004 [ 858.136313][ T31] Call Trace: [ 858.139642][ T31] [ 858.142583][ T31] __schedule+0x116a/0x5de0 [ 858.147510][ T31] ? __lock_acquire+0x622/0x1c90 [ 858.152476][ T31] ? __pfx___schedule+0x10/0x10 [ 858.157682][ T31] ? find_held_lock+0x2b/0x80 [ 858.162393][ T31] ? schedule+0x2d7/0x3a0 [ 858.198560][ T31] schedule+0xe7/0x3a0 [ 858.206080][ T31] schedule_preempt_disabled+0x13/0x30 [ 858.211673][ T31] __mutex_lock+0x6c7/0xb90 [ 858.217146][ T31] ? __pfx___might_resched+0x10/0x10 [ 858.222555][ T31] ? bdev_open+0x41a/0xe40 [ 858.349551][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 858.365225][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 858.405125][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 858.410261][ T31] ? __pfx_ilookup+0x10/0x10 [ 858.414870][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 858.420268][ T31] ? bdev_open+0x41a/0xe40 [ 858.424754][ T31] bdev_open+0x41a/0xe40 [ 858.429119][ T31] blkdev_open+0x280/0x3f0 [ 858.433607][ T31] do_dentry_open+0x744/0x1c10 [ 858.438585][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 858.443549][ T31] vfs_open+0x82/0x3f0 [ 858.447902][ T31] path_openat+0x1de4/0x2cb0 [ 858.452562][ T31] ? __pfx_path_openat+0x10/0x10 [ 858.457747][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 858.458090][T18312] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3334'. [ 858.462792][ T31] do_filp_open+0x20b/0x470 [ 858.478284][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 858.483386][ T31] ? alloc_fd+0x471/0x7d0 [ 858.487768][ T31] do_sys_openat2+0x11b/0x1d0 [ 858.492545][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 858.500032][ T31] ? find_held_lock+0x2b/0x80 [ 858.504856][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 858.509922][ T31] __x64_sys_openat+0x174/0x210 [ 858.514848][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 858.520528][ T31] ? do_user_addr_fault+0x843/0x1370 [ 858.525989][ T31] do_syscall_64+0xcd/0x4c0 [ 858.530562][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.536691][ T31] RIP: 0033:0x7f11bed8d290 [ 858.541163][ T31] RSP: 002b:00007f11bfba7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 858.549738][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11bed8d290 [ 858.563860][ T31] RDX: 0000000000000000 RSI: 00007f11bfba7c10 RDI: 00000000ffffff9c [ 858.572010][ T31] RBP: 00007f11bfba7c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 858.581985][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 858.590143][ T31] R13: 0000000000000000 R14: 00007f11befb5fa0 R15: 00007ffc68eca778 [ 858.598380][ T31] [ 858.619797][T18308] ceph: No mds server is up or the cluster is laggy [ 858.635402][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 858.641555][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 858.651522][ T31] [ 858.651522][ T31] Showing all locks held in the system: [ 858.678599][T12680] Bluetooth: hci0: unexpected event for opcode 0x200c [ 858.706384][ T31] 1 lock held by pool_workqueue_/3: [ 858.711258][T18314] lo speed is unknown, defaulting to 1000 [ 858.711603][ T31] 1 lock held by khungtaskd/31: [ 858.755109][ T31] #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 858.781185][ T31] 3 locks held by kworker/1:2/2151: [ 858.792675][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 858.803273][ T31] #1: ffffc90005717d10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 858.822297][ T31] #2: ffff888025f51240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 858.832559][ T31] 2 locks held by getty/5579: [ 858.841530][ T31] #0: ffff88803253b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 858.851545][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 858.861941][ T31] 1 lock held by udevd/5823: [ 858.866651][ T31] #0: ffff8880269ef358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 858.876173][ T31] 1 lock held by udevd/5827: [ 858.882593][ T31] #0: ffff8880269eb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 858.896118][ T31] 1 lock held by syz.2.2787/16203: [ 858.903470][ T31] #0: ffff8880269eb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 858.919131][ T31] 2 locks held by syz.0.3338/18301: [ 858.926424][ T31] #0: ffff88807c4d6208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 858.941564][ T31] #1: ffffffff8e5cfe78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 858.955079][ T31] 1 lock held by syz.0.3338/18313: [ 858.961319][ T31] 5 locks held by syz.0.3338/18314: [ 858.986670][ T31] [ 859.002081][ T31] ============================================= [ 859.002081][ T31] [ 859.020140][ T31] NMI backtrace for cpu 0 [ 859.020156][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 859.020178][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 859.020188][ T31] Call Trace: [ 859.020194][ T31] [ 859.020201][ T31] dump_stack_lvl+0x116/0x1f0 [ 859.020232][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 859.020251][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.020275][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 859.020300][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 859.020323][ T31] watchdog+0xf70/0x12c0 [ 859.020352][ T31] ? __pfx_watchdog+0x10/0x10 [ 859.020370][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.020396][ T31] ? __kthread_parkme+0x19e/0x250 [ 859.020422][ T31] ? __pfx_watchdog+0x10/0x10 [ 859.020440][ T31] kthread+0x3c2/0x780 [ 859.020457][ T31] ? __pfx_kthread+0x10/0x10 [ 859.020475][ T31] ? rcu_is_watching+0x12/0xc0 [ 859.020496][ T31] ? __pfx_kthread+0x10/0x10 [ 859.020513][ T31] ret_from_fork+0x5d4/0x6f0 [ 859.020536][ T31] ? __pfx_kthread+0x10/0x10 [ 859.020553][ T31] ret_from_fork_asm+0x1a/0x30 [ 859.020582][ T31] [ 859.020588][ T31] Sending NMI from CPU 0 to CPUs 1: [ 859.147295][ C1] NMI backtrace for cpu 1 [ 859.147308][ C1] CPU: 1 UID: 0 PID: 6485 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 859.147326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 859.147335][ C1] Workqueue: bat_events batadv_nc_worker [ 859.147356][ C1] RIP: 0010:lock_acquire+0x4e/0x350 [ 859.147378][ C1] Code: 48 8b 05 3d 53 34 12 48 89 44 24 30 31 c0 66 90 65 8b 05 59 53 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 98 0f 0f <0f> 82 74 02 00 00 8b 35 4a ca 0f 0f 85 f6 0f 85 8d 00 00 00 48 8b [ 859.147392][ C1] RSP: 0018:ffffc9001024fab0 EFLAGS: 00000297 [ 859.147402][ C1] RAX: 0000000000000001 RBX: ffffffff8e5c4880 RCX: 0000000000000002 [ 859.147411][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c4880 [ 859.147419][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 859.147427][ C1] R10: 0000000000000400 R11: 0000000000000001 R12: 0000000000000000 [ 859.147436][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.147444][ C1] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 859.147458][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.147467][ C1] CR2: 000000110c3e2439 CR3: 0000000032d3d000 CR4: 00000000003526f0 [ 859.147476][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 859.147484][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 859.147493][ C1] Call Trace: [ 859.147497][ C1] [ 859.147503][ C1] ? batadv_nc_worker+0x895/0x1030 [ 859.147521][ C1] batadv_nc_worker+0x16a/0x1030 [ 859.147537][ C1] ? batadv_nc_worker+0x159/0x1030 [ 859.147553][ C1] ? x86_vector_alloc_irqs+0x15f/0xa60 [ 859.147571][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.147596][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 859.147615][ C1] ? rcu_is_watching+0x12/0xc0 [ 859.147633][ C1] process_one_work+0x9cc/0x1b70 [ 859.147650][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 859.147667][ C1] ? __pfx_process_one_work+0x10/0x10 [ 859.147683][ C1] ? assign_work+0x1a0/0x250 [ 859.147703][ C1] worker_thread+0x6c8/0xf10 [ 859.147719][ C1] ? __kthread_parkme+0x19e/0x250 [ 859.147737][ C1] ? __pfx_worker_thread+0x10/0x10 [ 859.147750][ C1] kthread+0x3c2/0x780 [ 859.147762][ C1] ? __pfx_kthread+0x10/0x10 [ 859.147774][ C1] ? rcu_is_watching+0x12/0xc0 [ 859.147790][ C1] ? __pfx_kthread+0x10/0x10 [ 859.147801][ C1] ret_from_fork+0x5d4/0x6f0 [ 859.147819][ C1] ? __pfx_kthread+0x10/0x10 [ 859.147831][ C1] ret_from_fork_asm+0x1a/0x30 [ 859.147851][ C1] [ 859.429713][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 859.436603][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 859.448411][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 859.458467][ T31] Call Trace: [ 859.461743][ T31] [ 859.464673][ T31] dump_stack_lvl+0x3d/0x1f0 [ 859.469280][ T31] panic+0x71c/0x800 [ 859.473182][ T31] ? __pfx_panic+0x10/0x10 [ 859.477618][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 859.483003][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 859.489000][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 859.494380][ T31] ? watchdog+0xdda/0x12c0 [ 859.498801][ T31] ? watchdog+0xdcd/0x12c0 [ 859.503224][ T31] watchdog+0xdeb/0x12c0 [ 859.507471][ T31] ? __pfx_watchdog+0x10/0x10 [ 859.512150][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.517359][ T31] ? __kthread_parkme+0x19e/0x250 [ 859.522388][ T31] ? __pfx_watchdog+0x10/0x10 [ 859.527063][ T31] kthread+0x3c2/0x780 [ 859.531136][ T31] ? __pfx_kthread+0x10/0x10 [ 859.535724][ T31] ? rcu_is_watching+0x12/0xc0 [ 859.540491][ T31] ? __pfx_kthread+0x10/0x10 [ 859.545079][ T31] ret_from_fork+0x5d4/0x6f0 [ 859.549689][ T31] ? __pfx_kthread+0x10/0x10 [ 859.554279][ T31] ret_from_fork_asm+0x1a/0x30 [ 859.559044][ T31] [ 859.562262][ T31] Kernel Offset: disabled [ 859.566567][ T31] Rebooting in 86400 seconds..