last executing test programs: 31.156181192s ago: executing program 1 (id=877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r1}) 29.937237304s ago: executing program 1 (id=879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233, 0x0, r6}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 24.108372382s ago: executing program 0 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 21.224775139s ago: executing program 3 (id=899): socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 21.188338641s ago: executing program 1 (id=900): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2d", 0xba}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0", 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x211}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 21.168189099s ago: executing program 0 (id=901): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) clock_settime(0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x0, 0x6, 0x2da3b9f3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0x0, 0xff000000, 0x4, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 20.591810093s ago: executing program 3 (id=902): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "60d672bf8d87e139b9f22df40178fe570a156066a34493b7308f574a42f5d86ca9beb80fb99350bc3e0a96dbedc12a5a4846ea1ea9da35ac03bb92"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20.459388706s ago: executing program 1 (id=903): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xad9, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xaa3, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x16, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c05"}, {0x1f}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703aa9"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0xfc, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x5, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 20.451066353s ago: executing program 0 (id=904): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 19.462372105s ago: executing program 1 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x111}, {&(0x7f00000004c0)="d3e955810cc890ed04c8917c975b7617062049e4d95030c4e4293924fedf7de74876c6d350c0a534858dce18fc2264ada02a300f146da94b489da57913fed449b5e3b1d723edd45d94ccd7c2192590ae9c2731af6f782779a54184faf25dbff145eb6d7924b19fa4450be6ad522a44c920ef6908484c31fa1fee8f43bb05e17e1312ebb68fb6bb832d0ec84e85d55c0c1b6272d65de01ef8a110e7eed3f107af0922218f523b9c0f5c45acc1d6fddf2305f95669e9c73e773403963abb9335d524deaaf6f9db04b58432891b9ad20675571b", 0xd2}], 0x2}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 19.338155888s ago: executing program 0 (id=907): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001bff4)={0x10000000}) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 17.927069884s ago: executing program 2 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020839f1000034fffe00e1fc06900101010101ac1414aa00004e22774a2562daf2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780932080a000000020000000b0502"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r3 = socket(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x1c0, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x190, 0x8, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffdf2, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 17.761819359s ago: executing program 1 (id=911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233, 0x0, r6}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 17.577443652s ago: executing program 0 (id=912): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000feffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'dummy0\x00', @multicast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usbip_server_init(0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c00000000000000000000000700000044"], 0x38}, 0x0) unshare(0x2c020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 17.542991369s ago: executing program 3 (id=913): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x5, 0x2}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 16.785180702s ago: executing program 4 (id=914): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2d", 0xba}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0", 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x211}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 16.698293066s ago: executing program 2 (id=915): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) alarm(0x100000000) fanotify_init(0x18, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) io_uring_setup(0x463f, &(0x7f00000000c0)={0x0, 0x7660, 0x20000, 0x0, 0x190}) syz_open_dev$video4linux(&(0x7f0000000000), 0xa000000000, 0x2000) 16.394880424s ago: executing program 3 (id=916): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa868", 0xeb}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2900a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb1661fed8ddba6250af47fde6e4225f438528b6660d8b67812726721f6b755bb37ca116f51e2f239675ff38126c1d681638c", 0x89}, {&(0x7f0000000900)="a1e27575d35fd4f38d622e3237bfc6a28a4c21284fa1f95f8e2343cff8831a5a663f3fac3d082e19b04d59a071c5599a98b7bc07bf2bf94767fe", 0x3a}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 16.33955495s ago: executing program 4 (id=917): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 15.699253559s ago: executing program 0 (id=918): socket$inet(0x2, 0x1, 0x0) clock_settime(0x4, &(0x7f0000000240)={0x77359400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) clock_settime(0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x0, 0x6, 0x2da3b9f3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0x0, 0xff000000, 0x4, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 15.583942816s ago: executing program 2 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000004c0)="d3e955810cc890ed04c8917c975b7617062049e4d95030c4e4293924fedf7de74876c6d350c0a534858dce18fc2264ada02a300f146da94b489da57913fed449b5e3b1d723edd45d94ccd7c2192590ae9c2731af6f782779a54184faf25dbff145eb6d7924b19fa4450be6ad522a44c920ef6908484c31fa1fee8f43bb05e17e1312ebb68fb6bb832d0ec84e85d55c0c1b6272d65de01ef8a110e7eed3f107af0922218f523b9c0f5c45acc1d6fddf2305f95669e9c73e773403963abb9335d524deaaf6f9db04b58432891b9ad20675571b", 0xd2}], 0x2}}], 0x1, 0x0) sendto$inet(r6, &(0x7f0000000700)="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", 0x129, 0x40040, 0x0, 0x0) 14.637531441s ago: executing program 4 (id=920): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 14.457807587s ago: executing program 2 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) lseek(r3, 0x1fd, 0x3) 14.143717183s ago: executing program 3 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 12.673813079s ago: executing program 2 (id=923): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r5, 0x5501) read(r5, &(0x7f0000000280)=""/44, 0x2c) 12.426992175s ago: executing program 4 (id=924): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 11.408394766s ago: executing program 3 (id=925): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x2}, {@in=@empty, 0x0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) 9.905688375s ago: executing program 4 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84242, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.047368783s ago: executing program 2 (id=927): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2d", 0xba}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0", 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce8", 0x211}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.741771217s ago: executing program 4 (id=928): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) syz_usb_connect(0x3, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12aebe00008ced083d0f00010100c07f09040b0000cc68680100"/36], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a6052", 0x5b}], 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x424900, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x440200, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x1f4, 0x52, 0xfffffffc, 0x81}, 0x9c) ioctl$PPPIOCGUNIT(r6, 0x80047456, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 0s ago: executing program 32 (id=911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chown(0x0, 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233, 0x0, r6}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 71.676245][ T5828] cgroup: Unknown subsys name 'net' [ 71.847681][ T5828] cgroup: Unknown subsys name 'cpuset' [ 71.856635][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.250206][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.722737][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.734937][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.747343][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.755372][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.776067][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.780059][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.783896][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.791423][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.805385][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.806419][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.813322][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.827407][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.836317][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.836533][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.851548][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.853675][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.859484][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.873930][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.885886][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.894537][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.894559][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.914421][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.916950][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.950758][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.958709][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.507475][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 76.659789][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 76.792824][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 76.813054][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 76.823228][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.966160][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.974913][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.982446][ T5839] bridge_slave_0: entered allmulticast mode [ 76.989961][ T5839] bridge_slave_0: entered promiscuous mode [ 77.020729][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.028128][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.035522][ T5845] bridge_slave_0: entered allmulticast mode [ 77.042500][ T5845] bridge_slave_0: entered promiscuous mode [ 77.051521][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.058718][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.066110][ T5845] bridge_slave_1: entered allmulticast mode [ 77.073085][ T5845] bridge_slave_1: entered promiscuous mode [ 77.080371][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.087760][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.095366][ T5839] bridge_slave_1: entered allmulticast mode [ 77.102427][ T5839] bridge_slave_1: entered promiscuous mode [ 77.191279][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.198559][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.206181][ T5838] bridge_slave_0: entered allmulticast mode [ 77.213108][ T5838] bridge_slave_0: entered promiscuous mode [ 77.231902][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.241095][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.248353][ T5852] bridge_slave_0: entered allmulticast mode [ 77.256776][ T5852] bridge_slave_0: entered promiscuous mode [ 77.311063][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.318444][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.325736][ T5838] bridge_slave_1: entered allmulticast mode [ 77.332735][ T5838] bridge_slave_1: entered promiscuous mode [ 77.354321][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.361565][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.368968][ T5852] bridge_slave_1: entered allmulticast mode [ 77.376451][ T5852] bridge_slave_1: entered promiscuous mode [ 77.386212][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.397837][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.411329][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.421279][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.428620][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.436233][ T5846] bridge_slave_0: entered allmulticast mode [ 77.443210][ T5846] bridge_slave_0: entered promiscuous mode [ 77.466172][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.502769][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.537175][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.544721][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.551847][ T5846] bridge_slave_1: entered allmulticast mode [ 77.559167][ T5846] bridge_slave_1: entered promiscuous mode [ 77.568244][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.594055][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.606996][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.642799][ T5839] team0: Port device team_slave_0 added [ 77.700621][ T5845] team0: Port device team_slave_0 added [ 77.710381][ T5839] team0: Port device team_slave_1 added [ 77.731139][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.743784][ T5838] team0: Port device team_slave_0 added [ 77.753511][ T5838] team0: Port device team_slave_1 added [ 77.761800][ T5852] team0: Port device team_slave_0 added [ 77.770909][ T5852] team0: Port device team_slave_1 added [ 77.778556][ T5845] team0: Port device team_slave_1 added [ 77.811523][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.886848][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.893835][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.920205][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.970419][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.975187][ T5843] Bluetooth: hci0: command tx timeout [ 77.977573][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.983038][ T5843] Bluetooth: hci1: command tx timeout [ 78.009256][ T5853] Bluetooth: hci2: command tx timeout [ 78.015235][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.031867][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.039304][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.065577][ T5853] Bluetooth: hci4: command tx timeout [ 78.068495][ T5843] Bluetooth: hci3: command tx timeout [ 78.071403][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.095880][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.102831][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.129165][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.143050][ T5846] team0: Port device team_slave_0 added [ 78.153016][ T5846] team0: Port device team_slave_1 added [ 78.159485][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.166666][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.192858][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.204733][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.211694][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.237658][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.273824][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.280856][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.306826][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.337135][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.344117][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.370469][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.443274][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.450730][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.476763][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.519545][ T5845] hsr_slave_0: entered promiscuous mode [ 78.526593][ T5845] hsr_slave_1: entered promiscuous mode [ 78.535164][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.542139][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.570412][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.587280][ T5838] hsr_slave_0: entered promiscuous mode [ 78.593606][ T5838] hsr_slave_1: entered promiscuous mode [ 78.599979][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.607931][ T5838] Cannot create hsr debugfs directory [ 78.617446][ T5852] hsr_slave_0: entered promiscuous mode [ 78.623678][ T5852] hsr_slave_1: entered promiscuous mode [ 78.630372][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.638079][ T5852] Cannot create hsr debugfs directory [ 78.721104][ T5839] hsr_slave_0: entered promiscuous mode [ 78.727448][ T5839] hsr_slave_1: entered promiscuous mode [ 78.733437][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.741487][ T5839] Cannot create hsr debugfs directory [ 78.796813][ T5846] hsr_slave_0: entered promiscuous mode [ 78.803073][ T5846] hsr_slave_1: entered promiscuous mode [ 78.809320][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.817087][ T5846] Cannot create hsr debugfs directory [ 79.375693][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.398272][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.409765][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.430303][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.480140][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.493287][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.518439][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.544666][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.609467][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.620056][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.632722][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.660813][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.765281][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.775807][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.808690][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.819862][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.896385][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.935488][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.952453][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.970507][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.982843][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.000829][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.027589][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.054957][ T5843] Bluetooth: hci1: command tx timeout [ 80.054971][ T5853] Bluetooth: hci0: command tx timeout [ 80.055002][ T5853] Bluetooth: hci2: command tx timeout [ 80.063708][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.078611][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.103299][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.110531][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.132210][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.138992][ T5853] Bluetooth: hci3: command tx timeout [ 80.144390][ T5853] Bluetooth: hci4: command tx timeout [ 80.196333][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.203488][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.245966][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.253063][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.275978][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.361450][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.373420][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.419859][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.427058][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.482025][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.489307][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.526885][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.617024][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.624402][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.661081][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.668273][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.759765][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.820205][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.872752][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.971879][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.979179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.002125][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.037988][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.045228][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.264088][ T5839] veth0_vlan: entered promiscuous mode [ 81.380532][ T5839] veth1_vlan: entered promiscuous mode [ 81.401550][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.540857][ T5839] veth0_macvtap: entered promiscuous mode [ 81.565584][ T5845] veth0_vlan: entered promiscuous mode [ 81.587788][ T5839] veth1_macvtap: entered promiscuous mode [ 81.646482][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.673925][ T5845] veth1_vlan: entered promiscuous mode [ 81.710645][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.723643][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.789983][ T5852] veth0_vlan: entered promiscuous mode [ 81.798226][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.807929][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.819631][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.830127][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.888647][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.977394][ T5852] veth1_vlan: entered promiscuous mode [ 82.019128][ T5845] veth0_macvtap: entered promiscuous mode [ 82.048638][ T5838] veth0_vlan: entered promiscuous mode [ 82.087297][ T5845] veth1_macvtap: entered promiscuous mode [ 82.135134][ T5853] Bluetooth: hci1: command tx timeout [ 82.135178][ T5855] Bluetooth: hci0: command tx timeout [ 82.144725][ T5853] Bluetooth: hci2: command tx timeout [ 82.161726][ T5852] veth0_macvtap: entered promiscuous mode [ 82.175482][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.196780][ T5838] veth1_vlan: entered promiscuous mode [ 82.215915][ T5853] Bluetooth: hci4: command tx timeout [ 82.216156][ T5855] Bluetooth: hci3: command tx timeout [ 82.237969][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.249506][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.259321][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.268398][ T5852] veth1_macvtap: entered promiscuous mode [ 82.289887][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.300698][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.310175][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.319111][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.329385][ T5846] veth0_vlan: entered promiscuous mode [ 82.358741][ T5846] veth1_vlan: entered promiscuous mode [ 82.400601][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.418131][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.427005][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.453616][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.471025][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480690][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.490548][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.500138][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.561314][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.612760][ T5838] veth0_macvtap: entered promiscuous mode [ 82.628182][ T5838] veth1_macvtap: entered promiscuous mode [ 82.656660][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.678984][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.747885][ T5846] veth0_macvtap: entered promiscuous mode [ 82.791714][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.807791][ T5846] veth1_macvtap: entered promiscuous mode [ 82.817559][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.051522][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.174636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.408045][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.418912][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.443934][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.464928][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.478466][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.539176][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553334][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.686747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.789096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.894657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.941413][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.993943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.054440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.096221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.096353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.145112][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162311][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.182405][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.202548][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.211869][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.221326][ T5855] Bluetooth: hci2: command tx timeout [ 84.221351][ T5853] Bluetooth: hci1: command tx timeout [ 84.227285][ T5855] Bluetooth: hci0: command tx timeout [ 84.298922][ T5855] Bluetooth: hci3: command tx timeout [ 84.298931][ T5853] Bluetooth: hci4: command tx timeout [ 84.330220][ T5976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.351933][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.360482][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.578633][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 84.593451][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.628714][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.682604][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.717549][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.785358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.087660][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.238673][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.807780][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.835662][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.190544][ T54] cfg80211: failed to load regulatory.db [ 87.252014][ T6003] ipip0: entered promiscuous mode [ 87.258029][ T6003] ipip0: entered allmulticast mode [ 88.425532][ T6012] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 89.405460][ T6019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.004795][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.164998][ T6025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20'. [ 90.275619][ T6025] netlink: 'syz.4.20': attribute type 9 has an invalid length. [ 90.283535][ T6025] netlink: 200108 bytes leftover after parsing attributes in process `syz.4.20'. [ 90.293399][ T6025] openvswitch: netlink: Message has 5 unknown bytes. [ 90.520021][ T6035] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 92.746147][ T30] audit: type=1326 audit(1752567431.101:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 92.827946][ T30] audit: type=1326 audit(1752567431.101:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 92.938279][ T6053] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 93.086770][ T30] audit: type=1326 audit(1752567431.101:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.139005][ T30] audit: type=1326 audit(1752567431.101:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.202626][ T30] audit: type=1326 audit(1752567431.101:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.230421][ T30] audit: type=1326 audit(1752567431.101:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.252736][ T30] audit: type=1326 audit(1752567431.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.300319][ T6056] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 93.304122][ T6052] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.314397][ T6056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.318685][ T6052] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.340207][ T6052] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.349166][ T6052] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.373558][ T30] audit: type=1326 audit(1752567431.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.402775][ T6056] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 93.410697][ T6056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 93.549332][ T30] audit: type=1326 audit(1752567431.101:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.574562][ T30] audit: type=1326 audit(1752567431.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.4.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 93.608309][ T6052] Zero length message leads to an empty skb [ 93.889434][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 94.745152][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 95.104983][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34'. [ 95.153270][ T6068] netlink: 'syz.1.34': attribute type 9 has an invalid length. [ 95.189987][ T6068] netlink: 200108 bytes leftover after parsing attributes in process `syz.1.34'. [ 95.287820][ T6068] openvswitch: netlink: Message has 5 unknown bytes. [ 96.372539][ T6084] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.396553][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 99.514821][ T979] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.344691][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 100.569844][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 100.689671][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 100.734760][ T979] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.872850][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.887326][ T979] usb 2-1: config 0 descriptor?? [ 100.896304][ T6098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.912829][ T979] hub 2-1:0.0: USB hub found [ 102.082429][ T979] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 102.154463][ T979] usbhid 2-1:0.0: can't add hid device: -71 [ 102.160514][ T979] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 102.213426][ T979] usb 2-1: USB disconnect, device number 2 [ 102.247186][ T6123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 102.261861][ T6123] netlink: 'syz.0.50': attribute type 9 has an invalid length. [ 102.269896][ T6123] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.50'. [ 102.289101][ T6123] openvswitch: netlink: Message has 5 unknown bytes. [ 102.444652][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.664703][ T5913] usb 3-1: device descriptor read/64, error -71 [ 102.784581][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.51'. [ 103.014836][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.174648][ T5913] usb 3-1: device descriptor read/64, error -71 [ 103.309236][ T5913] usb usb3-port1: attempt power cycle [ 103.469958][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054cb3800: rx timeout, send abort [ 103.970396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054cb3400: rx timeout, send abort [ 103.979344][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054cb3800: abort rx timeout. Force session deactivation [ 104.478676][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054cb3400: abort rx timeout. Force session deactivation [ 105.581225][ T6156] xt_CT: No such helper "snmp_trap" [ 106.184635][ T6160] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 106.460470][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.513059][ T6150] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.522914][ T6150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.532483][ T6150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.541456][ T6150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.556787][ T6166] netlink: 'syz.1.62': attribute type 9 has an invalid length. [ 106.566182][ T6166] netlink: 200108 bytes leftover after parsing attributes in process `syz.1.62'. [ 106.579064][ T6166] openvswitch: netlink: Message has 5 unknown bytes. [ 106.612685][ T6165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.62'. [ 108.893942][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 109.271153][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 110.094223][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.254546][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 110.275864][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 110.317801][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 110.377647][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.428710][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.035221][ T10] usb 3-1: config 0 descriptor?? [ 111.075384][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.121519][ T6199] loop6: detected capacity change from 0 to 63 [ 111.139734][ T6207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.75'. [ 111.155498][ T10] hub 3-1:0.0: USB hub found [ 111.245985][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.255329][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.264024][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.273106][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.282126][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.355343][ T6199] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.363578][ T6199] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.377101][ T6199] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.389627][ T6199] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.399762][ T6199] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.444116][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 111.565395][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 111.580296][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 111.615300][ T10] usb 3-1: USB disconnect, device number 5 [ 114.064237][ T5913] IPVS: starting estimator thread 0... [ 114.108931][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 114.704526][ T6241] IPVS: using max 52 ests per chain, 124800 per kthread [ 116.997817][ T6263] xt_CT: No such helper "snmp_trap" [ 119.683034][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.713940][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 124.378311][ T6324] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 125.096712][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 126.735245][ T5899] IPVS: starting estimator thread 0... [ 126.759020][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 127.624392][ T6355] IPVS: using max 33 ests per chain, 79200 per kthread [ 127.654845][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.804203][ T5906] usb 1-1: device descriptor read/64, error -71 [ 128.054586][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.234470][ T5906] usb 1-1: device descriptor read/64, error -71 [ 128.344878][ T5906] usb usb1-port1: attempt power cycle [ 128.535858][ T6367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.122'. [ 128.613544][ T6367] netlink: 'syz.2.122': attribute type 9 has an invalid length. [ 128.675338][ T6367] netlink: 200108 bytes leftover after parsing attributes in process `syz.2.122'. [ 128.698059][ T6367] openvswitch: netlink: Message has 5 unknown bytes. [ 128.895996][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 132.895647][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.960498][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971647][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.229222][ T10] usb 4-1: device descriptor read/64, error -71 [ 133.553459][ T6459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.137'. [ 133.565739][ T6459] netlink: 'syz.0.137': attribute type 9 has an invalid length. [ 133.573412][ T6459] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.137'. [ 133.594719][ T6459] openvswitch: netlink: Message has 5 unknown bytes. [ 133.664359][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.824760][ T10] usb 4-1: device descriptor read/64, error -71 [ 133.948099][ T10] usb usb4-port1: attempt power cycle [ 140.488337][ T6510] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.863578][ T6539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.096375][ T6571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.173'. [ 147.267283][ T6572] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.276218][ T6572] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.292098][ T6572] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.301179][ T6572] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.013183][ T6581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.176'. [ 148.472346][ T6569] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 148.484454][ T6569] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.492808][ T6569] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.501163][ T6569] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 148.509244][ T6569] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 156.927536][ T6638] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 156.975818][ T6638] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.983628][ T6638] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.993295][ T6638] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 157.001232][ T6638] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 157.294157][ T6637] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.303006][ T6637] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.311824][ T6637] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.321370][ T6637] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.423909][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 157.890167][ T6648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.192'. [ 159.024579][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.372182][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.3.194'. [ 160.498633][ T10] usb 5-1: device descriptor read/64, error -71 [ 161.389153][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.754836][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.979153][ T6686] ipip0: entered promiscuous mode [ 162.984431][ T6686] ipip0: entered allmulticast mode [ 164.834507][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 164.846905][ T5892] usb 2-1: config index 0 descriptor too short (expected 6683, got 27) [ 164.855868][ T5892] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 164.863982][ T5892] usb 2-1: config 0 has no interface number 0 [ 165.392771][ T5892] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.441182][ T5892] usb 2-1: config 0 interface 85 has no altsetting 0 [ 165.582612][ T5892] usb 2-1: string descriptor 0 read error: -71 [ 165.589140][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 165.624446][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.652306][ T5892] usb 2-1: config 0 descriptor?? [ 165.667391][ T5892] usb 2-1: can't set config #0, error -71 [ 165.683651][ T5892] usb 2-1: USB disconnect, device number 3 [ 167.639457][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.792752][ T6721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.214'. [ 168.076905][ T6726] ipip0: entered promiscuous mode [ 168.082032][ T6726] ipip0: entered allmulticast mode [ 169.504831][ T6729] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.549839][ T6729] dummy0: entered promiscuous mode [ 169.569804][ T6729] dummy0: entered allmulticast mode [ 170.180520][ T6729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.204979][ T6748] fuse: Bad value for 'fd' [ 172.612319][ T6759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.222'. [ 172.909653][ T6764] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.019272][ T6786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.294734][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.464457][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 180.494147][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.523288][ T10] usb 4-1: config 0 has no interfaces? [ 180.540777][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 180.550445][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 180.597254][ T10] usb 4-1: Manufacturer: syz [ 180.758769][ T10] usb 4-1: config 0 descriptor?? [ 180.864633][ T6831] nfs4: Unknown parameter '' [ 181.586995][ T10] usb 4-1: USB disconnect, device number 5 [ 188.343554][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.787519][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 188.796894][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 189.068618][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.205478][ T860] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 189.214473][ T5892] usb 2-1: device descriptor read/64, error -71 [ 189.344437][ T860] usb 5-1: device descriptor read/64, error -71 [ 189.454580][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.604451][ T860] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.738472][ T5892] usb 2-1: device descriptor read/64, error -71 [ 189.744863][ T860] usb 5-1: device descriptor read/64, error -71 [ 189.854775][ T860] usb usb5-port1: attempt power cycle [ 189.860714][ T5892] usb usb2-port1: attempt power cycle [ 190.212485][ T6903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.261'. [ 190.704409][ T860] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.712010][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.737968][ T860] usb 5-1: device descriptor read/8, error -71 [ 190.935361][ T5892] usb 2-1: device not accepting address 6, error -71 [ 191.081599][ T860] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.726742][ T860] usb 5-1: device descriptor read/8, error -71 [ 192.055611][ T6910] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.064588][ T6910] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.073313][ T6910] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.082168][ T6910] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.167759][ T860] usb usb5-port1: unable to enumerate USB device [ 192.541948][ T6909] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 192.551935][ T6909] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 192.559761][ T6909] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.568063][ T6909] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 192.575859][ T6909] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 193.020489][ T6921] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 194.987160][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.993624][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.217787][ T6940] dummy0: entered promiscuous mode [ 198.222956][ T6940] dummy0: entered allmulticast mode [ 198.570746][ T6951] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.145739][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.241342][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 199.520784][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.631855][ T5892] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.640990][ T5892] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.651331][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.667372][ T5892] usb 1-1: config 0 descriptor?? [ 201.422991][ T5892] usb 1-1: USB disconnect, device number 6 [ 201.498618][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 201.498647][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 201.506964][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 201.510917][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 201.523628][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 201.923956][ T6979] netlink: 44 bytes leftover after parsing attributes in process `syz.0.280'. [ 205.167697][ T7006] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 206.060437][ T7013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.288'. [ 206.878120][ T7018] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.886371][ T7018] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 206.898095][ T7018] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 207.464037][ T7018] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 208.793715][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 209.266461][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 209.764639][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.914792][ T5926] usb 3-1: device descriptor read/64, error -71 [ 210.164823][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.307861][ T5926] usb 3-1: device descriptor read/64, error -71 [ 210.436833][ T5926] usb usb3-port1: attempt power cycle [ 210.914620][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.978458][ T5926] usb 3-1: device descriptor read/8, error -71 [ 211.387248][ T5926] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 211.552987][ T5926] usb 3-1: device descriptor read/8, error -71 [ 211.728386][ T7060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.300'. [ 212.157144][ T5926] usb usb3-port1: unable to enumerate USB device [ 216.638528][ T5975] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 216.904897][ T5975] usb 4-1: device descriptor read/64, error -71 [ 216.914462][ T982] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.333070][ T982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.347511][ T982] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.359768][ T982] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 217.371567][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.386555][ T982] usb 5-1: config 0 descriptor?? [ 218.235056][ T5975] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.455052][ T5975] usb 4-1: device descriptor read/64, error -71 [ 219.663812][ T860] usb 5-1: USB disconnect, device number 8 [ 219.734751][ T5975] usb usb4-port1: attempt power cycle [ 220.035278][ T7119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.313'. [ 222.300320][ T7134] fuse: Bad value for 'group_id' [ 222.305529][ T7134] fuse: Bad value for 'group_id' [ 226.369534][ T7162] fuse: Bad value for 'group_id' [ 226.374598][ T7162] fuse: Bad value for 'group_id' [ 227.166814][ T860] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 228.110908][ T860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.124356][ T860] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.365654][ T860] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.399147][ T860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.452729][ T860] usb 1-1: config 0 descriptor?? [ 228.732325][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 228.942495][ T7183] fuse: Bad value for 'group_id' [ 228.947697][ T7183] fuse: Bad value for 'group_id' [ 229.971468][ T5899] usb 1-1: USB disconnect, device number 7 [ 231.834424][ T860] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.604531][ T860] usb 2-1: Using ep0 maxpacket: 32 [ 232.612002][ T860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.630610][ T860] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.643674][ T860] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.655308][ T860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.702520][ T860] usb 2-1: config 0 descriptor?? [ 232.759380][ T860] hub 2-1:0.0: bad descriptor, ignoring hub [ 232.784429][ T860] hub 2-1:0.0: probe with driver hub failed with error -5 [ 232.799300][ T860] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 232.889519][ T7214] dummy0: entered promiscuous mode [ 232.917877][ T7214] dummy0: entered allmulticast mode [ 233.600895][ T7222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.393655][ T7229] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 234.475551][ T7231] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 234.483396][ T7231] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 234.494504][ T7231] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 234.503509][ T7231] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 234.809883][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 235.339705][ T5913] usb 2-1: USB disconnect, device number 8 [ 236.788310][ T7249] dummy0: entered promiscuous mode [ 236.793447][ T7249] dummy0: entered allmulticast mode [ 237.678268][ T7256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 246.122826][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 246.138519][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 246.152092][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 248.780015][ T7349] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 251.301076][ T7366] netlink: 44 bytes leftover after parsing attributes in process `syz.1.378'. [ 252.233628][ T7380] loop6: detected capacity change from 0 to 63 [ 252.248111][ T5891] buffer_io_error: 532 callbacks suppressed [ 252.248127][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.312843][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.321652][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.331143][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.340211][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.644501][ T5913] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.914381][ T5913] usb 1-1: device descriptor read/64, error -71 [ 253.924482][ T5926] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.632479][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.664407][ T5926] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.708622][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.738231][ T5926] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.868364][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.876936][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.889391][ T5926] usb 2-1: config 0 descriptor?? [ 254.900818][ T5926] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 255.771557][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779328][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.226936][ T860] usb 2-1: USB disconnect, device number 9 [ 257.462423][ T7429] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 259.525957][ T7436] xt_CT: No such helper "snmp_trap" [ 260.660915][ T7450] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 260.743566][ T7450] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 260.751828][ T7450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 260.764690][ T7450] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 260.772846][ T7450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 262.401975][ T7458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.914943][ T982] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 265.156300][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.248437][ T982] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.283064][ T982] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.293269][ T982] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.319955][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.355928][ T982] usb 4-1: config 0 descriptor?? [ 265.389427][ T982] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 266.426879][ T7496] overlayfs: failed to resolve './file0': -2 [ 266.749289][ T982] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 267.012035][ T982] usb 2-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 267.408047][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.414906][ T982] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 267.424730][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.441396][ T982] usb 2-1: config 0 descriptor?? [ 267.567600][ T982] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 267.798046][ T7505] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 267.889508][ T7505] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.897959][ T7505] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.924604][ T7505] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.932423][ T7505] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 268.203848][ T5899] usb 4-1: USB disconnect, device number 9 [ 269.423712][ T5899] usb 2-1: USB disconnect, device number 10 [ 270.077237][ T7517] fuse: Unknown parameter 'grou00000000000000000000' [ 271.028028][ T5975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 271.334506][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 271.444970][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.475740][ T5975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.539522][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.597499][ T5975] usb 5-1: config 0 descriptor?? [ 271.777280][ T5975] hub 5-1:0.0: bad descriptor, ignoring hub [ 271.783248][ T5975] hub 5-1:0.0: probe with driver hub failed with error -5 [ 272.064512][ T7533] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 272.264161][ T5975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 272.368805][ T7532] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 272.376665][ T7532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 272.384999][ T7532] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 272.392699][ T7532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 273.914626][ T5899] usb 5-1: USB disconnect, device number 9 [ 274.606862][ T7557] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.951379][ T7556] xt_CT: No such helper "snmp_trap" [ 276.061920][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.309791][ T5913] usb 2-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 276.780981][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 276.799627][ T5913] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 276.809025][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.674049][ T5913] usb 2-1: config 0 descriptor?? [ 278.045185][ T5913] usb 2-1: can't set config #0, error -71 [ 278.052587][ T5913] usb 2-1: USB disconnect, device number 11 [ 278.232855][ T7580] loop6: detected capacity change from 0 to 2560 [ 278.251473][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.284102][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.321653][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.394041][ T7582] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 278.455338][ T7582] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 278.463228][ T7582] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 278.472585][ T7582] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 278.480524][ T7582] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 278.723280][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.874783][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.925823][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.939175][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.975008][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.994355][ T5891] ldm_validate_partition_table(): Disk read failed. [ 279.004916][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.043874][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.082746][ T5891] Dev loop6: unable to read RDB block 0 [ 279.098338][ T5891] loop6: unable to read partition table [ 279.214661][ T54] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 279.293419][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 279.424502][ T54] usb 1-1: device descriptor read/64, error -71 [ 279.484424][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 279.496021][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.525211][ T5926] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.548873][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.573467][ T5926] usb 4-1: config 0 descriptor?? [ 279.597946][ T5926] hub 4-1:0.0: bad descriptor, ignoring hub [ 279.610289][ T5926] hub 4-1:0.0: probe with driver hub failed with error -5 [ 279.624411][ T860] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 279.634463][ T5926] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 279.664381][ T54] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 279.775308][ T860] usb 3-1: Using ep0 maxpacket: 16 [ 279.804411][ T54] usb 1-1: device descriptor read/64, error -71 [ 279.809109][ T860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.837385][ T860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.849221][ T860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.928879][ T860] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.941792][ T860] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 280.132226][ T54] usb usb1-port1: attempt power cycle [ 280.156959][ T860] usb 3-1: Manufacturer: syz [ 280.313829][ T860] usb 3-1: config 0 descriptor?? [ 280.584542][ T54] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 280.594216][ T860] usb 3-1: USB disconnect, device number 10 [ 280.620520][ T54] usb 1-1: device descriptor read/8, error -71 [ 283.169226][ T54] usb 4-1: USB disconnect, device number 10 [ 283.385421][ T5975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 283.697345][ T5975] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.726933][ T5975] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.756006][ T5975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 283.773874][ T5975] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 283.810650][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.849175][ T5975] usb 3-1: config 0 descriptor?? [ 283.879543][ T7624] warning: `syz.0.444' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.229933][ T5975] usb 3-1: string descriptor 0 read error: -22 [ 285.432649][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 285.446110][ T5975] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 285.684428][ T5975] usb 3-1: USB disconnect, device number 11 [ 287.104430][ T860] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 287.814383][ T860] usb 1-1: Using ep0 maxpacket: 16 [ 287.821341][ T860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.844367][ T860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.874337][ T860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.941672][ T860] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.994407][ T860] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.044362][ T860] usb 1-1: Manufacturer: syz [ 288.072371][ T860] usb 1-1: config 0 descriptor?? [ 288.424947][ T5899] usb 1-1: USB disconnect, device number 14 [ 293.161528][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.465'. [ 294.822710][ T7705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.466'. [ 301.189346][ T7737] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 301.292026][ T7738] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 301.300020][ T7738] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 301.309221][ T7738] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 301.317188][ T7738] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 301.754402][ T5975] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 301.968929][ T5975] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.982268][ T5975] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.002326][ T5975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.011242][ T5975] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.025157][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.446149][ T5975] usb 2-1: config 0 descriptor?? [ 304.982308][ T5975] usbhid 2-1:0.0: can't add hid device: -71 [ 305.134523][ T5975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 305.380631][ T5975] usb 2-1: USB disconnect, device number 12 [ 305.870530][ T7783] loop6: detected capacity change from 0 to 2560 [ 305.882093][ T7783] buffer_io_error: 11 callbacks suppressed [ 305.882128][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.897491][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.906638][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.915424][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.923903][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.932595][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.941435][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.950038][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.958332][ T7783] ldm_validate_partition_table(): Disk read failed. [ 305.965328][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.974222][ T7783] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.983695][ T7783] Dev loop6: unable to read RDB block 0 [ 305.992217][ T7783] loop6: unable to read partition table [ 305.999036][ T7783] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 306.538764][ T7779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.487'. [ 307.731835][ T7802] netlink: 44 bytes leftover after parsing attributes in process `syz.4.491'. [ 310.314526][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 310.495134][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.544405][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.589163][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.608722][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 310.631429][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.672613][ T24] usb 4-1: config 0 descriptor?? [ 312.557092][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 312.581576][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 312.620518][ T24] usb 4-1: USB disconnect, device number 11 [ 314.374469][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 314.585088][ T24] usb 4-1: device descriptor read/64, error -71 [ 314.854399][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 315.054633][ T24] usb 4-1: device descriptor read/64, error -71 [ 315.595158][ T24] usb usb4-port1: attempt power cycle [ 315.850710][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 315.871390][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 315.901299][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.973565][ T7880] dummy0: entered promiscuous mode [ 315.984054][ T7880] dummy0: entered allmulticast mode [ 316.228307][ T7882] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.184991][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.192077][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.595150][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 318.565360][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'. [ 319.885650][ T7914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.833358][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 323.084944][ T7945] fuse: Bad value for 'user_id' [ 323.089948][ T7945] fuse: Bad value for 'user_id' [ 323.705222][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 323.953121][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055fb5000: rx timeout, send abort [ 324.875485][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 325.264405][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 325.484524][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 325.927415][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.942084][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.956706][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.970186][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.210024][ T5899] usb 3-1: config 0 descriptor?? [ 326.248617][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 326.424924][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 326.523608][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 326.660328][ T5899] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 328.487451][ T24] usb 3-1: USB disconnect, device number 12 [ 331.099389][ T8017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 331.108368][ T8017] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 331.877353][ T8025] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 335.264486][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 335.504555][ T5899] usb 2-1: device descriptor read/64, error -71 [ 336.391767][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 336.914392][ T5899] usb 2-1: device descriptor read/64, error -71 [ 337.129759][ T8062] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 337.683997][ T5899] usb usb2-port1: attempt power cycle [ 339.547184][ T5975] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 339.843976][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.874540][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 339.905236][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.917091][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.929461][ T5975] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.940014][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.102649][ T5975] usb 4-1: config 0 descriptor?? [ 340.111554][ T5975] hub 4-1:0.0: USB hub found [ 340.987355][ T5975] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 341.037154][ T5975] usbhid 4-1:0.0: can't add hid device: -71 [ 341.046176][ T5975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 341.160859][ T5975] usb 4-1: USB disconnect, device number 15 [ 341.219234][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.573'. [ 341.230550][ T8087] netlink: 'syz.0.573': attribute type 9 has an invalid length. [ 341.239260][ T8087] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.573'. [ 341.253561][ T8087] openvswitch: netlink: Message has 5 unknown bytes. [ 341.571504][ T8094] netlink: 56 bytes leftover after parsing attributes in process `syz.2.575'. [ 341.907979][ T8099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 341.916793][ T8099] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.072051][ T8127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.057897][ T8131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.584'. [ 346.546597][ T8131] netlink: 'syz.4.584': attribute type 9 has an invalid length. [ 346.615651][ T8131] netlink: 200108 bytes leftover after parsing attributes in process `syz.4.584'. [ 347.147796][ T8131] openvswitch: netlink: Message has 5 unknown bytes. [ 347.206526][ T8132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.370532][ T8146] netlink: 'syz.4.590': attribute type 21 has an invalid length. [ 347.389384][ T8146] netlink: 156 bytes leftover after parsing attributes in process `syz.4.590'. [ 347.444040][ T8146] netlink: 'syz.4.590': attribute type 21 has an invalid length. [ 347.452564][ T8146] netlink: 156 bytes leftover after parsing attributes in process `syz.4.590'. [ 347.984308][ T8153] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 347.993076][ T8153] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 349.060120][ T8160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.593'. [ 351.553866][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 351.553884][ T30] audit: type=1326 audit(1752567689.411:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.4.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x0 [ 351.786439][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.601'. [ 351.801333][ T8182] netlink: 'syz.2.601': attribute type 9 has an invalid length. [ 351.809625][ T8182] netlink: 200108 bytes leftover after parsing attributes in process `syz.2.601'. [ 351.819467][ T8182] openvswitch: netlink: Message has 5 unknown bytes. [ 352.932843][ T8193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.598'. [ 354.441125][ T8196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.808713][ T8210] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 354.874463][ T5926] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 354.879555][ T8210] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 354.939338][ T8210] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 354.960061][ T8210] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 354.978143][ T8210] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 355.252110][ T5926] usb 2-1: device descriptor read/64, error -71 [ 356.076918][ T8217] netlink: 44 bytes leftover after parsing attributes in process `syz.0.609'. [ 356.299419][ T5926] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 357.054493][ T5926] usb 2-1: device descriptor read/64, error -71 [ 357.130717][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.612'. [ 357.166681][ T5926] usb usb2-port1: attempt power cycle [ 357.175416][ T8228] netlink: 'syz.0.612': attribute type 9 has an invalid length. [ 357.187507][ T8228] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.612'. [ 357.203330][ T8228] openvswitch: netlink: Message has 5 unknown bytes. [ 357.295993][ T8232] loop6: detected capacity change from 0 to 63 [ 357.355454][ T5891] buffer_io_error: 6 callbacks suppressed [ 357.355466][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.433475][ T8232] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.467241][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.499288][ T8232] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.512808][ T8232] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.455362][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.463561][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.473551][ T5891] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.955998][ T8252] netlink: 'syz.1.618': attribute type 21 has an invalid length. [ 359.972005][ T8252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.618'. [ 360.245757][ T8255] netlink: 'syz.0.619': attribute type 21 has an invalid length. [ 360.253737][ T8255] netlink: 156 bytes leftover after parsing attributes in process `syz.0.619'. [ 360.288144][ T8255] netlink: 'syz.0.619': attribute type 21 has an invalid length. [ 360.296156][ T8255] netlink: 156 bytes leftover after parsing attributes in process `syz.0.619'. [ 360.624073][ T8254] netlink: 'syz.1.618': attribute type 21 has an invalid length. [ 360.651227][ T8254] netlink: 6 bytes leftover after parsing attributes in process `syz.1.618'. [ 363.529975][ T8277] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 363.539425][ T8277] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 366.570307][ T8297] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 367.966303][ T8308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.078897][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 370.720824][ T8334] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 371.027293][ T8334] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.069121][ T8334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 371.242283][ T8334] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.305488][ T8337] netlink: 136 bytes leftover after parsing attributes in process `syz.4.640'. [ 371.464603][ T8337] netlink: 136 bytes leftover after parsing attributes in process `syz.4.640'. [ 371.473797][ T8334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 373.085290][ T8354] fuse: Invalid rootmode [ 374.104495][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 374.113501][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 378.388496][ T5975] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 378.630575][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.637917][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.844589][ T5975] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.861292][ T5975] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.960831][ T5975] usb 3-1: config 0 interface 0 has no altsetting 0 [ 379.001897][ T5975] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 379.165226][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.361210][ T5975] usb 3-1: config 0 descriptor?? [ 380.280406][ T8407] xt_CT: No such helper "snmp_trap" [ 381.134417][ T5913] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 381.296240][ T5913] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.307603][ T5913] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.324217][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.500030][ T5913] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 381.519205][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.553398][ T5913] usb 2-1: config 0 descriptor?? [ 381.724143][ T5975] usbhid 3-1:0.0: can't add hid device: -71 [ 381.737323][ T5975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 381.778979][ T5975] usb 3-1: USB disconnect, device number 13 [ 381.864502][ T54] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 382.045781][ T54] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.370935][ T54] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.383459][ T5913] usb 2-1: string descriptor 0 read error: -71 [ 382.401715][ T54] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.401924][ T5913] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 382.417981][ T54] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 382.427588][ T5913] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 382.450084][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.488936][ T5913] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 382.537116][ T54] usb 4-1: config 0 descriptor?? [ 382.544424][ T5913] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 382.607351][ T5913] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 382.743612][ T5913] usb 2-1: USB disconnect, device number 19 [ 383.611659][ T54] usb 4-1: string descriptor 0 read error: -71 [ 383.646222][ T54] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 383.669789][ T54] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 383.682548][ T54] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 383.693817][ T54] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 383.754162][ T54] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 383.914865][ T54] usb 4-1: USB disconnect, device number 16 [ 385.643512][ T5899] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 385.846316][ T8472] input: syz0 as /devices/virtual/input/input5 [ 386.014035][ T8476] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 386.549198][ T5899] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.712164][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 386.864763][ T54] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 387.128842][ T5899] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.139760][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.146448][ T5899] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 387.155557][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.208321][ T5899] usb 2-1: config 0 descriptor?? [ 387.319184][ T54] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.334335][ T54] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.354327][ T54] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.366305][ T54] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 389.368804][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.448241][ T54] usb 3-1: config 0 descriptor?? [ 389.507450][ T54] usb 3-1: can't set config #0, error -71 [ 389.550621][ T54] usb 3-1: USB disconnect, device number 14 [ 389.600956][ T5899] usbhid 2-1:0.0: can't add hid device: -71 [ 389.703077][ T5899] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 389.935597][ T5899] usb 2-1: USB disconnect, device number 20 [ 392.720744][ T8525] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 392.732122][ T8525] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 393.240824][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.697'. [ 393.258452][ T8528] netlink: 'syz.0.697': attribute type 9 has an invalid length. [ 393.384386][ T8528] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.697'. [ 393.394523][ T8528] openvswitch: netlink: Message has 5 unknown bytes. [ 393.694377][ T5899] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 393.861013][ T5899] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.872769][ T5899] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.913596][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.934401][ T5899] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 393.956512][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.984382][ T5975] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 394.007650][ T5899] usb 4-1: config 0 descriptor?? [ 394.136371][ T5975] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.156766][ T5975] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.199891][ T5975] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.274749][ T5975] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.306429][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.334319][ T5975] usb 1-1: config 0 descriptor?? [ 394.632638][ T30] audit: type=1326 audit(1752567732.991:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 394.666489][ T5899] usb 4-1: string descriptor 0 read error: -71 [ 394.695570][ T5899] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 394.724388][ T30] audit: type=1326 audit(1752567732.991:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 394.751259][ T5899] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 394.772896][ T5899] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 394.801476][ T5899] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 394.810373][ T30] audit: type=1326 audit(1752567733.001:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 394.832154][ T5899] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 394.845208][ T5899] usb 4-1: USB disconnect, device number 17 [ 394.853629][ T30] audit: type=1326 audit(1752567733.001:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 394.949446][ T30] audit: type=1326 audit(1752567733.001:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 394.992301][ T5975] usb 1-1: string descriptor 0 read error: -71 [ 395.624223][ T30] audit: type=1326 audit(1752567733.001:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 395.645845][ T5975] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 395.655164][ T5975] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 395.663266][ T5975] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 395.671803][ T5975] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 395.680339][ T30] audit: type=1326 audit(1752567733.001:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 395.704940][ T5975] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 395.772698][ T5975] usb 1-1: USB disconnect, device number 15 [ 396.032736][ T30] audit: type=1326 audit(1752567733.001:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 396.089593][ T30] audit: type=1326 audit(1752567733.001:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 396.118080][ T30] audit: type=1326 audit(1752567733.001:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8540 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d9d8e929 code=0x7ffc0000 [ 399.177980][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.710'. [ 399.189083][ T8571] netlink: 'syz.0.710': attribute type 9 has an invalid length. [ 399.223207][ T8570] tipc: Started in network mode [ 399.364361][ T8571] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.710'. [ 399.402647][ T8570] tipc: Node identity c6ad5110dc7c, cluster identity 4711 [ 399.422315][ T8571] openvswitch: netlink: Message has 5 unknown bytes. [ 399.435398][ T8570] tipc: Enabled bearer , priority 0 [ 399.660704][ T8570] tipc: Resetting bearer [ 399.683536][ T8565] tipc: Disabling bearer [ 399.715049][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 399.715066][ T30] audit: type=1326 audit(1752567738.021:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 399.755477][ T30] audit: type=1326 audit(1752567738.021:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 399.776933][ T30] audit: type=1326 audit(1752567738.021:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 399.827797][ T30] audit: type=1326 audit(1752567738.021:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 399.930995][ T30] audit: type=1326 audit(1752567738.021:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 400.113710][ T30] audit: type=1326 audit(1752567738.031:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 400.197767][ T30] audit: type=1326 audit(1752567738.031:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 400.651743][ T30] audit: type=1326 audit(1752567738.031:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 400.673497][ T30] audit: type=1326 audit(1752567738.031:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 400.701572][ T30] audit: type=1326 audit(1752567738.031:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8578 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb225f8e929 code=0x7ffc0000 [ 400.753280][ T8584] xt_CT: No such helper "snmp_trap" [ 401.334688][ T54] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 401.974014][ T8601] xt_CT: No such helper "snmp_trap" [ 402.349233][ T54] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.455003][ T54] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.478147][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 402.507068][ T54] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 402.540692][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.561912][ T54] usb 5-1: config 0 descriptor?? [ 402.726909][ T8610] tipc: Started in network mode [ 402.732098][ T8610] tipc: Node identity 721b298ff754, cluster identity 4711 [ 402.742482][ T8610] tipc: Enabled bearer , priority 0 [ 402.757544][ T8610] syzkaller0: entered promiscuous mode [ 402.763382][ T8610] syzkaller0: entered allmulticast mode [ 402.820026][ T8609] tipc: Resetting bearer [ 402.847980][ T8609] tipc: Disabling bearer [ 403.359961][ T54] usb 5-1: string descriptor 0 read error: -71 [ 403.490075][ T54] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 403.499282][ T54] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 403.511371][ T54] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 403.521601][ T54] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 403.529257][ T54] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 403.554790][ T54] usb 5-1: USB disconnect, device number 10 [ 405.883712][ T8641] tipc: Enabled bearer , priority 0 [ 405.906827][ T8641] syzkaller0: entered promiscuous mode [ 405.941696][ T8641] syzkaller0: entered allmulticast mode [ 406.210550][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 406.886796][ T5975] tipc: Node number set to 449925392 [ 406.927409][ T8657] tipc: Resetting bearer [ 406.984488][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 406.984506][ T30] audit: type=1326 audit(1752567745.331:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 407.099947][ T8648] netlink: 'syz.2.736': attribute type 21 has an invalid length. [ 407.107847][ T8648] netlink: 6 bytes leftover after parsing attributes in process `syz.2.736'. [ 407.122643][ T30] audit: type=1326 audit(1752567745.331:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 407.157654][ T30] audit: type=1326 audit(1752567745.381:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 407.543276][ T30] audit: type=1326 audit(1752567745.381:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 407.565500][ T30] audit: type=1326 audit(1752567745.381:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 407.621335][ T30] audit: type=1326 audit(1752567745.381:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 407.692626][ T8676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.194875][ T30] audit: type=1326 audit(1752567745.381:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 408.217524][ T30] audit: type=1326 audit(1752567745.391:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 408.239298][ T30] audit: type=1326 audit(1752567745.391:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 408.293964][ T30] audit: type=1326 audit(1752567745.391:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605238e929 code=0x7ffc0000 [ 409.436755][ T8691] loop6: detected capacity change from 0 to 63 [ 409.445427][ T8691] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.453295][ T8691] Buffer I/O error on dev loop6, logical block 1, async page read [ 409.461384][ T8691] Buffer I/O error on dev loop6, logical block 2, async page read [ 409.469257][ T8691] Buffer I/O error on dev loop6, logical block 3, async page read [ 409.477153][ T8691] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.485161][ T8691] Buffer I/O error on dev loop6, logical block 1, async page read [ 409.493015][ T8691] Buffer I/O error on dev loop6, logical block 2, async page read [ 409.500913][ T8691] Buffer I/O error on dev loop6, logical block 3, async page read [ 409.508825][ T8691] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.516696][ T8691] Buffer I/O error on dev loop6, logical block 1, async page read [ 410.329056][ T8694] overlayfs: missing 'lowerdir' [ 411.002980][ T8701] netlink: 'syz.0.749': attribute type 21 has an invalid length. [ 411.011319][ T8701] netlink: 156 bytes leftover after parsing attributes in process `syz.0.749'. [ 411.212499][ T8704] netlink: 'syz.0.749': attribute type 21 has an invalid length. [ 411.220538][ T8704] netlink: 6 bytes leftover after parsing attributes in process `syz.0.749'. [ 413.027118][ T8720] netlink: 'syz.4.754': attribute type 21 has an invalid length. [ 413.035500][ T8720] netlink: 156 bytes leftover after parsing attributes in process `syz.4.754'. [ 413.185384][ T8720] netlink: 'syz.4.754': attribute type 21 has an invalid length. [ 413.193219][ T8720] netlink: 6 bytes leftover after parsing attributes in process `syz.4.754'. [ 413.990350][ T8729] tipc: Started in network mode [ 413.995404][ T8729] tipc: Node identity ae4240537de9, cluster identity 4711 [ 414.002700][ T8729] tipc: Enabled bearer , priority 0 [ 414.028515][ T8729] syzkaller0: entered promiscuous mode [ 414.049653][ T8729] syzkaller0: entered allmulticast mode [ 414.063978][ T8728] tipc: Resetting bearer [ 414.097136][ T8728] tipc: Disabling bearer [ 414.281814][ T8737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 415.424132][ T8738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.759'. [ 416.831692][ T8755] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 420.837225][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 420.846309][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 421.524410][ T8791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.774'. [ 422.424396][ T5899] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 423.127344][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 423.128408][ T30] audit: type=1326 audit(1752567761.341:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb225f8e929 code=0x0 [ 424.184865][ T5899] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.204541][ T5899] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.623545][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 424.660815][ T5899] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 424.674095][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.692679][ T5899] usb 3-1: config 0 descriptor?? [ 425.977260][ T5899] usb 3-1: string descriptor 0 read error: -71 [ 425.983815][ T5899] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 426.028467][ T5899] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 426.072547][ T5899] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 426.097404][ T5899] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 426.117756][ T5899] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 426.149001][ T5899] usb 3-1: USB disconnect, device number 15 [ 426.324361][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 426.474539][ T5913] usb 5-1: device descriptor read/64, error -71 [ 426.764746][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 426.924879][ T5913] usb 5-1: device descriptor read/64, error -71 [ 427.068378][ T5913] usb usb5-port1: attempt power cycle [ 427.194661][ T8835] netlink: 44 bytes leftover after parsing attributes in process `syz.3.789'. [ 427.304684][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 427.434551][ T5899] usb 3-1: device descriptor read/64, error -71 [ 427.474510][ T5913] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 427.509838][ T5913] usb 5-1: device descriptor read/8, error -71 [ 427.744580][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 427.844496][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 427.879369][ T5913] usb 5-1: device descriptor read/8, error -71 [ 427.884364][ T5899] usb 3-1: device descriptor read/64, error -71 [ 427.994762][ T5899] usb usb3-port1: attempt power cycle [ 428.007621][ T5913] usb usb5-port1: unable to enumerate USB device [ 428.374694][ T5899] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 428.465743][ T5899] usb 3-1: device descriptor read/8, error -71 [ 429.124401][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 429.195077][ T5899] usb 3-1: device descriptor read/8, error -71 [ 429.326785][ T5899] usb usb3-port1: unable to enumerate USB device [ 429.423139][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.795'. [ 429.535692][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 429.749990][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 430.045468][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 430.090343][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 430.146070][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.184046][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.215453][ T5913] usb 5-1: config 0 descriptor?? [ 430.221115][ T8857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.272999][ T5913] hub 5-1:0.0: USB hub found [ 431.205319][ T5913] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 431.523413][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 431.605084][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 431.709326][ T5913] usb 5-1: USB disconnect, device number 15 [ 432.849464][ T8890] netlink: 'syz.4.806': attribute type 21 has an invalid length. [ 432.859014][ T8890] netlink: 156 bytes leftover after parsing attributes in process `syz.4.806'. [ 433.042316][ T8891] netlink: 'syz.4.806': attribute type 21 has an invalid length. [ 433.090771][ T8891] netlink: 6 bytes leftover after parsing attributes in process `syz.4.806'. [ 434.135037][ T8906] netlink: 'syz.4.809': attribute type 21 has an invalid length. [ 434.154724][ T8906] netlink: 6 bytes leftover after parsing attributes in process `syz.4.809'. [ 437.342331][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.813'. [ 437.351559][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.813'. [ 439.442216][ T8946] xt_CT: No such helper "snmp_trap" [ 440.145152][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.151609][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.095494][ T8964] input: syz0 as /devices/virtual/input/input6 [ 441.246533][ T5899] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 442.084186][ T8974] syz.2.826 (8974) used greatest stack depth: 16808 bytes left [ 443.024035][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.322095][ T8986] xt_CT: No such helper "snmp_trap" [ 443.727587][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 443.975030][ T5899] usb 5-1: can't read configurations, error -71 [ 444.071893][ T8993] netlink: 'syz.1.831': attribute type 21 has an invalid length. [ 444.080814][ T8993] netlink: 156 bytes leftover after parsing attributes in process `syz.1.831'. [ 444.261618][ T8999] netlink: 'syz.1.831': attribute type 21 has an invalid length. [ 444.269590][ T8999] netlink: 6 bytes leftover after parsing attributes in process `syz.1.831'. [ 444.932308][ T9006] netlink: 'syz.4.835': attribute type 21 has an invalid length. [ 444.940835][ T9006] netlink: 156 bytes leftover after parsing attributes in process `syz.4.835'. [ 447.124541][ T5899] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 447.307472][ T5899] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.344552][ T5899] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.064793][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 448.098749][ T5899] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 448.111009][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.130003][ T5899] usb 2-1: config 0 descriptor?? [ 448.776533][ T5899] usb 2-1: language id specifier not provided by device, defaulting to English [ 448.989076][ T5899] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 449.007304][ T5899] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 449.018477][ T5899] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 449.182619][ T5899] usb 2-1: USB disconnect, device number 21 [ 449.494379][ T30] audit: type=1326 audit(1752567787.841:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9036 comm="syz.3.847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ddf58e929 code=0x0 [ 450.392286][ T9049] netlink: 'syz.3.850': attribute type 21 has an invalid length. [ 450.401020][ T9049] netlink: 156 bytes leftover after parsing attributes in process `syz.3.850'. [ 452.126762][ T9064] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 452.349922][ T9069] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.358203][ T9069] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 452.368016][ T9069] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.376371][ T9069] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 453.081187][ T9076] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 453.161978][ T9076] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 453.170016][ T9076] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 453.179379][ T9076] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 453.187504][ T9076] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 455.375605][ T9093] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 457.208729][ T9104] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 459.036177][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 460.183608][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 464.349590][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.885'. [ 464.358826][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.885'. [ 465.490732][ T9184] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 467.015489][ T9196] netlink: 'syz.3.891': attribute type 21 has an invalid length. [ 467.078644][ T9196] netlink: 156 bytes leftover after parsing attributes in process `syz.3.891'. [ 470.364569][ T5892] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 470.685162][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 470.691735][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 470.719267][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 470.772043][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 470.801913][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.821190][ T5892] usb 3-1: config 0 descriptor?? [ 470.828006][ T9221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.838332][ T5892] hub 3-1:0.0: USB hub found [ 471.077934][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 471.318836][ T9239] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 471.433395][ T5899] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.457374][ T5892] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 471.478586][ T5899] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.526538][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 471.542938][ T5899] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 471.553727][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.562639][ T9239] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 471.571522][ T9239] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 471.587509][ T9239] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 471.595666][ T9239] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 471.598099][ T5899] usb 4-1: config 0 descriptor?? [ 471.729037][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 471.735618][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 471.816255][ T5892] usb 3-1: USB disconnect, device number 20 [ 472.332155][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 472.342508][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 472.587838][ T5899] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 473.137915][ T5899] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 473.154827][ T5899] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 473.313059][ T5899] usb 4-1: USB disconnect, device number 18 [ 474.632989][ T9273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 474.873972][ T9280] netlink: 'syz.2.915': attribute type 21 has an invalid length. [ 474.883135][ T9280] netlink: 156 bytes leftover after parsing attributes in process `syz.2.915'. [ 475.028583][ T9281] netlink: 'syz.2.915': attribute type 21 has an invalid length. [ 475.036579][ T9281] netlink: 6 bytes leftover after parsing attributes in process `syz.2.915'. [ 481.326806][ T9316] input: syz0 as /devices/virtual/input/input7 [ 489.684304][ C0] sched: DL replenish lagged too much [ 502.820981][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.842639][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.151795][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.934243][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.234316][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 665.241314][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5926/1:b..l P9265/1:b..l P5828/1:b..l P5838/1:b..l [ 665.253073][ C1] rcu: (detected by 1, t=10503 jiffies, g=28341, q=1233875 ncpus=2) [ 665.261172][ C1] task:syz-executor state:R running task stack:20792 pid:5838 tgid:5838 ppid:5837 task_flags:0x400140 flags:0x00004002 [ 665.275598][ C1] Call Trace: [ 665.278902][ C1] [ 665.281846][ C1] __schedule+0x16a2/0x4cb0 [ 665.286387][ C1] ? __lock_acquire+0xa01/0xd20 [ 665.291280][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 665.296584][ C1] ? __pfx___schedule+0x10/0x10 [ 665.301467][ C1] ? __lock_acquire+0xab9/0xd20 [ 665.306347][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 665.311655][ C1] preempt_schedule_irq+0xb5/0x150 [ 665.316786][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 665.322534][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 665.328355][ C1] irqentry_exit+0x6f/0x90 [ 665.332783][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.338777][ C1] RIP: 0010:unwind_next_frame+0x1822/0x2390 [ 665.344685][ C1] Code: 48 8b 7c 24 70 0f 85 54 01 00 00 48 8b 44 24 58 80 3c 28 00 74 05 e8 5d c5 ae 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 <80> 3c 28 00 74 05 e8 43 c5 ae 00 4d 8b 6e 08 4d 8d 7e 10 4c 89 f8 [ 665.364307][ C1] RSP: 0018:ffffc90003e3efb8 EFLAGS: 00000a06 [ 665.370389][ C1] RAX: 1ffff920007c7e12 RBX: ffffffff90b55c01 RCX: 0000000000000001 [ 665.378372][ C1] RDX: ffffc90003e3f0c8 RSI: dffffc0000000000 RDI: ffffc90003e3f090 [ 665.386354][ C1] RBP: dffffc0000000000 R08: ffffc90003e3fe68 R09: 0000000000000000 [ 665.394331][ C1] R10: ffffc90003e3f0d8 R11: fffff520007c7e1d R12: ffffc90003e3fe78 [ 665.402315][ C1] R13: ffffc90003e3f0d8 R14: ffffc90003e3f088 R15: ffffffff8172aae5 [ 665.410300][ C1] ? unwind_next_frame+0xa5/0x2390 [ 665.415442][ C1] ? unwind_next_frame+0x17c4/0x2390 [ 665.420749][ C1] ? unwind_next_frame+0xa5/0x2390 [ 665.425872][ C1] ? do_sock_getsockopt+0x35d/0x650 [ 665.431089][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.437259][ C1] arch_stack_walk+0x11c/0x150 [ 665.442041][ C1] ? __x64_sys_getsockopt+0x1a5/0x250 [ 665.447434][ C1] stack_trace_save+0x9c/0xe0 [ 665.452128][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 665.457533][ C1] save_stack+0xf7/0x1f0 [ 665.461798][ C1] ? __pfx_save_stack+0x10/0x10 [ 665.466666][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 665.471966][ C1] ? __put_partials+0x161/0x1c0 [ 665.476821][ C1] ? put_cpu_partial+0x17c/0x250 [ 665.481762][ C1] ? __slab_free+0x2f7/0x400 [ 665.486359][ C1] ? qlist_free_all+0x97/0x140 [ 665.491133][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 665.496774][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 665.501809][ C1] ? __kmalloc_node_noprof+0x21b/0x4e0 [ 665.507279][ C1] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 665.513361][ C1] ? vzalloc_noprof+0xb2/0xf0 [ 665.518047][ C1] ? alloc_counters+0xd3/0x6d0 [ 665.522818][ C1] ? do_ipt_get_ctl+0xaac/0x1180 [ 665.527766][ C1] ? nf_getsockopt+0x26e/0x290 [ 665.532539][ C1] ? ip_getsockopt+0x1c4/0x220 [ 665.537311][ C1] ? do_sock_getsockopt+0x35d/0x650 [ 665.542533][ C1] __reset_page_owner+0x71/0x1f0 [ 665.547495][ C1] __free_frozen_pages+0xc65/0xe60 [ 665.552636][ C1] __put_partials+0x161/0x1c0 [ 665.557329][ C1] put_cpu_partial+0x17c/0x250 [ 665.562102][ C1] ? put_cpu_partial+0x6d/0x250 [ 665.566965][ C1] __slab_free+0x2f7/0x400 [ 665.571389][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 665.577731][ C1] ? __phys_addr+0xd3/0x180 [ 665.582247][ C1] qlist_free_all+0x97/0x140 [ 665.586854][ C1] kasan_quarantine_reduce+0x148/0x160 [ 665.592326][ C1] __kasan_slab_alloc+0x22/0x80 [ 665.597210][ C1] __kmalloc_node_noprof+0x21b/0x4e0 [ 665.602507][ C1] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 665.608599][ C1] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 665.614534][ C1] ? rcu_is_watching+0x15/0xb0 [ 665.619309][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 665.625654][ C1] ? __mutex_lock+0x330/0xe80 [ 665.630370][ C1] ? alloc_counters+0xd3/0x6d0 [ 665.635161][ C1] vzalloc_noprof+0xb2/0xf0 [ 665.639681][ C1] ? alloc_counters+0xd3/0x6d0 [ 665.644466][ C1] alloc_counters+0xd3/0x6d0 [ 665.649070][ C1] ? net_generic+0x1e/0x240 [ 665.653598][ C1] ? net_generic+0x1e/0x240 [ 665.658120][ C1] ? __pfx_alloc_counters+0x10/0x10 [ 665.663343][ C1] ? xt_find_table_lock+0x35e/0x3e0 [ 665.668561][ C1] do_ipt_get_ctl+0xaac/0x1180 [ 665.673346][ C1] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 665.678568][ C1] ? __mutex_trylock_common+0x153/0x260 [ 665.684129][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 665.690050][ C1] ? rcu_is_watching+0x15/0xb0 [ 665.694834][ C1] ? nf_getsockopt+0x224/0x290 [ 665.699616][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 665.705259][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 665.710291][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 665.716288][ C1] ? __might_fault+0xb0/0x130 [ 665.720990][ C1] nf_getsockopt+0x26e/0x290 [ 665.725603][ C1] ip_getsockopt+0x1c4/0x220 [ 665.730208][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 665.735335][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 665.740717][ C1] do_sock_getsockopt+0x35d/0x650 [ 665.745758][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 665.751320][ C1] ? do_syscall_64+0x20/0x3b0 [ 665.756043][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 665.761256][ C1] ? do_syscall_64+0x20/0x3b0 [ 665.765949][ C1] ? do_syscall_64+0x20/0x3b0 [ 665.770641][ C1] do_syscall_64+0xfa/0x3b0 [ 665.775154][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.780367][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.786441][ C1] ? clear_bhb_loop+0x60/0xb0 [ 665.791139][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.797038][ C1] RIP: 0033:0x7f68d9d9066a [ 665.801477][ C1] RSP: 002b:00007ffd582b34d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 665.809903][ C1] RAX: ffffffffffffffda RBX: 00007ffd582b3560 RCX: 00007f68d9d9066a [ 665.817884][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 665.825864][ C1] RBP: 0000000000000003 R08: 00007ffd582b34fc R09: 00007ffd582b3917 [ 665.833842][ C1] R10: 00007ffd582b3560 R11: 0000000000000202 R12: 00007f68d9f83500 [ 665.841825][ C1] R13: 00007ffd582b34fc R14: 0000000000000000 R15: 00007f68d9f85000 [ 665.849829][ C1] [ 665.852868][ C1] task:syz-executor state:R running task stack:21648 pid:5828 tgid:5828 ppid:5827 task_flags:0x400100 flags:0x00004002 [ 665.866362][ C1] Call Trace: [ 665.869648][ C1] [ 665.872591][ C1] __schedule+0x16a2/0x4cb0 [ 665.877131][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 665.882447][ C1] ? __pfx___schedule+0x10/0x10 [ 665.887324][ C1] ? __lock_acquire+0xab9/0xd20 [ 665.892185][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 665.897512][ C1] preempt_schedule_irq+0xb5/0x150 [ 665.902642][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 665.908389][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 665.914209][ C1] irqentry_exit+0x6f/0x90 [ 665.918638][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.924630][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 665.929922][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab d4 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 665.949541][ C1] RSP: 0018:ffffc90003d7f698 EFLAGS: 00000206 [ 665.955632][ C1] RAX: 98a5ebe0e1329d00 RBX: 0000000000000000 RCX: 98a5ebe0e1329d00 [ 665.963627][ C1] RDX: 0000000000000000 RSI: ffffffff8db72142 RDI: ffffffff8be1ca00 [ 665.971618][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 665.979606][ C1] R10: ffffc90003d7f858 R11: ffffffff81acff90 R12: 0000000000000002 [ 665.987594][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 665.995585][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.000714][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 666.006888][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.012034][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.017162][ C1] ? do_syscall_64+0xfa/0x3b0 [ 666.021852][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.026971][ C1] unwind_next_frame+0xc2/0x2390 [ 666.031929][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.037070][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.042198][ C1] ? __x64_sys_pipe2+0x5a/0x70 [ 666.046986][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 666.053160][ C1] arch_stack_walk+0x11c/0x150 [ 666.057951][ C1] ? do_syscall_64+0xfa/0x3b0 [ 666.062648][ C1] stack_trace_save+0x9c/0xe0 [ 666.067343][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 666.072741][ C1] save_stack+0xf7/0x1f0 [ 666.077002][ C1] ? __pfx_save_stack+0x10/0x10 [ 666.081873][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 666.087175][ C1] ? __put_partials+0x161/0x1c0 [ 666.092032][ C1] ? put_cpu_partial+0x17c/0x250 [ 666.096979][ C1] ? __slab_free+0x2f7/0x400 [ 666.101577][ C1] ? qlist_free_all+0x97/0x140 [ 666.106356][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 666.112001][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 666.117038][ C1] ? __kmalloc_cache_noprof+0x1be/0x3d0 [ 666.122598][ C1] ? alloc_pipe_info+0xe9/0x4d0 [ 666.127461][ C1] ? create_pipe_files+0x8a/0x760 [ 666.132495][ C1] ? __do_pipe_flags+0x4c/0x2d0 [ 666.137357][ C1] ? do_pipe2+0x9c/0x170 [ 666.141605][ C1] ? __x64_sys_pipe2+0x5a/0x70 [ 666.146390][ C1] ? do_syscall_64+0xfa/0x3b0 [ 666.151087][ C1] ? page_ext_put+0x97/0xc0 [ 666.155615][ C1] __reset_page_owner+0x71/0x1f0 [ 666.160573][ C1] __free_frozen_pages+0xc65/0xe60 [ 666.165726][ C1] __put_partials+0x161/0x1c0 [ 666.170428][ C1] put_cpu_partial+0x17c/0x250 [ 666.175217][ C1] ? put_cpu_partial+0x6d/0x250 [ 666.180096][ C1] __slab_free+0x2f7/0x400 [ 666.184529][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.190875][ C1] ? __phys_addr+0xd3/0x180 [ 666.195396][ C1] qlist_free_all+0x97/0x140 [ 666.200007][ C1] kasan_quarantine_reduce+0x148/0x160 [ 666.205490][ C1] __kasan_slab_alloc+0x22/0x80 [ 666.210359][ C1] __kmalloc_cache_noprof+0x1be/0x3d0 [ 666.215746][ C1] ? alloc_pipe_info+0xe9/0x4d0 [ 666.220614][ C1] alloc_pipe_info+0xe9/0x4d0 [ 666.225313][ C1] create_pipe_files+0x8a/0x760 [ 666.230186][ C1] ? rcu_is_watching+0x15/0xb0 [ 666.234974][ C1] __do_pipe_flags+0x4c/0x2d0 [ 666.239670][ C1] do_pipe2+0x9c/0x170 [ 666.243750][ C1] ? __pfx_do_pipe2+0x10/0x10 [ 666.248449][ C1] __x64_sys_pipe2+0x5a/0x70 [ 666.253055][ C1] do_syscall_64+0xfa/0x3b0 [ 666.257566][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.262783][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.268864][ C1] ? clear_bhb_loop+0x60/0xb0 [ 666.273552][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.279459][ C1] RIP: 0033:0x7fdb9dd8d649 [ 666.283879][ C1] RSP: 002b:00007fff7910b6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 666.292308][ C1] RAX: ffffffffffffffda RBX: 000055558564ed00 RCX: 00007fdb9dd8d649 [ 666.300297][ C1] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007fff7910b6e8 [ 666.308360][ C1] RBP: 00007fff7910ba90 R08: 0000000000000007 R09: 0000555585657bb0 [ 666.316342][ C1] R10: 1ea6f022629a4b1b R11: 0000000000000246 R12: 000055558564bad0 [ 666.324323][ C1] R13: 00005555856504e8 R14: 00007fff7910b810 R15: 0000555585654658 [ 666.332321][ C1] [ 666.335342][ C1] task:syz.1.911 state:R running task stack:24152 pid:9265 tgid:9259 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 666.348838][ C1] Call Trace: [ 666.352126][ C1] [ 666.355070][ C1] __schedule+0x16a2/0x4cb0 [ 666.359615][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 666.364923][ C1] ? __pfx___schedule+0x10/0x10 [ 666.369803][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.374933][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 666.380243][ C1] preempt_schedule_irq+0xb5/0x150 [ 666.385371][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 666.391116][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 666.396943][ C1] irqentry_exit+0x6f/0x90 [ 666.401372][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 666.407363][ C1] RIP: 0010:unwind_next_frame+0x1318/0x2390 [ 666.413268][ C1] Code: 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 <49> 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 [ 666.432888][ C1] RSP: 0018:ffffc9000fb7ec18 EFLAGS: 00000287 [ 666.438970][ C1] RAX: ffffffff824414e2 RBX: ffffffff8fbf6160 RCX: dffffc0000000000 [ 666.446956][ C1] RDX: ffffffff8fbf6160 RSI: ffffffff90406d38 RDI: ffffffff8be1c9a0 [ 666.454940][ C1] RBP: ffffffff8fbf6160 R08: 0000000000000001 R09: ffffffff8172aae5 [ 666.462926][ C1] R10: ffffc9000fb7ed38 R11: ffffffff81acff90 R12: ffffffff82441509 [ 666.470908][ C1] R13: ffffffff8fbf6160 R14: ffffc9000fb7ece8 R15: ffffffff8fbf6160 [ 666.478896][ C1] ? create_empty_buffers+0x39/0x530 [ 666.484200][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 666.490369][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.495488][ C1] ? create_empty_buffers+0x12/0x530 [ 666.500790][ C1] ? unwind_next_frame+0xd4/0x2390 [ 666.505918][ C1] ? unwind_next_frame+0xa5/0x2390 [ 666.511035][ C1] ? create_empty_buffers+0x3a/0x530 [ 666.516335][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 666.522498][ C1] arch_stack_walk+0x11c/0x150 [ 666.527281][ C1] ? create_empty_buffers+0x3a/0x530 [ 666.532581][ C1] stack_trace_save+0x9c/0xe0 [ 666.537269][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 666.542664][ C1] save_stack+0xf7/0x1f0 [ 666.546925][ C1] ? __pfx_save_stack+0x10/0x10 [ 666.551786][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 666.557080][ C1] ? __put_partials+0x161/0x1c0 [ 666.561937][ C1] ? put_cpu_partial+0x17c/0x250 [ 666.566881][ C1] ? __slab_free+0x2f7/0x400 [ 666.571478][ C1] ? qlist_free_all+0x97/0x140 [ 666.576342][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 666.581988][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 666.587020][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 666.592660][ C1] ? alloc_buffer_head+0x2a/0x270 [ 666.597690][ C1] ? folio_alloc_buffers+0x32d/0x640 [ 666.602977][ C1] ? create_empty_buffers+0x3a/0x530 [ 666.608278][ C1] ? page_ext_put+0x97/0xc0 [ 666.612800][ C1] __reset_page_owner+0x71/0x1f0 [ 666.617756][ C1] __free_frozen_pages+0xc65/0xe60 [ 666.622893][ C1] __put_partials+0x161/0x1c0 [ 666.627592][ C1] put_cpu_partial+0x17c/0x250 [ 666.632365][ C1] ? put_cpu_partial+0x6d/0x250 [ 666.637233][ C1] __slab_free+0x2f7/0x400 [ 666.641664][ C1] ? __phys_addr+0xd3/0x180 [ 666.646185][ C1] qlist_free_all+0x97/0x140 [ 666.650797][ C1] kasan_quarantine_reduce+0x148/0x160 [ 666.656271][ C1] __kasan_slab_alloc+0x22/0x80 [ 666.661138][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 666.666611][ C1] ? alloc_buffer_head+0x2a/0x270 [ 666.671652][ C1] alloc_buffer_head+0x2a/0x270 [ 666.676514][ C1] ? folio_alloc_buffers+0x30f/0x640 [ 666.681810][ C1] folio_alloc_buffers+0x32d/0x640 [ 666.686940][ C1] create_empty_buffers+0x3a/0x530 [ 666.692070][ C1] block_read_full_folio+0x116/0x830 [ 666.697377][ C1] ? __up_read+0x280/0x680 [ 666.701798][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 666.707182][ C1] filemap_read_folio+0x117/0x380 [ 666.712218][ C1] ? __pfx_blkdev_read_folio+0x10/0x10 [ 666.717685][ C1] ? __pfx_filemap_read_folio+0x10/0x10 [ 666.723251][ C1] ? maybe_unlock_mmap_for_io+0x16a/0x2d0 [ 666.728986][ C1] filemap_fault+0xb16/0x1200 [ 666.733687][ C1] ? __pfx_filemap_fault+0x10/0x10 [ 666.738816][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 666.744289][ C1] ? __handle_mm_fault+0x296f/0x5620 [ 666.749592][ C1] __do_fault+0x135/0x390 [ 666.753930][ C1] __handle_mm_fault+0x37ed/0x5620 [ 666.759074][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 666.764573][ C1] ? find_vma+0xe7/0x160 [ 666.768828][ C1] ? __pfx_find_vma+0x10/0x10 [ 666.773519][ C1] handle_mm_fault+0x2d5/0x7f0 [ 666.778308][ C1] do_user_addr_fault+0x764/0x1390 [ 666.783457][ C1] exc_page_fault+0x76/0xf0 [ 666.787979][ C1] asm_exc_page_fault+0x26/0x30 [ 666.792835][ C1] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 666.798651][ C1] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 666.818268][ C1] RSP: 0018:ffffc9000fb7fa18 EFLAGS: 00050206 [ 666.824352][ C1] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 666.832333][ C1] RDX: 0000000000000001 RSI: 00002000003c2000 RDI: ffffc9000fb7faa0 [ 666.840318][ C1] RBP: ffffc9000fb7fc30 R08: ffffc9000fb7fad7 R09: 1ffff92001f6ff5a [ 666.848298][ C1] R10: dffffc0000000000 R11: fffff52001f6ff5b R12: 0000000000000002 [ 666.856282][ C1] R13: dffffc0000000000 R14: ffffc9000fb7faa0 R15: 00002000003c2000 [ 666.864291][ C1] _copy_from_user+0x7a/0xb0 [ 666.868926][ C1] ___sys_recvmsg+0x12e/0x510 [ 666.873630][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 666.878879][ C1] ? __might_fault+0xb0/0x130 [ 666.883582][ C1] do_recvmmsg+0x307/0x770 [ 666.888026][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 666.893003][ C1] ? count_memcg_event_mm+0x21/0x260 [ 666.898306][ C1] ? count_memcg_event_mm+0x21/0x260 [ 666.903627][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 666.908676][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 666.914243][ C1] ? do_syscall_64+0xbe/0x3b0 [ 666.918936][ C1] do_syscall_64+0xfa/0x3b0 [ 666.923445][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.928667][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.934749][ C1] ? clear_bhb_loop+0x60/0xb0 [ 666.939523][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.945423][ C1] RIP: 0033:0x7fb225f8e929 [ 666.949845][ C1] RSP: 002b:00007fb226da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 666.958273][ C1] RAX: ffffffffffffffda RBX: 00007fb2261b6080 RCX: 00007fb225f8e929 [ 666.966254][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 666.974244][ C1] RBP: 00007fb226010b39 R08: 0000000000000000 R09: 0000000000000000 [ 666.982237][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 666.990219][ C1] R13: 0000000000000001 R14: 00007fb2261b6080 R15: 00007fff031e9888 [ 666.998233][ C1] [ 667.001266][ C1] task:kworker/1:6 state:R running task stack:23432 pid:5926 tgid:5926 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 667.014862][ C1] Workqueue: events_power_efficient gc_worker [ 667.020958][ C1] Call Trace: [ 667.024244][ C1] [ 667.027188][ C1] __schedule+0x16a2/0x4cb0 [ 667.031761][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 667.037074][ C1] ? __pfx___schedule+0x10/0x10 [ 667.041945][ C1] ? __lock_acquire+0xab9/0xd20 [ 667.046821][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 667.052123][ C1] preempt_schedule_irq+0xb5/0x150 [ 667.057255][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 667.063001][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 667.068820][ C1] irqentry_exit+0x6f/0x90 [ 667.073252][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 667.079244][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 667.086110][ C1] Code: f8 4d 85 e4 75 16 e8 71 93 27 f8 eb 15 e8 6a 93 27 f8 e8 35 9a cf 01 4d 85 e4 74 ea e8 5b 93 27 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 667.105737][ C1] RSP: 0018:ffffc900043df860 EFLAGS: 00000293 [ 667.111832][ C1] RAX: ffffffff89989ef5 RBX: 0000000000000000 RCX: ffff888031293c00 [ 667.119817][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.127813][ C1] RBP: ffffc900043df910 R08: ffffffff8fa0cbf7 R09: 1ffffffff1f4197e [ 667.135809][ C1] R10: dffffc0000000000 R11: fffffbfff1f4197f R12: 0000000000000200 [ 667.143798][ C1] R13: ffff888031a89018 R14: 1ffff9200087bf0c R15: dffffc0000000000 [ 667.151806][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 667.158081][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 667.164703][ C1] gc_worker+0x308/0x1380 [ 667.169057][ C1] ? gc_worker+0x264/0x1380 [ 667.173598][ C1] ? __pfx_gc_worker+0x10/0x10 [ 667.178389][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.183608][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 667.189347][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 667.195089][ C1] process_scheduled_works+0xade/0x17b0 [ 667.200685][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 667.206697][ C1] worker_thread+0x8a0/0xda0 [ 667.211306][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 667.217659][ C1] ? __kthread_parkme+0x7b/0x200 [ 667.222627][ C1] kthread+0x711/0x8a0 [ 667.226712][ C1] ? __pfx_worker_thread+0x10/0x10 [ 667.231835][ C1] ? __pfx_kthread+0x10/0x10 [ 667.236443][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.241655][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.246866][ C1] ? __pfx_kthread+0x10/0x10 [ 667.251469][ C1] ret_from_fork+0x3fc/0x770 [ 667.256075][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 667.261203][ C1] ? __switch_to_asm+0x39/0x70 [ 667.265979][ C1] ? __switch_to_asm+0x33/0x70 [ 667.270753][ C1] ? __pfx_kthread+0x10/0x10 [ 667.275359][ C1] ret_from_fork_asm+0x1a/0x30 [ 667.280154][ C1] [ 667.283187][ C1] rcu: rcu_preempt kthread starved for 8407 jiffies! g28341 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 667.294300][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 667.304270][ C1] rcu: RCU grace-period kthread stack dump: [ 667.310155][ C1] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 667.323652][ C1] Call Trace: [ 667.326941][ C1] [ 667.329879][ C1] __schedule+0x16a2/0x4cb0 [ 667.334418][ C1] ? schedule+0x165/0x360 [ 667.338768][ C1] ? __pfx___schedule+0x10/0x10 [ 667.343651][ C1] ? schedule+0x91/0x360 [ 667.347915][ C1] schedule+0x165/0x360 [ 667.352094][ C1] schedule_timeout+0x12b/0x270 [ 667.356966][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 667.362347][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 667.368255][ C1] ? __pfx_process_timeout+0x10/0x10 [ 667.373558][ C1] ? prepare_to_swait_event+0x341/0x380 [ 667.379130][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 667.384004][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 667.390180][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 667.395472][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 667.400699][ C1] rcu_gp_kthread+0x99/0x390 [ 667.405300][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 667.410507][ C1] ? __kthread_parkme+0x7b/0x200 [ 667.415458][ C1] ? __kthread_parkme+0x1a1/0x200 [ 667.420506][ C1] kthread+0x711/0x8a0 [ 667.424594][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 667.429807][ C1] ? __pfx_kthread+0x10/0x10 [ 667.434414][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.439631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.444840][ C1] ? __pfx_kthread+0x10/0x10 [ 667.449444][ C1] ret_from_fork+0x3fc/0x770 [ 667.454054][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 667.459178][ C1] ? __switch_to_asm+0x39/0x70 [ 667.463953][ C1] ? __switch_to_asm+0x33/0x70 [ 667.468725][ C1] ? __pfx_kthread+0x10/0x10 [ 667.473328][ C1] ret_from_fork_asm+0x1a/0x30 [ 667.478118][ C1] [ 667.481143][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 667.487500][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 667.499140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.509212][ C1] RIP: 0010:lock_release+0x96/0x3e0 [ 667.514424][ C1] Code: a0 04 ff 10 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 10 9d 92 41 83 bf ec 0a 00 00 00 0f 85 1e 02 00 00 49 81 3e 00 c3 60 93 <0f> 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b [ 667.534051][ C1] RSP: 0018:ffffc90000a07c30 EFLAGS: 00000202 [ 667.540136][ C1] RAX: 0000000000000000 RBX: ffffc90000a07d01 RCX: bc23822c233f8c00 [ 667.548121][ C1] RDX: ffffffff903d4201 RSI: ffffffff8be1c9e0 RDI: ffffffff8be1c9a0 [ 667.556104][ C1] RBP: dffffc0000000000 R08: ffffc90000a07dc7 R09: 0000000000000000 [ 667.564084][ C1] R10: ffffc90000a07db8 R11: fffff52000140fb9 R12: ffffc90000a080f8 [ 667.572070][ C1] R13: ffffffff8172aae5 R14: ffffffff8e13f0e0 R15: ffff88801d6a5a00 [ 667.580058][ C1] FS: 0000000000000000(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 667.588995][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.595588][ C1] CR2: 00007fff6287795c CR3: 000000000df38000 CR4: 00000000003526f0 [ 667.603572][ C1] Call Trace: [ 667.606863][ C1] [ 667.609720][ C1] ? unwind_next_frame+0xa5/0x2390 [ 667.614840][ C1] unwind_next_frame+0x19a9/0x2390 [ 667.619968][ C1] ? unwind_next_frame+0xa5/0x2390 [ 667.625090][ C1] ? kasan_save_free_info+0x46/0x50 [ 667.630302][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 667.636470][ C1] arch_stack_walk+0x11c/0x150 [ 667.641257][ C1] ? __kasan_slab_free+0x62/0x70 [ 667.646213][ C1] stack_trace_save+0x9c/0xe0 [ 667.650901][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 667.656279][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 667.661661][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 667.667054][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 667.672439][ C1] ? nft_do_chain+0x40c/0x1920 [ 667.677220][ C1] ? __lock_acquire+0xab9/0xd20 [ 667.682082][ C1] kasan_save_track+0x3e/0x80 [ 667.686766][ C1] ? kasan_save_track+0x3e/0x80 [ 667.691624][ C1] ? kasan_save_free_info+0x46/0x50 [ 667.696876][ C1] ? skb_release_data+0x62d/0x7c0 [ 667.701912][ C1] kasan_save_free_info+0x46/0x50 [ 667.706946][ C1] __kasan_slab_free+0x62/0x70 [ 667.711725][ C1] kmem_cache_free+0x18f/0x400 [ 667.716508][ C1] skb_release_data+0x62d/0x7c0 [ 667.721379][ C1] consume_skb+0x9e/0xf0 [ 667.725631][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 667.730844][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 667.736586][ C1] ? nf_ip_checksum+0x13c/0x510 [ 667.741455][ C1] nft_synproxy_do_eval+0x345/0x570 [ 667.746674][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 667.752405][ C1] ? queue_work_on+0x115/0x270 [ 667.757178][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.762394][ C1] ? queue_work_on+0x1ed/0x270 [ 667.767178][ C1] nft_do_chain+0x40c/0x1920 [ 667.771779][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.776994][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 667.782379][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 667.788110][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 667.793179][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 667.798391][ C1] nft_do_chain_inet+0x25d/0x340 [ 667.803346][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 667.808827][ C1] ? ipt_do_table+0x2a3/0x1630 [ 667.813601][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 667.818991][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 667.824481][ C1] nf_hook_slow+0xc2/0x220 [ 667.828935][ C1] NF_HOOK+0x206/0x3a0 [ 667.833043][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 667.839047][ C1] ? NF_HOOK+0x9a/0x3a0 [ 667.843222][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 667.847824][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 667.853136][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 667.859139][ C1] ? skb_dst+0x4f/0xd0 [ 667.863227][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 667.868273][ C1] NF_HOOK+0x30c/0x3a0 [ 667.872356][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 667.877476][ C1] ? NF_HOOK+0x9a/0x3a0 [ 667.881642][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 667.886239][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 667.890858][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 667.895999][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 667.900512][ C1] __netif_receive_skb+0x143/0x380 [ 667.905637][ C1] ? process_backlog+0x2d5/0x14f0 [ 667.910675][ C1] process_backlog+0x60e/0x14f0 [ 667.915555][ C1] ? __pfx_process_backlog+0x10/0x10 [ 667.920863][ C1] __napi_poll+0xc4/0x480 [ 667.925209][ C1] ? net_rx_action+0x46d/0xe30 [ 667.929991][ C1] net_rx_action+0x707/0xe30 [ 667.934602][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 667.939724][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 667.944946][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 667.950269][ C1] handle_softirqs+0x283/0x870 [ 667.955047][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 667.959827][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 667.965124][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 667.970340][ C1] __irq_exit_rcu+0xca/0x1f0 [ 667.974939][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 667.980155][ C1] irq_exit_rcu+0x9/0x30 [ 667.984403][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 667.990059][ C1] [ 667.992991][ C1] [ 667.995926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.001913][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 668.007648][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 fd 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 668.027276][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 668.033369][ C1] RAX: bc23822c233f8c00 RBX: ffffffff81976938 RCX: bc23822c233f8c00 [ 668.041356][ C1] RDX: 0000000000000001 RSI: ffffffff8d98544c RDI: ffffffff8be1ca00 [ 668.049341][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 668.057328][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0cbf0 [ 668.065315][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad4b40 [ 668.073303][ C1] ? do_idle+0x1e8/0x510 [ 668.077576][ C1] default_idle+0x13/0x20 [ 668.081919][ C1] default_idle_call+0x74/0xb0 [ 668.086693][ C1] do_idle+0x1e8/0x510 [ 668.090779][ C1] ? __pfx_do_idle+0x10/0x10 [ 668.095398][ C1] cpu_startup_entry+0x44/0x60 [ 668.100179][ C1] start_secondary+0x101/0x110 [ 668.104958][ C1] common_startup_64+0x13e/0x147 [ 668.109924][ C1] [ 670.700402][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.719460][ T1302] ieee802154 phy1 wpan1: encryption failed: -22