last executing test programs: 2m36.182274579s ago: executing program 2 (id=597): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 2m35.89645403s ago: executing program 2 (id=599): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x2}) 2m34.327826917s ago: executing program 2 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/notes', 0x80240, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f01df262e0f64b2a984000066b864000f08f001d10f235eb8000000000f23d00f21f8352000000f0f23f826f30f2a3ec4e299914c92e0", 0x37}], 0x1, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 2m32.735543372s ago: executing program 2 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000200)={0xe1, 0x10001, 0x2, 0x80, 0x7, "c3c3302be8da55df4bd73f96f1625b1acb4a98"}) 2m31.584951932s ago: executing program 2 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='cgroup\x00') preadv(r1, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1, 0x7, 0x8) 2m27.368718727s ago: executing program 2 (id=619): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) socket(0x2, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x200000a) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m11.633128566s ago: executing program 32 (id=619): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) socket(0x2, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x200000a) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 9.849543032s ago: executing program 1 (id=1461): socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00"], 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x0) 8.284036339s ago: executing program 3 (id=1476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/notes', 0x80240, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f01df262e0f64b2a984000066b864000f08f001d10f235eb8000000000f23d00f21f8352000000f0f23f826f30f2a3ec4e299914c92e0", 0x37}], 0x1, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 7.989201244s ago: executing program 1 (id=1481): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r4, 0x0, 0x0) setsockopt$MRT6_TABLE(r2, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) unshare(0x62040200) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x1d0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000200)=@req3={0x2, 0x1982, 0x0, 0xfffffffc, 0x10001, 0x1, 0x3}, 0x1c) recvmmsg$unix(r5, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x3f, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0x0, 0x0, 0x0}, 0xfc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000005500e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301007f00000100000000000000000000000008"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000340)="00e35f", 0x3}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="189bcd6c95a5d734d8da2ceaff7c284bb8210e00", @ANYRES32, @ANYBLOB="0000000006000000b7080000000000007b8af8ff00000000b7080000540d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018350000020000000000000000000000181a0000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="000000000000000085100000f9ffffff"], &(0x7f0000000b40)='GPL\x00', 0xc3, 0x11, &(0x7f0000000b80)=""/17, 0x40f00, 0x4, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x8, 0x0, 0x10}, 0x10, 0x2111f0, 0xffffffffffffffff, 0x6, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x4, 0x4, 0xf, 0x5}, {0x2, 0x5, 0xb, 0x5}, {0x0, 0x5, 0x1, 0x9}, {0x0, 0x4, 0xa, 0x9}, {0x3, 0x3, 0x8, 0xe8e8a2b927ddbdcf}, {0x2, 0x3, 0x9, 0x5}], 0x10, 0x5, @void, @value}, 0x94) r9 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000201700"/23, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.935194096s ago: executing program 3 (id=1485): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) unshare(0x6a040000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 6.543872222s ago: executing program 3 (id=1489): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x0, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xd}]}, {0x0, [0x0, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 6.456080424s ago: executing program 3 (id=1491): socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00"], 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x0) 6.186139719s ago: executing program 5 (id=1495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000080) 6.089567273s ago: executing program 1 (id=1496): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mouse(0x0, 0x10, 0x10000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000140)={0x5000, 0x8000}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e7f00000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsmount(r0, 0x0, 0x71) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7", 0x8f, 0x0, 0x0, 0x0) 5.948648786s ago: executing program 5 (id=1498): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) unshare(0x62040200) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 4.970659276s ago: executing program 1 (id=1500): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.949965604s ago: executing program 3 (id=1501): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0xa, 0x2) sendto$inet(r3, 0x0, 0x0, 0x200087f9, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x48895) r4 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x3, 0x12}, @ssrr={0x89, 0x3, 0x67}]}}, {0x4e22, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x0, @void}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6}]}) 4.212813275s ago: executing program 4 (id=1505): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x8000000001ba81, 0xfffffd1a) unshare(0x20000400) writev(r0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 2.980720539s ago: executing program 4 (id=1508): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4090, 0xffa}], 0x1}, 0xacd2}], 0x1, 0x10000, 0x0) 2.556583387s ago: executing program 3 (id=1511): socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00"], 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x0) 2.510102398s ago: executing program 0 (id=1512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x60, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x13, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200}, @sack={0x5, 0x2}, @fastopen={0x22, 0xd, "54df02007ee6577180bb9e"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x2}, @exp_fastopen={0xfe, 0x4}, @generic={0x4, 0xe, "913818b94dcb95a3b866b6d8"}]}}}}}}}, 0x0) 2.462458491s ago: executing program 5 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) 2.431232686s ago: executing program 0 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 2.350934405s ago: executing program 0 (id=1515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xfffffffffffffe65, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.326131094s ago: executing program 5 (id=1516): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4888, r2, 0x36}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2.22712633s ago: executing program 5 (id=1517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0xd}, @op={0x18}], 0x30, 0x8c4}, 0x4000010) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x3}, 0x38, 0x0) 2.160449493s ago: executing program 0 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.97228268s ago: executing program 4 (id=1519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_emit_ethernet(0x6af, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x6a1, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.222111511s ago: executing program 5 (id=1520): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xc3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.221784878s ago: executing program 4 (id=1521): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x78) 1.189271201s ago: executing program 1 (id=1522): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) 1.163518622s ago: executing program 0 (id=1523): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f0000000840)="31190eb2c096cd42", 0x8}], 0x2}, 0x80) 988.600802ms ago: executing program 4 (id=1524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) 975.501581ms ago: executing program 4 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703300001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000020000000800010003000000"], 0x1c}}, 0x4000880) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000003004d564b0000000007"]) 876.663172ms ago: executing program 0 (id=1526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) 0s ago: executing program 1 (id=1527): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4888, r2, 0x36}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) kernel console output (not intermixed with test programs): _1 [ 66.584741][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.594609][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.605050][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.615680][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.658030][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.667712][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.678487][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687269][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712638][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.720482][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.722201][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.740809][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.746104][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.750105][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.770787][ T5831] veth0_macvtap: entered promiscuous mode [ 66.796990][ T5831] veth1_macvtap: entered promiscuous mode [ 66.848226][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.871860][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.883682][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.894445][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.905004][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.927687][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.937812][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.948290][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.959352][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.986263][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.998038][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.008441][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.019229][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.029129][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.039851][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.050070][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.059329][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.060738][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.089326][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.118972][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.127732][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.137940][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.148653][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.168888][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.204107][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.465308][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.505508][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.539692][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.547687][ T5829] Bluetooth: hci2: command tx timeout [ 67.553712][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.606015][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.623823][ T5871] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.631776][ T5829] Bluetooth: hci0: command tx timeout [ 67.651797][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.703472][ T5829] Bluetooth: hci4: command tx timeout [ 67.705490][ T5140] Bluetooth: hci3: command tx timeout [ 67.782575][ T5140] Bluetooth: hci1: command tx timeout [ 67.811344][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.884379][ T5871] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.915525][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.935816][ T5871] usb 3-1: config 0 descriptor?? [ 69.006785][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.019650][ T5871] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 69.054735][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 69.262945][ T5871] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 69.462719][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.474938][ T5871] usb 3-1: USB disconnect, device number 2 [ 70.033057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 70.042764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 70.136325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.303751][ T5140] Bluetooth: hci2: command tx timeout [ 70.309200][ T5140] Bluetooth: hci0: command tx timeout [ 70.312508][ T5829] Bluetooth: hci4: command tx timeout [ 70.314641][ T5140] Bluetooth: hci3: command tx timeout [ 70.320012][ T5827] Bluetooth: hci1: command tx timeout [ 70.433083][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 70.458776][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.471798][ T5917] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 70.491051][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.519150][ T5917] usb 5-1: config 0 descriptor?? [ 70.968862][ T5917] pantherlord 0003:0E8F:0003.0002: hidraw0: USB HID v0.03 Device [HID 0e8f:0003] on usb-dummy_hcd.4-1/input0 [ 71.006421][ T5917] pantherlord 0003:0E8F:0003.0002: no output reports found [ 71.167018][ T5917] usb 5-1: USB disconnect, device number 2 [ 71.549257][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.559075][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.593939][ T5967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.677462][ T29] audit: type=1800 audit(1740109985.275:2): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.23" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 71.876311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.973014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.114144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.256998][ T5981] mmap: syz.0.28 (5981) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.310872][ T5981] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.404124][ T5985] Illegal XDP return value 4294967283 on prog (id 6) dev N/A, expect packet loss! [ 73.002646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.082626][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.312672][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 74.323378][ T5869] usb 5-1: config 2 has an invalid interface number: 216 but max is 0 [ 74.340772][ T5869] usb 5-1: config 2 has no interface number 0 [ 74.370755][ T5869] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=de.7b [ 74.548590][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.595275][ T5869] gspca_main: spca501-2.14.0 probing 040a:0002 [ 74.808607][ T5869] gspca_spca501: reg write: error -71 [ 74.814120][ T5869] spca501 5-1:2.216: Reg write failed for 0x00,0xaa,0x00 [ 74.825636][ T5869] spca501 5-1:2.216: probe with driver spca501 failed with error -22 [ 74.847273][ T5869] usb 5-1: USB disconnect, device number 3 [ 75.246265][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.311832][ T29] audit: type=1326 audit(1740109988.905:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x7ffc0000 [ 75.425742][ T29] audit: type=1326 audit(1740109988.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x7ffc0000 [ 75.580377][ T29] audit: type=1326 audit(1740109988.945:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f69a8f8d0a9 code=0x7ffc0000 [ 75.624475][ T29] audit: type=1326 audit(1740109988.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x7ffc0000 [ 75.646260][ T29] audit: type=1326 audit(1740109988.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x7ffc0000 [ 75.720140][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 75.890250][ T5958] Set syz1 is full, maxelem 65536 reached [ 75.915338][ T6054] syz.0.57: attempt to access beyond end of device [ 75.915338][ T6054] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 75.959074][ T6054] syz.0.57: attempt to access beyond end of device [ 75.959074][ T6054] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 76.010009][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.020217][ T6054] syz.0.57: attempt to access beyond end of device [ 76.020217][ T6054] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 76.039721][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.050248][ T6054] syz.0.57: attempt to access beyond end of device [ 76.050248][ T6054] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 76.063111][ T6054] syz.0.57: attempt to access beyond end of device [ 76.063111][ T6054] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 76.076258][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.086206][ T6054] syz.0.57: attempt to access beyond end of device [ 76.086206][ T6054] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 76.099581][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.252591][ T6054] syz.0.57: attempt to access beyond end of device [ 76.252591][ T6054] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 76.307723][ T6054] syz.0.57: attempt to access beyond end of device [ 76.307723][ T6054] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 76.327922][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.337814][ T6054] syz.0.57: attempt to access beyond end of device [ 76.337814][ T6054] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 76.352179][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.407879][ T6054] syz.0.57: attempt to access beyond end of device [ 76.407879][ T6054] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 76.434271][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.452832][ T6054] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 76.468078][ T6054] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 76.622681][ T5868] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.688608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.796140][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 76.825921][ T976] cfg80211: failed to load regulatory.db [ 76.862928][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.905176][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.957440][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.968092][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.090879][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.101145][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.603432][ T6080] netlink: set zone limit has 8 unknown bytes [ 77.612738][ T6080] process 'syz.1.64' launched '/dev/fd/8' with NULL argv: empty string added [ 78.567561][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 78.622681][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.842288][ T5871] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 78.922196][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.108463][ T5871] usb 3-1: config 0 has no interface number 0 [ 79.243505][ T5871] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 79.488185][ T5871] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 79.627426][ T5871] usb 3-1: config 0 interface 255 has no altsetting 0 [ 79.683254][ T5871] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 79.689871][ T5868] usb 4-1: usb_control_msg returned -71 [ 79.698708][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 79.741745][ T5868] usb 4-1: USB disconnect, device number 2 [ 79.751581][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.868248][ T5871] usb 3-1: config 0 descriptor?? [ 79.934277][ T5871] usb 3-1: selecting invalid altsetting 0 [ 80.067807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.076779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.722591][ T5871] usb 3-1: USB disconnect, device number 3 [ 81.007244][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.577644][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.772498][ T5868] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.800456][ T5868] usb 3-1: device descriptor read/64, error -71 [ 84.412516][ T5868] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.932613][ T5868] usb 3-1: device descriptor read/64, error -71 [ 85.713868][ T5868] usb usb3-port1: attempt power cycle [ 86.272549][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.422605][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.444846][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 86.456478][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.510832][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.570524][ T5871] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 86.583398][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 86.612449][ T5917] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 86.628521][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.650169][ T5917] usb 5-1: config 0 has no interface number 0 [ 86.692941][ T5871] usb 4-1: Product: syz [ 86.713658][ T5917] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.743816][ T5871] usb 4-1: Manufacturer: syz [ 86.771190][ T5871] usb 4-1: SerialNumber: syz [ 86.792106][ T5917] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.830264][ T5871] usb 4-1: config 0 descriptor?? [ 86.880535][ T5917] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 86.962662][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 87.223592][ T5917] usb 5-1: Product: syz [ 87.227815][ T5917] usb 5-1: SerialNumber: syz [ 87.240642][ T6162] usb 4-1: USB disconnect, device number 3 [ 87.249935][ T5917] usb 5-1: config 0 descriptor?? [ 87.252579][ T5868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.284639][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 87.293652][ T5868] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.303164][ T5868] usb 3-1: config 179 has no interface number 0 [ 87.309508][ T5868] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.361003][ T5868] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 88.287492][ T5917] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 88.304050][ T5917] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6 [ 88.342118][ T5868] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.353348][ T5868] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 88.365506][ T5868] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.379010][ T5868] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 88.388105][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.574525][ T6220] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 88.650706][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 89.034630][ T6243] Zero length message leads to an empty skb [ 89.043305][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.076951][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.307056][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 89.307062][ T5917] usb 3-1: USB disconnect, device number 6 [ 89.322452][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 89.342726][ T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.502551][ T6162] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 89.521024][ T25] usb 5-1: USB disconnect, device number 4 [ 89.547775][ T25] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 89.748003][ T6162] usb 4-1: config 1 has an invalid interface number: 115 but max is 0 [ 89.794948][ T6162] usb 4-1: config 1 has no interface number 0 [ 89.892639][ T6162] usb 4-1: config 1 interface 115 has no altsetting 0 [ 90.022510][ T6162] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=90.56 [ 90.140909][ T6162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.258253][ T6162] usb 4-1: Product: syz [ 90.268973][ T6162] usb 4-1: Manufacturer: syz [ 90.302713][ T6162] usb 4-1: SerialNumber: syz [ 90.331910][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 90.339843][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 90.371139][ T976] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.385933][ T976] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 90.395702][ T976] usb 1-1: Product: syz [ 90.399887][ T976] usb 1-1: Manufacturer: syz [ 90.404614][ T976] usb 1-1: SerialNumber: syz [ 90.412080][ T976] usb 1-1: config 0 descriptor?? [ 90.419156][ T6241] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 90.557271][ T6162] ems_usb 4-1:1.115 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 90.583918][ T6162] ems_usb 4-1:1.115: probe with driver ems_usb failed with error -22 [ 90.613642][ T6162] usb 4-1: USB disconnect, device number 4 [ 90.651526][ T976] usb 1-1: USB disconnect, device number 2 [ 92.652465][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.154242][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 93.199107][ T6299] bond1: entered allmulticast mode [ 93.214760][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 93.225819][ T5871] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.245669][ T5871] usb 4-1: config 179 has no interface number 0 [ 93.251957][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.273305][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.273597][ T6299] bond1 (unregistering): Released all slaves [ 93.285732][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.322607][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.432972][ T6301] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 93.440690][ T5871] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.454774][ T6301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.559454][ T5871] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 93.643413][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.949908][ T6293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.333099][ T6162] usb 4-1: USB disconnect, device number 5 [ 95.333111][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.347262][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 96.982595][ T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.060810][ T6345] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 97.096042][ T6345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.093206][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 98.099475][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.505264][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.515263][ T976] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 98.524363][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.562718][ T976] usb 1-1: config 0 descriptor?? [ 100.899945][ T6374] ubi31: attaching mtd0 [ 101.596452][ T976] usbhid 1-1:0.0: can't add hid device: -71 [ 101.604500][ T976] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.662661][ T6374] ubi31: scanning is finished [ 101.724239][ T6374] ubi31: empty MTD device detected [ 101.743626][ T976] usb 1-1: USB disconnect, device number 3 [ 102.333381][ T6374] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 102.360252][ T6374] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 102.512540][ T6374] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 102.539465][ T6374] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 102.547278][ T6374] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 103.289045][ T6374] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 103.335695][ T6374] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3238314960 [ 103.349771][ T6374] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 103.362497][ T6162] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.371087][ T6387] ubi31: background thread "ubi_bgt31d" started, PID 6387 [ 103.542610][ T6162] usb 4-1: Using ep0 maxpacket: 16 [ 103.906451][ T6162] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.927781][ T6162] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.972115][ T6162] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.001654][ T6162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.025136][ T6162] usb 4-1: config 0 descriptor?? [ 104.622995][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.813362][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 104.843387][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.901075][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.912950][ T5917] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 104.923053][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.942306][ T5917] usb 2-1: config 0 descriptor?? [ 105.517453][ T6162] usb 4-1: USB disconnect, device number 6 [ 105.612281][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 105.626326][ T6419] netlink: 'syz.0.174': attribute type 12 has an invalid length. [ 106.263646][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 106.269694][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 106.287166][ T5917] usb 2-1: USB disconnect, device number 2 [ 106.739335][ T6425] netlink: set zone limit has 8 unknown bytes [ 107.803995][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.181'. [ 108.013302][ T6451] syz.3.184 uses obsolete (PF_INET,SOCK_PACKET) [ 109.532565][ T6162] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.010450][ T6492] netlink: set zone limit has 8 unknown bytes [ 111.572473][ T6162] usb 3-1: Using ep0 maxpacket: 16 [ 111.591384][ T6162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.632534][ T6162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.642357][ T6162] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 111.690823][ T6162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.732792][ T6162] usb 3-1: config 0 descriptor?? [ 112.952495][ T6162] usbhid 3-1:0.0: can't add hid device: -71 [ 112.959204][ T6162] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 113.001289][ T6162] usb 3-1: USB disconnect, device number 7 [ 114.027489][ T6552] netlink: set zone limit has 8 unknown bytes [ 114.827899][ T6557] vlan0: entered promiscuous mode [ 114.943139][ T6557] team0: Port device vlan0 added [ 115.141923][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 116.361853][ T6557] team0 (unregistering): Port device team_slave_0 removed [ 116.413312][ T6557] team0 (unregistering): Port device team_slave_1 removed [ 116.439730][ T6557] team0 (unregistering): Port device vlan0 removed [ 117.675645][ T6557] syz.1.210 (6557) used greatest stack depth: 18512 bytes left [ 117.741038][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 117.771675][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 117.804038][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.222'. [ 118.053945][ T6608] bridge0: port 3(gretap0) entered blocking state [ 118.061494][ T6608] bridge0: port 3(gretap0) entered disabled state [ 118.069526][ T6608] gretap0: entered allmulticast mode [ 118.080910][ T6608] gretap0: entered promiscuous mode [ 118.088714][ T6608] bridge0: port 3(gretap0) entered blocking state [ 118.095426][ T6608] bridge0: port 3(gretap0) entered forwarding state [ 118.105964][ T6610] gretap0: left allmulticast mode [ 118.111071][ T6610] gretap0: left promiscuous mode [ 118.116730][ T6610] bridge0: port 3(gretap0) entered disabled state [ 118.403485][ T6600] nbd0: detected capacity change from 0 to 256 [ 118.627244][ T5824] block nbd0: Receive control failed (result -104) [ 119.132709][ T976] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.272505][ T976] usb 3-1: device descriptor read/64, error -71 [ 119.523426][ T976] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.682537][ T976] usb 3-1: device descriptor read/64, error -71 [ 119.793299][ T976] usb usb3-port1: attempt power cycle [ 120.252543][ T976] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.274574][ T976] usb 3-1: device descriptor read/8, error -71 [ 120.583153][ T976] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 121.037234][ T976] usb 3-1: device descriptor read/8, error -71 [ 121.162900][ T976] usb usb3-port1: unable to enumerate USB device [ 121.176358][ T6658] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 121.279998][ T6664] bridge0: port 3(gretap0) entered blocking state [ 121.286841][ T6664] bridge0: port 3(gretap0) entered disabled state [ 121.294024][ T6664] gretap0: entered allmulticast mode [ 121.304452][ T6664] gretap0: entered promiscuous mode [ 121.312501][ T6664] bridge0: port 3(gretap0) entered blocking state [ 121.318994][ T6664] bridge0: port 3(gretap0) entered forwarding state [ 121.341070][ T6664] gretap0: left allmulticast mode [ 121.346307][ T6664] gretap0: left promiscuous mode [ 121.352012][ T6664] bridge0: port 3(gretap0) entered disabled state [ 122.071739][ T6658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.422785][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.592726][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 122.604685][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.624688][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 122.643452][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.655287][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.670965][ T9] usb 5-1: config 0 descriptor?? [ 123.416332][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 123.692091][ T6686] syzkaller1: entered promiscuous mode [ 123.697713][ T6686] syzkaller1: entered allmulticast mode [ 125.262874][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.313046][ T46] usb 5-1: USB disconnect, device number 5 [ 125.453854][ T9] usb 1-1: device descriptor read/64, error -71 [ 126.136876][ T6714] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 126.167226][ T6714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.254410][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.402739][ T9] usb 1-1: device descriptor read/64, error -71 [ 126.548608][ T9] usb usb1-port1: attempt power cycle [ 126.661388][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 126.697891][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 126.729073][ T6733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.259'. [ 126.862839][ T6733] nbd1: detected capacity change from 0 to 256 [ 126.889085][ T5824] block nbd1: Receive control failed (result -104) [ 126.923039][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.954802][ T9] usb 1-1: device descriptor read/8, error -71 [ 127.192912][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.196796][ T9] usb 1-1: device not accepting address 7, error -71 [ 128.232755][ T9] usb usb1-port1: unable to enumerate USB device [ 128.306698][ T6759] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 128.314675][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.813953][ T6776] Bluetooth: MGMT ver 1.23 [ 131.178117][ T5824] Bluetooth: hci0: command tx timeout [ 131.432782][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'. [ 131.725495][ T6815] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 131.733275][ T6815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.986049][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.992437][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.466903][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 135.220989][ T6854] vlan0: entered promiscuous mode [ 135.231442][ T6854] team0: Port device vlan0 added [ 135.255286][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 135.675993][ T6864] netlink: set zone limit has 8 unknown bytes [ 137.178936][ T6880] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 137.186718][ T6880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.095161][ T6887] vlan0: entered promiscuous mode [ 138.109152][ T6887] team0: Port device vlan0 added [ 138.117206][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 141.327432][ T6926] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 141.335159][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.358607][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.585597][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.778990][ T46] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 141.906306][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.957952][ T46] usb 4-1: config 0 descriptor?? [ 143.204026][ T46] usb 4-1: USB disconnect, device number 7 [ 143.708166][ T6670] udevd[6670]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.995311][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 30 seconds [ 149.506945][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 149.516904][ T7009] netlink: 'syz.0.347': attribute type 12 has an invalid length. [ 157.483329][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 30 seconds [ 157.918575][ T7099] netlink: 'syz.2.374': attribute type 12 has an invalid length. [ 158.650952][ T7101] netlink: 'syz.0.375': attribute type 3 has an invalid length. [ 158.664846][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 158.673848][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 161.859179][ T7130] netlink: 'syz.3.385': attribute type 12 has an invalid length. [ 162.936860][ T7138] netlink: 'syz.3.387': attribute type 3 has an invalid length. [ 162.944739][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 162.953713][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 163.751470][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 164.629485][ T7170] netlink: 'syz.0.400': attribute type 12 has an invalid length. [ 165.378107][ T7172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.628303][ T7179] netlink: 'syz.0.401': attribute type 3 has an invalid length. [ 165.644412][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'. [ 165.653365][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 166.816780][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 167.153190][ T7196] netlink: 184 bytes leftover after parsing attributes in process `syz.2.407'. [ 167.862629][ T6937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.026686][ T46] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 168.052542][ T6937] usb 5-1: Using ep0 maxpacket: 8 [ 168.063438][ T6937] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.124800][ T6937] usb 5-1: config 179 has no interface number 0 [ 168.153163][ T6937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.170207][ T6937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.181869][ T46] usb 2-1: device descriptor read/64, error -71 [ 168.219733][ T6937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.260408][ T6937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.303551][ T6937] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.364533][ T6937] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.382773][ T6937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.417630][ T7206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.452539][ T46] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 168.622618][ T46] usb 2-1: device descriptor read/64, error -71 [ 168.678510][ T7219] ubi: mtd0 is already attached to ubi31 [ 168.898717][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.912057][ T46] usb usb2-port1: attempt power cycle [ 169.322578][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.597237][ T9] usb 5-1: USB disconnect, device number 6 [ 169.597312][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.612607][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 169.702521][ T46] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 169.709569][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 169.757003][ T46] usb 2-1: device descriptor read/8, error -71 [ 170.015534][ T46] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 170.053130][ T46] usb 2-1: device descriptor read/8, error -71 [ 170.172817][ T46] usb usb2-port1: unable to enumerate USB device [ 170.734131][ T7252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.367048][ T7264] netlink: 'syz.1.429': attribute type 12 has an invalid length. [ 173.972640][ T6937] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 174.128159][ T6937] usb 2-1: device descriptor read/64, error -71 [ 174.504605][ T6937] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 174.812835][ T6937] usb 2-1: device descriptor read/64, error -71 [ 174.876335][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.442'. [ 174.933570][ T6937] usb usb2-port1: attempt power cycle [ 175.693356][ T7308] syzkaller1: entered promiscuous mode [ 175.699022][ T7308] syzkaller1: entered allmulticast mode [ 175.802115][ T7315] netlink: 104 bytes leftover after parsing attributes in process `syz.4.450'. [ 175.852502][ T6937] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 175.873214][ T6937] usb 2-1: device descriptor read/8, error -71 [ 175.892516][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.052523][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 176.064451][ T46] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 176.072773][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.096598][ T46] usb 3-1: config 0 has no interface number 0 [ 176.102944][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 176.111847][ T46] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 176.132548][ T6937] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 176.132659][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 176.149186][ T46] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.150396][ T7321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.453'. [ 176.174449][ T6937] usb 2-1: device descriptor read/8, error -71 [ 176.183917][ T46] usb 3-1: config 0 interface 41 has no altsetting 0 [ 176.200606][ T46] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 176.209858][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.222489][ T46] usb 3-1: Product: syz [ 176.226751][ T46] usb 3-1: Manufacturer: syz [ 176.231421][ T46] usb 3-1: SerialNumber: syz [ 176.239412][ T46] usb 3-1: config 0 descriptor?? [ 176.246865][ T46] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 176.253169][ T7321] nbd2: detected capacity change from 0 to 256 [ 176.278432][ T5824] block nbd2: Receive control failed (result -104) [ 176.292946][ T6937] usb usb2-port1: unable to enumerate USB device [ 177.250444][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 177.830018][ T7344] syzkaller1: entered promiscuous mode [ 177.847996][ T7344] syzkaller1: entered allmulticast mode [ 177.911962][ T7349] team0: No ports can be present during mode change [ 177.931103][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 178.048377][ T7349] team0 (unregistering): Port device team_slave_0 removed [ 178.058705][ T7349] team0 (unregistering): Port device team_slave_1 removed [ 178.068171][ T7349] team0 (unregistering): Port device vlan0 removed [ 179.303685][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 60 seconds [ 179.619127][ T6937] usb 3-1: USB disconnect, device number 12 [ 179.714326][ T5871] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 179.872576][ T5871] usb 2-1: device descriptor read/64, error -71 [ 180.132569][ T5871] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 180.385310][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.212599][ T5871] usb 2-1: device descriptor read/64, error -71 [ 181.439311][ T5871] usb usb2-port1: attempt power cycle [ 181.802596][ T5871] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 181.849160][ T5871] usb 2-1: device descriptor read/8, error -71 [ 182.032538][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 182.039281][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.049945][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.066541][ T46] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 182.075925][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.084303][ T46] usb 4-1: Product: syz [ 182.088639][ T46] usb 4-1: Manufacturer: syz [ 182.093044][ T5871] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 182.093569][ T46] usb 4-1: SerialNumber: syz [ 182.122200][ T5871] usb 2-1: device descriptor read/8, error -71 [ 182.130080][ T46] usb 4-1: config 0 descriptor?? [ 182.152680][ T5917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.243218][ T5871] usb usb2-port1: unable to enumerate USB device [ 182.452556][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 182.459319][ T5917] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 182.475414][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.515056][ T5917] usb 5-1: config 0 has no interface number 0 [ 182.530186][ T5917] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.540387][ T5917] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.556949][ T5917] usb 5-1: config 0 interface 41 has no altsetting 0 [ 182.571849][ T5917] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 182.600463][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.612054][ T5917] usb 5-1: Product: syz [ 182.619247][ T5917] usb 5-1: Manufacturer: syz [ 182.627268][ T5917] usb 5-1: SerialNumber: syz [ 182.635361][ T5917] usb 5-1: config 0 descriptor?? [ 182.641082][ T7403] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 182.659170][ T5917] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 183.633456][ T7429] openvswitch: netlink: nsh attr 0 has unexpected len 96 expected 0 [ 183.641502][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.765001][ T5872] usb 4-1: USB disconnect, device number 8 [ 184.953802][ T5917] usb 5-1: USB disconnect, device number 7 [ 185.038188][ T7443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.461355][ T6937] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 186.274783][ T6937] usb 3-1: config index 0 descriptor too short (expected 65535, got 27) [ 186.306217][ T6937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.351418][ T6937] usb 3-1: config 0 has no interfaces? [ 186.376423][ T6937] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.408995][ T6937] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.453500][ T6937] usb 3-1: Product: syz [ 186.463574][ T6937] usb 3-1: Manufacturer: syz [ 186.492552][ T6937] usb 3-1: SerialNumber: syz [ 186.543729][ T6937] usb 3-1: config 0 descriptor?? [ 186.720867][ T7465] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 186.834449][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 186.902818][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 186.912760][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 186.920343][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 186.926805][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 186.935743][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 187.459471][ T5872] usb 3-1: USB disconnect, device number 13 [ 188.033395][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 60 seconds [ 188.773145][ T7489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.152813][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.162622][ T5917] usb 3-1: device descriptor read/64, error -71 [ 191.222946][ T7507] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 191.412516][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 191.553399][ T5917] usb 3-1: device descriptor read/64, error -71 [ 191.672890][ T5917] usb usb3-port1: attempt power cycle [ 191.682528][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 191.846536][ T9] usb 4-1: config index 0 descriptor too short (expected 65535, got 27) [ 191.863371][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.912551][ T9] usb 4-1: config 0 has no interfaces? [ 191.922505][ T6937] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.933057][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 191.942376][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 191.951082][ T9] usb 4-1: Product: syz [ 191.956955][ T9] usb 4-1: Manufacturer: syz [ 191.961561][ T9] usb 4-1: SerialNumber: syz [ 191.968921][ T9] usb 4-1: config 0 descriptor?? [ 192.032876][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.124924][ T5917] usb 3-1: device descriptor read/8, error -71 [ 192.182755][ T6937] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 192.202117][ T6937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.207188][ T9] usb 4-1: USB disconnect, device number 9 [ 192.250329][ T6937] usb 5-1: config 0 descriptor?? [ 192.259742][ T6937] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 192.372726][ T5917] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 192.433296][ T5917] usb 3-1: device descriptor read/8, error -71 [ 192.542783][ T5917] usb usb3-port1: unable to enumerate USB device [ 193.018300][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 193.672984][ T6937] usb 5-1: USB disconnect, device number 8 [ 193.723350][ T7557] 9pnet_fd: Insufficient options for proto=fd [ 194.229001][ T7561] netlink: 104 bytes leftover after parsing attributes in process `syz.2.536'. [ 194.431118][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.437515][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.572513][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.733054][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 195.749573][ T5872] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 195.772321][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.787067][ T7585] team0: No ports can be present during mode change [ 195.797999][ T7585] vlan0: entered promiscuous mode [ 195.806939][ T7585] team0: Port device vlan0 added [ 195.813985][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 195.915208][ T7585] team0 (unregistering): Port device team_slave_0 removed [ 195.923195][ T5872] usb 1-1: config 0 has no interface number 0 [ 195.929323][ T5872] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 195.941503][ T7585] team0 (unregistering): Port device team_slave_1 removed [ 195.952002][ T7585] team0 (unregistering): Port device vlan0 removed [ 195.964483][ T5917] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.977802][ T5872] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.992670][ T5872] usb 1-1: config 0 interface 41 has no altsetting 0 [ 196.001308][ T5872] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 196.010572][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.020395][ T5872] usb 1-1: Product: syz [ 196.032673][ T5872] usb 1-1: Manufacturer: syz [ 196.037292][ T5872] usb 1-1: SerialNumber: syz [ 196.060733][ T5872] usb 1-1: config 0 descriptor?? [ 196.066638][ T7566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.083346][ T5872] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 196.112331][ T7590] 9pnet_fd: Insufficient options for proto=fd [ 196.112699][ T5917] usb 5-1: device descriptor read/64, error -71 [ 196.532657][ T5871] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.540482][ T5917] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.684040][ T5917] usb 5-1: device descriptor read/64, error -71 [ 196.702682][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 196.716875][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.727294][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.739111][ T5871] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.748609][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.757167][ T5871] usb 4-1: Product: syz [ 196.761505][ T5871] usb 4-1: Manufacturer: syz [ 196.766212][ T5871] usb 4-1: SerialNumber: syz [ 196.773205][ T5871] usb 4-1: config 0 descriptor?? [ 196.802921][ T5917] usb usb5-port1: attempt power cycle [ 197.080505][ T5871] usb 4-1: USB disconnect, device number 10 [ 197.130896][ T7608] ubi: mtd0 is already attached to ubi31 [ 197.154414][ T5917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.206507][ T5917] usb 5-1: device descriptor read/8, error -71 [ 197.590424][ T5917] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.764585][ T5917] usb 5-1: device descriptor read/8, error -71 [ 197.809509][ T5871] usb 1-1: USB disconnect, device number 8 [ 197.872904][ T5917] usb usb5-port1: unable to enumerate USB device [ 198.010464][ T7618] netlink: 104 bytes leftover after parsing attributes in process `syz.0.554'. [ 198.161604][ T7623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.058765][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 199.112722][ T7637] 9pnet_fd: Insufficient options for proto=fd [ 199.531250][ T7648] ubi: mtd0 is already attached to ubi31 [ 199.723883][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.126920][ T6937] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 200.212570][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 200.230177][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.250714][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.279485][ T25] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.290482][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.311142][ T6937] usb 3-1: no configurations [ 200.328391][ T6937] usb 3-1: can't read configurations, error -22 [ 200.345507][ T25] usb 1-1: Product: syz [ 200.349712][ T25] usb 1-1: Manufacturer: syz [ 200.365352][ T25] usb 1-1: SerialNumber: syz [ 200.381801][ T25] usb 1-1: config 0 descriptor?? [ 200.482593][ T6937] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.572502][ T5917] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 200.605549][ T25] usb 1-1: USB disconnect, device number 9 [ 200.654709][ T6937] usb 3-1: no configurations [ 200.659349][ T6937] usb 3-1: can't read configurations, error -22 [ 200.691044][ T6937] usb usb3-port1: attempt power cycle [ 200.733996][ T5917] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 200.743465][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.769522][ T5917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 200.806469][ T5917] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 200.848380][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.871314][ T5917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 200.886917][ T5917] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 200.905253][ T5917] usb 5-1: Product: syz [ 200.932531][ T5917] usb 5-1: Manufacturer: syz [ 200.937183][ T5917] usb 5-1: SerialNumber: syz [ 200.995582][ T7664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.043226][ T5917] usb 5-1: config 0 descriptor?? [ 201.063781][ T6937] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 201.099755][ T5917] ldusb 5-1:0.0: Interrupt in endpoint not found [ 201.196822][ T6937] usb 3-1: no configurations [ 201.201480][ T6937] usb 3-1: can't read configurations, error -22 [ 201.307221][ T5917] usb 5-1: USB disconnect, device number 13 [ 201.332538][ T6937] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.373584][ T6937] usb 3-1: no configurations [ 201.378212][ T6937] usb 3-1: can't read configurations, error -22 [ 201.408285][ T6937] usb usb3-port1: unable to enumerate USB device [ 201.484708][ T5871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 201.632499][ T5871] usb 1-1: device descriptor read/64, error -71 [ 201.823986][ T7673] netlink: 104 bytes leftover after parsing attributes in process `syz.3.571'. [ 202.261592][ T7684] ubi: mtd0 is already attached to ubi31 [ 202.273032][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.500976][ T5871] usb 1-1: device descriptor read/64, error -71 [ 202.764923][ T5871] usb usb1-port1: attempt power cycle [ 204.177563][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.525377][ T5871] usb 1-1: device descriptor read/8, error -71 [ 205.582498][ T976] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 205.752612][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 205.779419][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.840601][ T976] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.882182][ T976] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.897923][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.906577][ T976] usb 3-1: Product: syz [ 205.910890][ T976] usb 3-1: Manufacturer: syz [ 205.923150][ T976] usb 3-1: SerialNumber: syz [ 205.948130][ T976] usb 3-1: config 0 descriptor?? [ 206.262683][ T6937] usb 3-1: USB disconnect, device number 22 [ 206.466372][ T7717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.620805][ T10] block nbd2: Possible stuck request ffff888026007000: control (read@0,4096B). Runtime 30 seconds [ 207.113507][ T7724] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 207.141978][ T7724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.242667][ T7730] netlink: 104 bytes leftover after parsing attributes in process `syz.2.591'. [ 207.252532][ T6937] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 207.423743][ T6937] usb 1-1: no configurations [ 207.428394][ T6937] usb 1-1: can't read configurations, error -22 [ 207.703909][ T6937] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.804915][ T6162] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 207.903398][ T6937] usb 1-1: no configurations [ 208.013615][ T6162] usb 4-1: device descriptor read/64, error -71 [ 208.032939][ T6937] usb 1-1: can't read configurations, error -22 [ 208.139365][ T6937] usb usb1-port1: attempt power cycle [ 208.401345][ T7742] ubi: mtd0 is already attached to ubi31 [ 208.452696][ T6162] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.623423][ T6162] usb 4-1: device descriptor read/64, error -71 [ 208.674963][ T6937] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 208.750118][ T6162] usb usb4-port1: attempt power cycle [ 208.799110][ T6937] usb 1-1: no configurations [ 208.826683][ T6937] usb 1-1: can't read configurations, error -22 [ 209.143427][ T6937] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 209.187203][ T6937] usb 1-1: no configurations [ 209.191894][ T6937] usb 1-1: can't read configurations, error -22 [ 209.203506][ T6937] usb usb1-port1: unable to enumerate USB device [ 209.212714][ T6162] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.234207][ T6162] usb 4-1: device descriptor read/8, error -71 [ 209.993083][ T6162] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.097118][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 90 seconds [ 210.244417][ T6162] usb 4-1: device descriptor read/8, error -71 [ 210.562976][ T6162] usb usb4-port1: unable to enumerate USB device [ 210.655307][ T29] audit: type=1326 audit(1740110124.245:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7758 comm="syz.4.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14f6d8d0a9 code=0x0 [ 210.794518][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.149159][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.273360][ T7771] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 211.281044][ T7771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.136112][ T7785] netlink: 104 bytes leftover after parsing attributes in process `syz.4.608'. [ 216.899484][ T29] audit: type=1326 audit(1740110130.495:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz.0.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x0 [ 217.018010][ T5195] udevd[5195]: worker [6620] /devices/virtual/block/nbd0 is taking a long time [ 217.196017][ T5195] udevd[5195]: worker [6622] /devices/virtual/block/nbd1 is taking a long time [ 217.364837][ T7820] netlink: 'syz.1.616': attribute type 12 has an invalid length. [ 218.064028][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.124992][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 90 seconds [ 218.245804][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 218.651006][ T5872] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 218.682147][ T5872] usb 5-1: config 0 has no interface number 0 [ 218.688363][ T5872] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 218.704037][ T5872] usb 5-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 218.736502][ T5872] usb 5-1: config 0 interface 41 has no altsetting 0 [ 218.748342][ T5872] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 218.780899][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.792483][ T5871] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 218.808162][ T5872] usb 5-1: Product: syz [ 218.812357][ T5872] usb 5-1: Manufacturer: syz [ 218.817848][ T5872] usb 5-1: SerialNumber: syz [ 218.881563][ T5872] usb 5-1: config 0 descriptor?? [ 218.906698][ T7815] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.927507][ T5872] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 218.942597][ T5871] usb 1-1: device descriptor read/64, error -71 [ 220.480733][ T6162] usb 5-1: USB disconnect, device number 14 [ 220.501460][ T5871] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.703330][ T5871] usb 1-1: device descriptor read/64, error -71 [ 220.845272][ T5871] usb usb1-port1: attempt power cycle [ 221.212812][ T5871] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 221.519495][ T5871] usb 1-1: device descriptor read/8, error -71 [ 221.970354][ T29] audit: type=1326 audit(1740110135.565:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.0.631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x0 [ 222.302784][ T6162] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 222.564434][ T6162] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 222.583572][ T6162] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 222.630306][ T6162] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 222.654280][ T6162] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 222.674052][ T6162] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.683208][ T6162] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 222.692359][ T6162] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 222.709194][ T6162] usb 2-1: Product: syz [ 222.719060][ T6162] usb 2-1: Manufacturer: syz [ 222.728557][ T6162] usb 2-1: SerialNumber: syz [ 222.747429][ T6162] usb 2-1: config 0 descriptor?? [ 223.029270][ T6162] ldusb 2-1:0.0: Interrupt in endpoint not found [ 223.053512][ T6162] usb 2-1: USB disconnect, device number 15 [ 224.803866][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.637'. [ 224.815461][ T7883] netlink: 'syz.4.637': attribute type 12 has an invalid length. [ 225.842649][ T6162] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 226.150204][ T6162] usb 1-1: device descriptor read/64, error -71 [ 226.961510][ T29] audit: type=1326 audit(1740110139.965:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7898 comm="syz.3.645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d9f8d0a9 code=0x0 [ 227.162970][ T6162] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 227.332083][ T6162] usb 1-1: device descriptor read/64, error -71 [ 227.553206][ T6162] usb usb1-port1: attempt power cycle [ 227.984218][ T6162] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 228.048200][ T6162] usb 1-1: device descriptor read/8, error -71 [ 228.302499][ T6162] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 228.343964][ T6162] usb 1-1: device descriptor read/8, error -71 [ 228.462834][ T6162] usb usb1-port1: unable to enumerate USB device [ 228.527299][ T7924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.532605][ T6162] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 230.124167][ T6162] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 230.132376][ T6162] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 230.169225][ T6162] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 230.192593][ T6162] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 230.218987][ T6162] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.245280][ T6162] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 230.263583][ T6162] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 230.282481][ T6162] usb 1-1: Product: syz [ 230.286667][ T6162] usb 1-1: Manufacturer: syz [ 230.291428][ T6162] usb 1-1: SerialNumber: syz [ 230.309342][ T6162] usb 1-1: config 0 descriptor?? [ 230.821223][ T6162] ldusb 1-1:0.0: Interrupt in endpoint not found [ 230.993618][ T29] audit: type=1326 audit(1740110144.585:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.1.657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f071e78d0a9 code=0x0 [ 231.077703][ T6162] usb 1-1: USB disconnect, device number 26 [ 233.648188][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 233.802516][ T46] usb 1-1: device descriptor read/64, error -71 [ 233.964468][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.983040][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.992018][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.001413][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.022019][ T5140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.029541][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.123364][ T46] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 234.312529][ T46] usb 1-1: device descriptor read/64, error -71 [ 234.426494][ T46] usb usb1-port1: attempt power cycle [ 234.483700][ T7967] chnl_net:caif_netlink_parms(): no params data found [ 234.724334][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.746576][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.773317][ T46] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 234.798170][ T7967] bridge_slave_0: entered allmulticast mode [ 234.817818][ T7967] bridge_slave_0: entered promiscuous mode [ 234.833150][ T46] usb 1-1: device descriptor read/8, error -71 [ 234.858180][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.873074][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.880367][ T7967] bridge_slave_1: entered allmulticast mode [ 234.906988][ T7967] bridge_slave_1: entered promiscuous mode [ 235.025889][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.064321][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.092605][ T46] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 235.133767][ T46] usb 1-1: device descriptor read/8, error -71 [ 235.184633][ T7967] team0: Port device team_slave_0 added [ 235.314314][ T7967] team0: Port device team_slave_1 added [ 235.318958][ T46] usb usb1-port1: unable to enumerate USB device [ 235.672846][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.745440][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.102581][ T5140] Bluetooth: hci5: command tx timeout [ 236.112694][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.139597][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.162663][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.199596][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.666866][ T10] block nbd2: Possible stuck request ffff888026007000: control (read@0,4096B). Runtime 60 seconds [ 236.717889][ T7967] hsr_slave_0: entered promiscuous mode [ 236.725468][ T7967] hsr_slave_1: entered promiscuous mode [ 236.731892][ T7967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.739929][ T7967] Cannot create hsr debugfs directory [ 237.191471][ T29] audit: type=1326 audit(1740110150.785:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7987 comm="syz.0.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x0 [ 237.919100][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 237.932578][ T46] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 238.159420][ T46] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 238.184572][ T46] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 238.195365][ T5140] Bluetooth: hci5: command tx timeout [ 238.260616][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 238.311123][ T46] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 238.351156][ T7999] bridge_slave_0: left allmulticast mode [ 238.357246][ T7999] bridge_slave_0: left promiscuous mode [ 238.358382][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.370615][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.735349][ T46] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 238.744663][ T46] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 238.768194][ T46] usb 2-1: Product: syz [ 238.772826][ T46] usb 2-1: Manufacturer: syz [ 238.777512][ T46] usb 2-1: SerialNumber: syz [ 238.808766][ T46] usb 2-1: config 0 descriptor?? [ 238.809780][ T7999] bridge_slave_1: left allmulticast mode [ 238.854017][ T7999] bridge_slave_1: left promiscuous mode [ 238.905970][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.060687][ T7999] bond0: (slave bond_slave_0): Releasing backup interface [ 239.157421][ T46] ldusb 2-1:0.0: Interrupt in endpoint not found [ 239.262110][ T46] usb 2-1: USB disconnect, device number 16 [ 239.282944][ T7999] bond0: (slave bond_slave_1): Releasing backup interface [ 239.330055][ T7999] team0: Port device team_slave_0 removed [ 239.552546][ T7999] team0: Port device team_slave_1 removed [ 239.571906][ T7999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.580162][ T7999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.644155][ T7999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.652309][ T7999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.851076][ T7999] team0: Port device vlan0 removed [ 240.273622][ T5140] Bluetooth: hci5: command tx timeout [ 240.663963][ T29] audit: type=1326 audit(1740110154.235:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8021 comm="syz.3.681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d9f8d0a9 code=0x0 [ 241.275064][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 120 seconds [ 241.288183][ T7967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.553579][ T7967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.613560][ T7967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.647705][ T7967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.265616][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.342595][ T5140] Bluetooth: hci5: command tx timeout [ 242.449231][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.508789][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.515914][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.535037][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.542115][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.590673][ T7967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.894235][ T5872] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 243.444888][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.467906][ T5872] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 243.480350][ T5872] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 243.514102][ T5872] usb 4-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 243.563040][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 243.595957][ T5872] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 243.626602][ T5872] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 243.656774][ T5872] usb 4-1: Product: syz [ 243.692028][ T5872] usb 4-1: Manufacturer: syz [ 243.713995][ T5872] usb 4-1: SerialNumber: syz [ 243.728034][ T5872] usb 4-1: config 0 descriptor?? [ 243.739495][ T5872] ldusb 4-1:0.0: Interrupt in endpoint not found [ 243.972588][ T46] usb 4-1: USB disconnect, device number 15 [ 244.320965][ T8069] netlink: 'syz.4.690': attribute type 12 has an invalid length. [ 245.154002][ T7967] veth0_vlan: entered promiscuous mode [ 245.197071][ T7967] veth1_vlan: entered promiscuous mode [ 245.251477][ T7967] veth0_macvtap: entered promiscuous mode [ 245.319808][ T7967] veth1_macvtap: entered promiscuous mode [ 245.361960][ T8074] netlink: set zone limit has 8 unknown bytes [ 245.374533][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.386211][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.396120][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.406627][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.416674][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.427216][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.442124][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.454063][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.669447][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.679131][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.689816][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.700160][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.714187][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.742599][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.775781][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.792559][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.828253][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.862037][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.933242][ T7967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.941992][ T7967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.991799][ T7967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.010856][ T7967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.349765][ T8097] netlink: 'syz.0.701': attribute type 12 has an invalid length. [ 247.049682][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.098177][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.183106][ T8105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.203673][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.242471][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.331638][ T2151] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 247.538278][ T2151] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 247.562509][ T2151] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 247.589470][ T2151] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 247.649130][ T2151] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.679534][ T2151] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 247.702783][ T2151] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 247.738455][ T2151] usb 1-1: Product: syz [ 247.770894][ T2151] usb 1-1: Manufacturer: syz [ 247.787698][ T2151] usb 1-1: SerialNumber: syz [ 247.801386][ T2151] usb 1-1: config 0 descriptor?? [ 247.910641][ T2151] ldusb 1-1:0.0: Interrupt in endpoint not found [ 248.221403][ T2151] usb 1-1: USB disconnect, device number 31 [ 248.558214][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 120 seconds [ 249.060375][ T8121] netlink: set zone limit has 8 unknown bytes [ 249.426670][ T8131] bridge_slave_0: left allmulticast mode [ 249.432361][ T8131] bridge_slave_0: left promiscuous mode [ 249.487071][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.541362][ T8131] bridge_slave_1: left allmulticast mode [ 249.698010][ T8131] bridge_slave_1: left promiscuous mode [ 249.747593][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.793277][ T8131] bond0: (slave bond_slave_0): Releasing backup interface [ 250.488857][ T8131] bond0: (slave bond_slave_1): Releasing backup interface [ 250.647135][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.674388][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.702059][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.713094][ T8155] 9pnet_fd: Insufficient options for proto=fd [ 250.737883][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.042816][ T5917] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 251.122695][ T6162] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 251.133651][ T29] audit: type=1326 audit(1740110164.735:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.1.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f071e78d0a9 code=0x0 [ 251.247945][ T5917] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 251.261968][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.271238][ T5917] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 251.274121][ T6162] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 251.280956][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.310802][ T5917] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 251.317374][ T6162] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 251.320540][ T5917] usb 5-1: no configuration chosen from 1 choice [ 251.349616][ T6162] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 251.377710][ T6162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.390819][ T6162] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 251.409529][ T6162] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 251.429477][ T6162] usb 6-1: Product: syz [ 251.439923][ T6162] usb 6-1: Manufacturer: syz [ 251.447890][ T6162] usb 6-1: SerialNumber: syz [ 251.466796][ T6162] usb 6-1: config 0 descriptor?? [ 251.486699][ T6162] ldusb 6-1:0.0: Interrupt in endpoint not found [ 251.697921][ T5917] usb 6-1: USB disconnect, device number 2 [ 252.333020][ T8182] netlink: 184 bytes leftover after parsing attributes in process `syz.5.731'. [ 252.449572][ T8184] 9pnet_fd: Insufficient options for proto=fd [ 253.259370][ T8188] bridge_slave_0: left allmulticast mode [ 253.271764][ T8188] bridge_slave_0: left promiscuous mode [ 253.353241][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.530700][ T8188] bridge_slave_1: left allmulticast mode [ 253.541627][ T8188] bridge_slave_1: left promiscuous mode [ 253.561487][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.573511][ T8188] bond0: (slave bond_slave_0): Releasing backup interface [ 253.697592][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.734'. [ 253.708318][ T29] audit: type=1326 audit(1740110167.315:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8192 comm="syz.5.735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915e78d0a9 code=0x0 [ 253.755720][ T8199] netlink: 'syz.1.734': attribute type 12 has an invalid length. [ 254.114924][ T8188] bond0: (slave bond_slave_1): Releasing backup interface [ 254.130013][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.136049][ T46] usb 5-1: USB disconnect, device number 15 [ 254.141683][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.154142][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.161757][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.722952][ T8217] 9pnet_fd: Insufficient options for proto=fd [ 255.101399][ T8227] netlink: 184 bytes leftover after parsing attributes in process `syz.0.745'. [ 255.867630][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.874470][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.272621][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.562207][ T8241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.596364][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.639275][ T29] audit: type=1326 audit(1740110170.235:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8237 comm="syz.0.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x0 [ 256.713020][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.755448][ T46] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 256.792195][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.846734][ T46] usb 4-1: config 0 descriptor?? [ 257.078881][ T2151] usb 4-1: USB disconnect, device number 16 [ 257.330025][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.752'. [ 257.342230][ T8250] netlink: 'syz.5.752': attribute type 12 has an invalid length. [ 257.860486][ T8257] 9pnet_fd: Insufficient options for proto=fd [ 258.228162][ T8265] bridge_slave_0: left allmulticast mode [ 258.238795][ T8265] bridge_slave_0: left promiscuous mode [ 258.248514][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.396342][ T8265] bridge_slave_1: left allmulticast mode [ 258.412569][ T8265] bridge_slave_1: left promiscuous mode [ 258.515353][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.592126][ T8273] netlink: 'syz.3.758': attribute type 12 has an invalid length. [ 258.916448][ T8265] bond0: (slave bond_slave_0): Releasing backup interface [ 259.172640][ T5917] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.193548][ T8265] bond0: (slave bond_slave_1): Releasing backup interface [ 259.227500][ T8265] team0: Port device team_slave_0 removed [ 259.242966][ T8265] team0: Port device team_slave_1 removed [ 259.253326][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.270950][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.282325][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.290715][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.342595][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 259.360006][ T5917] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 259.391803][ T5917] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 259.568160][ T5917] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 259.599781][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.847621][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.881602][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.905329][ T5917] usb 2-1: USB disconnect, device number 17 [ 259.951873][ T29] audit: type=1326 audit(1740110173.545:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915e78d0a9 code=0x0 [ 260.367551][ T8292] 9pnet_fd: Insufficient options for proto=fd [ 262.883161][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 263.301697][ T8338] fuse: Bad value for 'fd' [ 263.426916][ T29] audit: type=1326 audit(1740110177.015:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8330 comm="syz.3.781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d9f8d0a9 code=0x0 [ 263.689438][ T8353] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 263.697339][ T8353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.164429][ T8371] 9pnet_fd: Insufficient options for proto=fd [ 265.449294][ T8377] fuse: Bad value for 'fd' [ 265.931865][ T29] audit: type=1326 audit(1740110179.515:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8379 comm="syz.1.798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f071e78d0a9 code=0x0 [ 266.800831][ T10] block nbd2: Possible stuck request ffff888026007000: control (read@0,4096B). Runtime 90 seconds [ 266.968309][ T8394] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 266.976180][ T8394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.480515][ T8407] 9pnet_fd: Insufficient options for proto=fd [ 267.692985][ T8413] fuse: Bad value for 'fd' [ 269.544459][ T29] audit: type=1326 audit(1740110183.095:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8424 comm="syz.0.814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x0 [ 269.975865][ T5195] udevd[5195]: worker [6934] /devices/virtual/block/nbd2 is taking a long time [ 270.021108][ T8439] netlink: 184 bytes leftover after parsing attributes in process `syz.0.817'. [ 271.298401][ T8442] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 271.306518][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.503309][ T8453] 9pnet_fd: Insufficient options for proto=fd [ 271.738051][ T8461] netlink: 'syz.4.824': attribute type 10 has an invalid length. [ 271.779152][ T8461] veth1_macvtap: left promiscuous mode [ 271.859336][ T8464] netlink: 48 bytes leftover after parsing attributes in process `syz.5.826'. [ 271.887807][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 150 seconds [ 272.261371][ T8470] netlink: 184 bytes leftover after parsing attributes in process `syz.3.829'. [ 272.648311][ T8480] 9pnet_fd: Insufficient options for proto=fd [ 272.664689][ T8481] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 272.672535][ T8481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.424603][ T8501] netlink: 184 bytes leftover after parsing attributes in process `syz.5.842'. [ 273.622319][ T8508] 9pnet_fd: Insufficient options for proto=fd [ 273.805753][ T8512] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 273.813650][ T8512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.257150][ T8530] netlink: set zone limit has 8 unknown bytes [ 275.273126][ T8540] netlink: 184 bytes leftover after parsing attributes in process `syz.1.856'. [ 275.397485][ T8545] 9pnet_fd: Insufficient options for proto=fd [ 275.799209][ T8553] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 275.807418][ T8553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.819839][ T8552] syzkaller1: entered promiscuous mode [ 275.862713][ T8552] syzkaller1: entered allmulticast mode [ 276.862052][ T8575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.920510][ T8584] netlink: 184 bytes leftover after parsing attributes in process `syz.4.871'. [ 277.949171][ T8586] 9pnet_fd: Insufficient options for proto=fd [ 278.929234][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 150 seconds [ 279.000793][ T8617] 9pnet_fd: Insufficient options for proto=fd [ 279.116430][ T8622] netlink: 184 bytes leftover after parsing attributes in process `syz.4.886'. [ 280.174140][ T8657] 9pnet_fd: Insufficient options for proto=fd [ 280.472557][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 281.373030][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 281.379890][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.408117][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.425067][ T25] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 281.439851][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.482478][ T25] usb 1-1: Product: syz [ 281.486700][ T25] usb 1-1: Manufacturer: syz [ 281.509800][ T25] usb 1-1: SerialNumber: syz [ 281.538453][ T25] usb 1-1: config 0 descriptor?? [ 281.773742][ T25] usb 1-1: USB disconnect, device number 32 [ 281.812829][ T8695] 9pnet_fd: Insufficient options for proto=fd [ 282.194351][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 282.209354][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 282.223295][ T5917] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.282553][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 282.372863][ T5917] usb 4-1: device descriptor read/64, error -71 [ 282.447029][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 282.466494][ T25] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 282.482492][ T25] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 282.506251][ T25] usb 6-1: config 179 has no interface number 0 [ 282.521599][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 282.561533][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 282.585033][ T25] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 282.600567][ T8726] 9pnet_fd: Insufficient options for proto=fd [ 282.620203][ T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 282.636016][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.659380][ T5917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 282.667663][ T8703] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 282.833039][ T5917] usb 4-1: device descriptor read/64, error -71 [ 282.907722][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.944974][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.965979][ T25] usb 6-1: USB disconnect, device number 3 [ 282.980215][ T5917] usb usb4-port1: attempt power cycle [ 283.303448][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 283.324352][ T5917] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.353670][ T5917] usb 4-1: device descriptor read/8, error -71 [ 283.492625][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 283.518887][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.533449][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.546376][ T8755] 9pnet_fd: Insufficient options for proto=fd [ 283.546837][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 283.562158][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.576178][ T9] usb 2-1: Product: syz [ 283.581092][ T9] usb 2-1: Manufacturer: syz [ 283.588709][ T9] usb 2-1: SerialNumber: syz [ 283.597861][ T9] usb 2-1: config 0 descriptor?? [ 283.603005][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 283.643138][ T5917] usb 4-1: device descriptor read/8, error -71 [ 283.762135][ T5917] usb usb4-port1: unable to enumerate USB device [ 283.835495][ T9] usb 2-1: USB disconnect, device number 18 [ 286.802522][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 286.962598][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 286.969233][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.989798][ T46] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.011196][ T46] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 287.021685][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.030304][ T46] usb 6-1: Product: syz [ 287.034691][ T46] usb 6-1: Manufacturer: syz [ 287.039356][ T46] usb 6-1: SerialNumber: syz [ 287.057227][ T46] usb 6-1: config 0 descriptor?? [ 288.768906][ T46] usb 6-1: USB disconnect, device number 4 [ 290.045739][ T8841] ubi: mtd0 is already attached to ubi31 [ 291.626078][ T8864] netlink: 164 bytes leftover after parsing attributes in process `syz.5.975'. [ 291.703932][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 291.862160][ T8866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.977'. [ 291.892629][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 291.907140][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.927734][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.963677][ T46] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 291.989102][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.009357][ T46] usb 4-1: Product: syz [ 292.023491][ T46] usb 4-1: Manufacturer: syz [ 292.028112][ T46] usb 4-1: SerialNumber: syz [ 292.039438][ T46] usb 4-1: config 0 descriptor?? [ 292.260648][ T46] usb 4-1: USB disconnect, device number 21 [ 292.641966][ T8901] netlink: 48 bytes leftover after parsing attributes in process `syz.0.991'. [ 292.790297][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 292.801024][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 292.810548][ T8907] netlink: 44 bytes leftover after parsing attributes in process `syz.0.994'. [ 293.457817][ T8933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1004'. [ 294.001569][ T8959] netlink: 'syz.0.1012': attribute type 12 has an invalid length. [ 294.390311][ T8972] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1018'. [ 294.659989][ T8976] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1020'. [ 294.819173][ T8977] 9pnet: Could not find request transport: fd0x0000000000000003 [ 295.306861][ T8997] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1029'. [ 295.348233][ T9004] ubi: mtd0 is already attached to ubi31 [ 295.601978][ T9010] 9pnet: Could not find request transport: fd0x0000000000000003 [ 295.827871][ T9008] netlink: 'syz.5.1034': attribute type 12 has an invalid length. [ 296.795402][ T9042] __nla_validate_parse: 2 callbacks suppressed [ 296.795420][ T9042] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1046'. [ 296.825631][ T10] block nbd2: Possible stuck request ffff888026007000: control (read@0,4096B). Runtime 120 seconds [ 297.347043][ T9050] 9pnet: Could not find request transport: fd0x0000000000000003 [ 298.542945][ T9068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1055'. [ 298.759010][ T9074] gtp0: entered promiscuous mode [ 298.772580][ T9074] gtp0: entered allmulticast mode [ 299.507227][ T9091] 9pnet_fd: Insufficient options for proto=fd [ 301.282331][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 301.514066][ T9118] sch_fq: defrate 2048 ignored. [ 301.741802][ T9122] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1074'. [ 301.802594][ T9122] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1074'. [ 301.944398][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 180 seconds [ 302.513802][ T9132] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 302.522474][ T9132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.697246][ T9136] 9pnet_fd: Insufficient options for proto=fd [ 303.615627][ T9163] netlink: set zone limit has 8 unknown bytes [ 303.710450][ T29] audit: type=1326 audit(1740110217.305:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9151 comm="syz.0.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69a8f8d0a9 code=0x0 [ 305.343141][ T9177] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1091'. [ 305.532008][ T9179] 9pnet_fd: Insufficient options for proto=fd [ 306.033366][ T9196] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 306.061703][ T9196] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1100'. [ 307.394507][ T9219] ubi: mtd0 is already attached to ubi31 [ 308.943417][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 308.983852][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 180 seconds [ 309.017763][ T9255] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1120'. [ 309.113214][ T46] usb 4-1: no configurations [ 309.118447][ T46] usb 4-1: can't read configurations, error -22 [ 309.139985][ T9260] ubi: mtd0 is already attached to ubi31 [ 309.253767][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 309.557192][ T46] usb 4-1: no configurations [ 309.588058][ T46] usb 4-1: can't read configurations, error -22 [ 309.658201][ T46] usb usb4-port1: attempt power cycle [ 309.804372][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 310.082643][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 310.888043][ T46] usb 4-1: no configurations [ 310.918191][ T46] usb 4-1: can't read configurations, error -22 [ 311.096429][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 311.164340][ T46] usb 4-1: no configurations [ 311.168991][ T46] usb 4-1: can't read configurations, error -22 [ 311.200854][ T46] usb usb4-port1: unable to enumerate USB device [ 311.454995][ T9287] syzkaller1: entered promiscuous mode [ 311.468123][ T9287] syzkaller1: entered allmulticast mode [ 311.786321][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1133'. [ 311.842797][ T46] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 312.023121][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 312.051534][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.079070][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.122655][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.135996][ T46] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.147366][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.239500][ T46] usb 1-1: config 0 descriptor?? [ 312.310165][ T46] usb 1-1: can't set config #0, error -71 [ 312.366649][ T46] usb 1-1: USB disconnect, device number 33 [ 312.662850][ T9317] syzkaller1: entered promiscuous mode [ 312.668384][ T9317] syzkaller1: entered allmulticast mode [ 312.906873][ T9322] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 312.916887][ T9322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.376465][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1145'. [ 313.402555][ T5872] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 313.573140][ T5872] usb 2-1: no configurations [ 313.597236][ T5872] usb 2-1: can't read configurations, error -22 [ 313.776696][ T5872] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 313.983412][ T5872] usb 2-1: no configurations [ 313.988282][ T5872] usb 2-1: can't read configurations, error -22 [ 313.995434][ T5872] usb usb2-port1: attempt power cycle [ 314.072570][ T6162] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 314.212531][ T6162] usb 5-1: device descriptor read/64, error -71 [ 314.452507][ T6162] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 314.482019][ T5872] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 314.582937][ T6162] usb 5-1: device descriptor read/64, error -71 [ 314.594860][ T5872] usb 2-1: no configurations [ 314.599494][ T5872] usb 2-1: can't read configurations, error -22 [ 314.701095][ T6162] usb usb5-port1: attempt power cycle [ 314.742666][ T5872] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 314.760060][ T9355] syzkaller1: entered promiscuous mode [ 314.778247][ T9355] syzkaller1: entered allmulticast mode [ 314.787594][ T5872] usb 2-1: no configurations [ 314.792224][ T5872] usb 2-1: can't read configurations, error -22 [ 314.816222][ T5872] usb usb2-port1: unable to enumerate USB device [ 315.374016][ T6162] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 315.466827][ T6162] usb 5-1: device descriptor read/8, error -71 [ 315.952713][ T6162] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.075258][ T6162] usb 5-1: device descriptor read/8, error -71 [ 316.170814][ T9383] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1167'. [ 316.184317][ T6162] usb usb5-port1: unable to enumerate USB device [ 317.373218][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.744805][ T9426] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1184'. [ 318.617934][ T9454] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1197'. [ 318.755787][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 318.771033][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 318.787025][ T9460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1199'. [ 322.002478][ T9524] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 322.023318][ T9524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.563437][ T9534] netlink: 'syz.4.1229': attribute type 6 has an invalid length. [ 324.147350][ T9567] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 324.161009][ T9567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.764353][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1244'. [ 324.774204][ T9576] netlink: 'syz.3.1244': attribute type 12 has an invalid length. [ 325.456939][ T5872] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 325.624935][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.652479][ T5872] usb 5-1: config 0 has no interfaces? [ 325.663562][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 325.700322][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.733727][ T5872] usb 5-1: config 0 descriptor?? [ 325.838275][ T9606] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 325.862694][ T9606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.994602][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 326.738568][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 326.903634][ T10] block nbd2: Possible stuck request ffff888026007000: control (read@0,4096B). Runtime 150 seconds [ 326.978760][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 328.336148][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 328.412574][ T9] usb 5-1: USB disconnect, device number 20 [ 328.532494][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 328.556138][ T5872] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 328.589660][ T9664] netlink: 'syz.4.1278': attribute type 1 has an invalid length. [ 328.598091][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.716571][ T5872] usb 6-1: Product: syz [ 328.720782][ T5872] usb 6-1: Manufacturer: syz [ 328.725544][ T5872] usb 6-1: SerialNumber: syz [ 328.732139][ T5872] usb 6-1: config 0 descriptor?? [ 328.739917][ T5872] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 330.763635][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 330.876005][ T9] usb 6-1: USB disconnect, device number 5 [ 331.092566][ T5872] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 331.380021][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.397763][ T5872] usb 4-1: config 0 has no interfaces? [ 331.404615][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 331.763800][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.773803][ T5872] usb 4-1: config 0 descriptor?? [ 332.108376][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 210 seconds [ 332.241858][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 332.442661][ T6162] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 332.602630][ T6162] usb 2-1: Using ep0 maxpacket: 8 [ 332.626521][ T6162] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 332.649074][ T6162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.659959][ T6162] usb 2-1: Product: syz [ 332.680048][ T6162] usb 2-1: Manufacturer: syz [ 332.684775][ T6162] usb 2-1: SerialNumber: syz [ 332.691864][ T6162] usb 2-1: config 0 descriptor?? [ 332.712689][ T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 332.720934][ T6162] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 333.958833][ T9] usb 4-1: USB disconnect, device number 26 [ 333.988410][ T6162] gspca_sonixj: reg_w1 err -71 [ 333.993581][ T6162] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 334.003764][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 334.009486][ T6162] usb 2-1: USB disconnect, device number 23 [ 334.016549][ T46] usb 5-1: no configurations [ 334.021383][ T46] usb 5-1: can't read configurations, error -22 [ 334.162909][ T46] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 334.322716][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 334.339103][ T46] usb 5-1: no configurations [ 334.351621][ T46] usb 5-1: can't read configurations, error -22 [ 334.375332][ T46] usb usb5-port1: attempt power cycle [ 334.863560][ T46] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 334.903520][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 334.912876][ T46] usb 5-1: no configurations [ 334.919786][ T46] usb 5-1: can't read configurations, error -22 [ 335.194311][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 335.368181][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 335.902012][ T46] usb 5-1: device descriptor read/all, error -71 [ 335.908708][ T46] usb usb5-port1: unable to enumerate USB device [ 337.626694][ T9844] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 337.634303][ T9844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.073568][ T58] block nbd1: Possible stuck request ffff888025fe5080: control (read@0,4096B). Runtime 210 seconds [ 339.876466][ T9878] netlink: set zone limit has 8 unknown bytes [ 340.133192][ T9880] fuse: Bad value for 'fd' [ 340.702645][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 340.863195][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 341.019647][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 341.072541][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.080976][ T25] usb 1-1: Product: syz [ 341.086092][ T25] usb 1-1: Manufacturer: syz [ 341.090832][ T25] usb 1-1: SerialNumber: syz [ 341.114309][ T25] usb 1-1: config 0 descriptor?? [ 341.139395][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 342.259190][ T9915] fuse: Bad value for 'fd' [ 342.412930][ T9925] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 342.420679][ T9925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.689823][ T9933] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1382'. [ 342.897416][ T9939] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 342.918583][ T9939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1383'. [ 343.839667][ T2151] usb 1-1: USB disconnect, device number 35 [ 344.193030][ T9962] netlink: 'syz.1.1389': attribute type 12 has an invalid length. [ 344.973390][ T9964] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 344.981214][ T9964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.006813][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 345.021776][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1393'. [ 345.030893][ T9966] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1393'. [ 345.181734][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 345.227668][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 345.259765][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1398'. [ 345.341351][ T9984] lo speed is unknown, defaulting to 1000 [ 345.352123][ T9984] lo speed is unknown, defaulting to 1000 [ 345.359974][ T9984] lo speed is unknown, defaulting to 1000 [ 345.372700][ T5917] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 345.390569][ T5872] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 345.501827][ T9984] infiniband syz0: set active [ 345.508858][ T9984] infiniband syz0: added lo [ 345.540102][ T46] lo speed is unknown, defaulting to 1000 [ 345.549343][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 345.565279][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.579550][ T5917] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.609366][ T5872] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 345.622586][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.637996][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 345.657673][ T5872] usb 1-1: Product: syz [ 345.667816][ T5872] usb 1-1: Manufacturer: syz [ 345.678412][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.692386][ T5872] usb 1-1: SerialNumber: syz [ 345.704623][ T9984] RDS/IB: syz0: added [ 345.709936][ T9984] smc: adding ib device syz0 with port count 1 [ 345.716947][ T9984] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 345.731506][ T9984] lo speed is unknown, defaulting to 1000 [ 345.913368][ T976] lo speed is unknown, defaulting to 1000 [ 345.925009][ T5872] usb 1-1: config 0 descriptor?? [ 345.930673][ T5917] usb 4-1: config 0 descriptor?? [ 345.936281][ T9984] lo speed is unknown, defaulting to 1000 [ 346.006426][ T5872] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 346.176193][ T9984] lo speed is unknown, defaulting to 1000 [ 346.401539][ T9984] lo speed is unknown, defaulting to 1000 [ 346.522589][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 346.585118][ T9984] lo speed is unknown, defaulting to 1000 [ 346.692508][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 346.703935][ T46] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 346.711529][ T46] usb 5-1: can't read configurations, error -61 [ 346.748140][ T9984] lo speed is unknown, defaulting to 1000 [ 347.312773][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 347.472644][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 347.484697][ T46] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 347.497544][ T46] usb 5-1: can't read configurations, error -61 [ 347.505371][ T46] usb usb5-port1: attempt power cycle [ 347.852680][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 347.883219][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 347.890397][ T46] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 347.898298][ T46] usb 5-1: can't read configurations, error -61 [ 348.035998][ T46] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 348.073180][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 348.080215][ T46] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 348.088168][ T46] usb 5-1: can't read configurations, error -61 [ 348.099982][ T46] usb usb5-port1: unable to enumerate USB device [ 348.142733][ T46] usb 1-1: USB disconnect, device number 36 [ 348.183890][ T25] usb 4-1: USB disconnect, device number 27 [ 348.425469][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 348.653270][T10046] lo speed is unknown, defaulting to 1000 [ 348.765754][T10050] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 348.853406][T10049] lo speed is unknown, defaulting to 1000 [ 348.872573][ T5917] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 349.378545][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 349.401613][ T5917] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 349.421143][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.449056][ T5917] usb 6-1: Product: syz [ 349.457774][ T5917] usb 6-1: Manufacturer: syz [ 349.472890][ T5917] usb 6-1: SerialNumber: syz [ 349.486839][ T5917] usb 6-1: config 0 descriptor?? [ 349.495541][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 350.552695][ T976] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 350.812530][ T976] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.845044][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 350.949073][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.017029][ T976] usb 4-1: config 0 descriptor?? [ 351.172891][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 351.235037][T10080] netlink: 'syz.4.1432': attribute type 12 has an invalid length. [ 351.831351][ T46] usb 6-1: USB disconnect, device number 6 [ 352.679481][ T46] usb 4-1: USB disconnect, device number 28 [ 353.726194][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1443'. [ 353.996721][T10123] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1448'. [ 354.013278][T10123] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1448'. [ 354.217699][ T5872] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 354.396370][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.406372][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 354.440786][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.457402][ T5872] usb 5-1: config 0 descriptor?? [ 354.467373][T10144] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1458'. [ 354.479621][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'. [ 354.870680][T10158] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1463'. [ 355.012585][ T5872] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 355.108846][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 355.120243][T10170] afs: Bad value for 'source' [ 355.128320][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 355.139570][T10169] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1468'. [ 355.162792][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 355.188051][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.202456][ T5872] usb 2-1: config 0 has no interfaces? [ 355.221931][ T5872] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 355.262555][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.270601][ T5872] usb 2-1: Product: syz [ 355.293941][ T5872] usb 2-1: Manufacturer: syz [ 355.302524][ T5872] usb 2-1: SerialNumber: syz [ 355.320028][ T5872] usb 2-1: config 0 descriptor?? [ 355.554148][T10182] netlink: set zone limit has 8 unknown bytes [ 355.804760][ T46] usb 2-1: USB disconnect, device number 24 [ 356.310825][T10194] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1477'. [ 357.320766][ T10] block nbd2: Possible stuck request ffff888026007000: control (read@0,4096B). Runtime 180 seconds [ 357.406955][ T5872] usb 5-1: USB disconnect, device number 29 [ 357.408081][T10201] afs: Bad value for 'source' [ 357.602023][T10218] lo speed is unknown, defaulting to 1000 [ 357.692526][ T46] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 357.811269][T10222] lo speed is unknown, defaulting to 1000 [ 357.848438][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 357.871873][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.900604][ T46] usb 1-1: config 179 has no interface number 0 [ 357.939820][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 358.001925][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 358.052648][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 358.079454][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 358.099898][ T46] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 358.119294][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 358.156525][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.179939][T10209] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 358.282548][ T5872] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 358.426397][ T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 358.442561][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 358.459804][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.473092][ T5872] usb 4-1: config 0 has no interfaces? [ 358.498246][ T5872] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 358.507853][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.532522][ T5872] usb 4-1: Product: syz [ 358.543269][ T5872] usb 4-1: Manufacturer: syz [ 358.549807][ T5872] usb 4-1: SerialNumber: syz [ 358.576121][ T5872] usb 4-1: config 0 descriptor?? [ 358.647655][T10253] lo speed is unknown, defaulting to 1000 [ 358.694547][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.720381][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.799800][ T5872] usb 4-1: USB disconnect, device number 29 [ 359.281525][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 359.289870][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 359.298464][ T6162] usb 1-1: USB disconnect, device number 37 [ 359.313295][ T6162] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 359.495678][T10259] batadv1: entered promiscuous mode [ 359.517299][T10259] batadv1: entered allmulticast mode [ 359.841295][T10265] __nla_validate_parse: 3 callbacks suppressed [ 359.841313][T10265] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1502'. [ 359.862763][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 359.898410][T10265] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1502'. [ 360.032483][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 360.045652][ T46] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 360.068216][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.076369][ T46] usb 2-1: Product: syz [ 360.080620][ T46] usb 2-1: Manufacturer: syz [ 360.102622][ T46] usb 2-1: SerialNumber: syz [ 360.123527][ T46] usb 2-1: config 0 descriptor?? [ 360.133969][ T46] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 360.174451][T10275] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 360.182257][T10275] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1503'. [ 360.257882][ T29] audit: type=1326 audit(1740110273.845:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10261 comm="syz.3.1501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d9f8d0a9 code=0x0 [ 360.352709][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 361.854497][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 361.886855][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 361.906317][T10294] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1510'. [ 362.212868][ T5872] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 362.402522][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 362.409555][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.424017][ T5872] usb 4-1: config 0 has no interfaces? [ 362.451351][ T5872] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 362.473709][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.520210][ T5872] usb 4-1: Product: syz [ 362.534632][ T5872] usb 4-1: Manufacturer: syz [ 362.539252][ T5872] usb 4-1: SerialNumber: syz [ 363.287928][ T46] usb 2-1: USB disconnect, device number 25 [ 363.334614][ T10] block nbd0: Possible stuck request ffff888025f30000: control (read@0,4096B). Runtime 240 seconds [ 363.353415][ T5872] usb 4-1: config 0 descriptor?? [ 363.427085][T10327] batadv1: entered promiscuous mode [ 363.434809][T10327] batadv1: entered allmulticast mode [ 363.599760][ T9] usb 4-1: USB disconnect, device number 30 [ 364.524112][T10339] netlink: set zone limit has 8 unknown bytes [ 364.662745][ T30] INFO: task syz.2.619:7817 blocked for more than 143 seconds. [ 364.670484][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 364.678191][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.686970][ T30] task:syz.2.619 state:D stack:25848 pid:7817 tgid:7816 ppid:5820 task_flags:0x400140 flags:0x00000004 [ 365.229763][ T30] Call Trace: [ 365.233159][ T30] [ 365.236115][ T30] __schedule+0x18bc/0x4c40 [ 365.240685][ T30] ? __pfx___schedule+0x10/0x10 [ 365.245593][ T30] ? __pfx_lock_release+0x10/0x10 [ 365.250656][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 365.262441][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 365.270019][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 365.276436][ T30] ? schedule+0x90/0x320 [ 365.280703][ T30] schedule+0x14b/0x320 [ 365.284967][ T30] schedule_preempt_disabled+0x13/0x30 [ 365.290440][ T30] __mutex_lock+0x817/0x1010 [ 365.295183][ T30] ? __mutex_lock+0x602/0x1010 [ 365.300065][ T30] ? bdev_open+0xf0/0xc50 [ 365.304621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 365.309669][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 365.316236][ T30] ? alloc_file_pseudo_noaccount+0x2b2/0x3a0 [ 365.322253][ T30] ? disk_block_events+0xa9/0x120 [ 365.327521][ T30] ? bdev_open+0xc5/0xc50 [ 365.331877][ T30] bdev_open+0xf0/0xc50 [ 365.337657][ T30] ? iput+0x3be/0xa50 [ 365.341669][ T30] bdev_file_open_by_dev+0x1b0/0x220 [ 365.347042][ T30] setup_bdev_super+0x5d/0x5d0 [ 365.351847][ T30] get_tree_bdev_flags+0x3da/0x5c0 [ 365.357186][ T30] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 365.362877][ T30] ? __pfx_udf_fill_super+0x10/0x10 [ 365.368088][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 365.373762][ T30] ? cap_capable+0x139/0x450 [ 365.378366][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 365.384224][ T30] vfs_get_tree+0x90/0x2b0 [ 365.388637][ T30] do_new_mount+0x2be/0xb40 [ 365.393218][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 365.398279][ T30] __se_sys_mount+0x2d6/0x3c0 [ 365.403004][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.408995][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 365.414231][ T30] ? do_syscall_64+0x100/0x230 [ 365.418993][ T30] ? __x64_sys_mount+0x20/0xc0 [ 365.423792][ T30] do_syscall_64+0xf3/0x230 [ 365.428304][ T30] ? clear_bhb_loop+0x35/0x90 [ 365.433130][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.439036][ T30] RIP: 0033:0x7f4f35d8d0a9 [ 365.443562][ T30] RSP: 002b:00007f4f36b45038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 365.451989][ T30] RAX: ffffffffffffffda RBX: 00007f4f35fa5fa0 RCX: 00007f4f35d8d0a9 [ 365.460319][ T30] RDX: 0000400000000040 RSI: 0000400000004a00 RDI: 0000400000000500 [ 365.472466][ T30] RBP: 00007f4f35e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 365.480480][ T30] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 365.491097][ T30] R13: 0000000000000000 R14: 00007f4f35fa5fa0 R15: 00007fff112c1dc8 [ 365.499130][ T30] [ 365.504298][ T30] INFO: task syz.2.619:7819 blocked for more than 144 seconds. [ 365.511874][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 365.519604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.528322][ T30] task:syz.2.619 state:D stack:26672 pid:7819 tgid:7816 ppid:5820 task_flags:0x400140 flags:0x00000004 [ 365.540540][ T30] Call Trace: [ 365.544013][ T30] [ 365.547047][ T30] __schedule+0x18bc/0x4c40 [ 365.551770][ T30] ? __pfx___schedule+0x10/0x10 [ 365.556770][ T30] ? __pfx_lock_release+0x10/0x10 [ 365.562274][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 365.568335][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 365.574448][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 365.580875][ T30] ? schedule+0x90/0x320 [ 365.585353][ T30] schedule+0x14b/0x320 [ 365.589603][ T30] schedule_preempt_disabled+0x13/0x30 [ 365.598902][ T30] __mutex_lock+0x817/0x1010 [ 365.605951][ T30] ? __mutex_lock+0x602/0x1010 [ 365.610767][ T30] ? bdev_open+0xf0/0xc50 [ 365.615139][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 365.620157][ T30] ? wait_on_inode+0xc1/0x230 [ 365.625263][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 365.630415][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 365.635650][ T30] ? disk_block_events+0xa9/0x120 [ 365.640669][ T30] ? bdev_open+0xb1/0xc50 [ 365.645107][ T30] bdev_open+0xf0/0xc50 [ 365.649270][ T30] ? iput+0x3be/0xa50 [ 365.653422][ T30] blkdev_open+0x38e/0x4e0 [ 365.657850][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 365.663103][ T30] do_dentry_open+0xdec/0x1960 [ 365.667889][ T30] ? vfs_open+0x31/0x370 [ 365.672130][ T30] vfs_open+0x3b/0x370 [ 365.676222][ T30] path_openat+0x2c81/0x3590 [ 365.680820][ T30] ? __pfx_path_openat+0x10/0x10 [ 365.685797][ T30] do_filp_open+0x27f/0x4e0 [ 365.690294][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 365.695363][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 365.700397][ T30] do_sys_openat2+0x13e/0x1d0 [ 365.705138][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 365.710352][ T30] __x64_sys_openat+0x247/0x2a0 [ 365.715315][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 365.723270][ T30] ? exc_page_fault+0x590/0x8b0 [ 365.728137][ T30] ? do_syscall_64+0xb6/0x230 [ 365.732877][ T30] do_syscall_64+0xf3/0x230 [ 365.737391][ T30] ? clear_bhb_loop+0x35/0x90 [ 365.742060][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.747970][ T30] RIP: 0033:0x7f4f35d8ba10 [ 365.752376][ T30] RSP: 002b:00007f4f36b23b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 365.760844][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f35d8ba10 [ 365.769100][ T30] RDX: 0000000000000000 RSI: 00007f4f36b23c10 RDI: 00000000ffffff9c [ 365.777118][ T30] RBP: 00007f4f36b23c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 365.785159][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 365.793202][ T30] R13: 0000000000000000 R14: 00007f4f35fa6080 R15: 00007fff112c1dc8 [ 365.801206][ T30] [ 365.817221][ T30] [ 365.817221][ T30] Showing all locks held in the system: [ 365.828402][ T30] 1 lock held by khungtaskd/30: [ 365.834798][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 365.844768][ T30] 2 locks held by getty/5579: [ 365.849446][ T30] #0: ffff88814ce690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 365.859254][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 365.869590][ T30] 1 lock held by udevd/6620: [ 365.874290][ T30] #0: ffff888025e8b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 365.883645][ T30] 1 lock held by udevd/6622: [ 365.888249][ T30] #0: ffff888025eea4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 365.897546][ T30] 1 lock held by udevd/6934: [ 365.902123][ T30] #0: ffff888025e8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 365.911366][ T30] 2 locks held by syz.2.619/7817: [ 365.916398][ T30] #0: ffff8880319660e0 (&type->s_umount_key#56/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 365.926522][ T30] #1: ffff888025e8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 365.935800][ T30] 1 lock held by syz.2.619/7819: [ 365.940736][ T30] #0: ffff888025e8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 365.950099][ T30] [ 365.952831][ T30] ============================================= [ 365.952831][ T30] [ 365.961266][ T30] NMI backtrace for cpu 0 [ 365.961286][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 365.961299][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.961309][ T30] Call Trace: [ 365.961314][ T30] [ 365.961320][ T30] dump_stack_lvl+0x241/0x360 [ 365.961338][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.961351][ T30] ? __pfx__printk+0x10/0x10 [ 365.961376][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 365.961393][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 365.961405][ T30] ? _printk+0xd5/0x120 [ 365.961421][ T30] ? __pfx__printk+0x10/0x10 [ 365.961439][ T30] ? __wake_up_klogd+0xcc/0x110 [ 365.961454][ T30] ? __pfx__printk+0x10/0x10 [ 365.961472][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 365.961489][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.961505][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 365.961521][ T30] watchdog+0x1058/0x10a0 [ 365.961539][ T30] ? watchdog+0x1ea/0x10a0 [ 365.961563][ T30] ? __pfx_watchdog+0x10/0x10 [ 365.961580][ T30] kthread+0x7a9/0x920 [ 365.961596][ T30] ? __pfx_kthread+0x10/0x10 [ 365.961614][ T30] ? __pfx_watchdog+0x10/0x10 [ 365.961631][ T30] ? __pfx_kthread+0x10/0x10 [ 365.961646][ T30] ? __pfx_kthread+0x10/0x10 [ 365.961665][ T30] ? __pfx_kthread+0x10/0x10 [ 365.961681][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.961695][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 365.961709][ T30] ? __pfx_kthread+0x10/0x10 [ 365.961726][ T30] ret_from_fork+0x4b/0x80 [ 365.961741][ T30] ? __pfx_kthread+0x10/0x10 [ 365.961758][ T30] ret_from_fork_asm+0x1a/0x30 [ 365.961780][ T30] [ 365.961788][ T30] Sending NMI from CPU 0 to CPUs 1: [ 366.131574][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 366.132772][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 366.132786][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 366.132806][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.132817][ T30] Call Trace: [ 366.132824][ T30] [ 366.132833][ T30] dump_stack_lvl+0x241/0x360 [ 366.132856][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.132874][ T30] ? __pfx__printk+0x10/0x10 [ 366.132902][ T30] ? vscnprintf+0x5d/0x90 [ 366.132922][ T30] panic+0x349/0x880 [ 366.132945][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 366.132964][ T30] ? __pfx_panic+0x10/0x10 [ 366.132985][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 366.133004][ T30] ? __irq_work_queue_local+0x137/0x410 [ 366.133029][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 366.133050][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 366.133067][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 366.133087][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 366.133107][ T30] watchdog+0x1097/0x10a0 [ 366.133130][ T30] ? watchdog+0x1ea/0x10a0 [ 366.133156][ T30] ? __pfx_watchdog+0x10/0x10 [ 366.133178][ T30] kthread+0x7a9/0x920 [ 366.133198][ T30] ? __pfx_kthread+0x10/0x10 [ 366.133221][ T30] ? __pfx_watchdog+0x10/0x10 [ 366.133243][ T30] ? __pfx_kthread+0x10/0x10 [ 366.133263][ T30] ? __pfx_kthread+0x10/0x10 [ 366.133287][ T30] ? __pfx_kthread+0x10/0x10 [ 366.133307][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.133325][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 366.133344][ T30] ? __pfx_kthread+0x10/0x10 [ 366.133366][ T30] ret_from_fork+0x4b/0x80 [ 366.133385][ T30] ? __pfx_kthread+0x10/0x10 [ 366.133407][ T30] ret_from_fork_asm+0x1a/0x30 [ 366.133437][ T30] [ 366.313550][ T30] Kernel Offset: disabled [ 366.317861][ T30] Rebooting in 86400 seconds..