last executing test programs: 16m41.732349209s ago: executing program 3 (id=1036): socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="feffffff0000"], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 16m40.284240579s ago: executing program 3 (id=1037): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000002c0)=0x2) 16m39.925884435s ago: executing program 3 (id=1041): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x82762000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_socket_connect_nvme_tcp() dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_complete(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16m37.168524007s ago: executing program 3 (id=1046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008", @ANYRES32=r0], 0x4c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 16m34.369625082s ago: executing program 3 (id=1052): syz_io_uring_setup(0x3917, &(0x7f0000000080)={0x0, 0x10, 0x40, 0x0, 0x273, 0x0, 0x0}, &(0x7f0000003000)=0x0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_modify_offsets$generic(r0, 0x0, 0x2c, 0x10000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 16m31.657514426s ago: executing program 3 (id=1056): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@remote, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0xfffb, 0xffff}}}}}, 0x0) 16m16.052355725s ago: executing program 32 (id=1056): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@remote, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0xfffb, 0xffff}}}}}, 0x0) 5m45.925741519s ago: executing program 1 (id=2873): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m45.041617687s ago: executing program 1 (id=2878): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) close(r1) 5m44.219687661s ago: executing program 1 (id=2880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000804}], 0x1, 0x40800) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0xffffff43}, {&(0x7f0000000540)=""/117, 0x75}], 0x2) 5m42.501068649s ago: executing program 1 (id=2882): sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x400c4d1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x1, 0xf2d, 0xad5c, 'snmp\x00', 'syz1\x00', {0x40}}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pimreg\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x2, 0x49}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xfff, 0x1, 0x3, 'syz0\x00', 'syz1\x00', {0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000f80)=""/102368, 0x18fe0) syz_ublk_setup_io_uring(0x40be, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xce) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0xd0, 0xd0, 0xd0, 0x1a0, 0x388, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'vxcan1\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [], [0x0, 0x0, 0x0, 0xffffffff], 'batadv_slave_1\x00', 'wlan0\x00', {}, {}, 0x5e}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff], [0xff, 0xff, 0xffffff00, 0xff000000], 'wlan1\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@ipv6={@mcast2, @dev, [], [0x0, 0xffffff00], 'vxcan1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x7fffffff, 0x25ce, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611059000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 5m39.543373238s ago: executing program 1 (id=2888): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2b, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6fb}, @map_fd, @call={0x85, 0x0, 0x0, 0x3}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 5m38.873750451s ago: executing program 1 (id=2893): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800)={0x27, 0x0, 0x1, 0x5, 0x6, 0xc, "486a726ac693d17b958d8de3a9195666e9b9eee0af9f397375ba14b9d9f92b04dadb29b690babea17b19c76ceeec85ad407e2e9dcdedd816ee430daa0401a4", 0x17}, 0x60) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x12a4079, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='cpuset\x00') preadv(r4, &(0x7f0000002940)=[{0x0}], 0x1, 0x8e, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5m23.674636858s ago: executing program 33 (id=2893): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800)={0x27, 0x0, 0x1, 0x5, 0x6, 0xc, "486a726ac693d17b958d8de3a9195666e9b9eee0af9f397375ba14b9d9f92b04dadb29b690babea17b19c76ceeec85ad407e2e9dcdedd816ee430daa0401a4", 0x17}, 0x60) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x12a4079, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='cpuset\x00') preadv(r4, &(0x7f0000002940)=[{0x0}], 0x1, 0x8e, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m32.368767933s ago: executing program 4 (id=3064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m30.468290934s ago: executing program 4 (id=3070): openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e0c000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) 4m28.218958764s ago: executing program 4 (id=3071): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000019100)=ANY=[@ANYBLOB="05000000100e0000", @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x28000880}, 0x4) 4m27.300219988s ago: executing program 4 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4m26.519186976s ago: executing program 4 (id=3077): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) close(0x3) 3m52.848407577s ago: executing program 4 (id=3081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 3m37.408637854s ago: executing program 34 (id=3081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 2m56.534844327s ago: executing program 7 (id=3222): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00"/91], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2m54.988351763s ago: executing program 7 (id=3227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m54.820629399s ago: executing program 6 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325242, 0x0, [], [0x2b8], [0x0, 0x1], [0x0, 0x0, 0x2]}) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1c, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) mprotect(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1) getsockopt$inet6_buf(r6, 0x29, 0x30, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m54.323782821s ago: executing program 7 (id=3232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 2m52.467650446s ago: executing program 6 (id=3234): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 2m49.797948446s ago: executing program 7 (id=3236): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m49.164906575s ago: executing program 6 (id=3239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f7", 0x81}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0x59}, {&(0x7f00000005c0)=""/132, 0x84}], 0x2) 2m45.844913277s ago: executing program 6 (id=3243): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, {0x2, 0x0, 0x7, 0x2, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000003c0)={0x1, 0x80000000, 0x46, 0x0, 0x5}) 2m45.442267065s ago: executing program 7 (id=3245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400d8a9c421", @ANYRES32=r7, @ANYBLOB="080001007f000001080008000001000008000200e0000002080008001203000008000900030000000800090007010000"], 0x48}, 0x1, 0x0, 0x0, 0x40410}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0x301, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0xab, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x401, 0x0, 0x7ffffffffffffffd, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x800000000000, 0x100000000]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x80796c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000240)=[@flags={0x3, 0x200000}, @cr0={0x0, 0x40000002}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066"], 0x330}}, 0x4008800) 2m45.214333932s ago: executing program 6 (id=3248): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2m41.08949389s ago: executing program 7 (id=3251): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x401}, 0x2f) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000004c0)=')', 0x1}]) 2m40.89285678s ago: executing program 6 (id=3253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) io_setup(0xff, &(0x7f0000000380)) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r9 = fsmount(r8, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000180)="980ede09b66dbaae3520d1e3cbafc86e0e07afbaf3f119836754d01ad3aed8bcb8c649f8b4a5d93c428a14cb43397e2a7e620736b8a9f5c29da503560e6d0a338dafc99065e10ffeec8f78ee4d6457", &(0x7f0000000400)=""/213, &(0x7f0000000500)="46e790916f8555e15e1d136271c50b38ad3d88e181c3223a1b5b57a976d287808f5132eadc2af39b126da8e63c3a00040000bb9c6651a82fe4d8cf2eb0adedb6414e699adba9d412ef21f7b8b48a545d4aaac675534434c2818a7b185e05aa1dbc36d9a82a41f2b4f5d103f3", &(0x7f0000000580), 0x800, r6, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) listen(r10, 0xf) ioctl$sock_TIOCOUTQ(r10, 0x5411, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0xfffffed3, &(0x7f0000003580)={&(0x7f0000000380)=@newae={0x64, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x4d4, 0x4, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x34ff}}, 0x64}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 2m25.783368902s ago: executing program 35 (id=3253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) io_setup(0xff, &(0x7f0000000380)) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r9 = fsmount(r8, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000180)="980ede09b66dbaae3520d1e3cbafc86e0e07afbaf3f119836754d01ad3aed8bcb8c649f8b4a5d93c428a14cb43397e2a7e620736b8a9f5c29da503560e6d0a338dafc99065e10ffeec8f78ee4d6457", &(0x7f0000000400)=""/213, &(0x7f0000000500)="46e790916f8555e15e1d136271c50b38ad3d88e181c3223a1b5b57a976d287808f5132eadc2af39b126da8e63c3a00040000bb9c6651a82fe4d8cf2eb0adedb6414e699adba9d412ef21f7b8b48a545d4aaac675534434c2818a7b185e05aa1dbc36d9a82a41f2b4f5d103f3", &(0x7f0000000580), 0x800, r6, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) listen(r10, 0xf) ioctl$sock_TIOCOUTQ(r10, 0x5411, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0xfffffed3, &(0x7f0000003580)={&(0x7f0000000380)=@newae={0x64, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x4d4, 0x4, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x34ff}}, 0x64}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 2m25.738337205s ago: executing program 36 (id=3251): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x401}, 0x2f) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000004c0)=')', 0x1}]) 32.942335074s ago: executing program 5 (id=3415): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0xc0, @local, 0x2}, 0x1c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x2804c040}, 0x81) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 31.145250631s ago: executing program 5 (id=3421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="0afff088a8", 0x0, 0xc339, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x2a) 29.797335664s ago: executing program 5 (id=3425): socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000140)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000001c0)="03", 0x1, r0) 28.9462984s ago: executing program 5 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="cc00330080000000ffffffffffff080211000000f70b87594b3f00000000000001000100dd068b7668a2"], 0xe8}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 28.291411236s ago: executing program 5 (id=3431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20004000) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f00000000c0)) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f00008b2000/0x4000)=nil, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) 26.585739299s ago: executing program 5 (id=3433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x84d9000) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fallocate(r3, 0x1, 0x100000000, 0x10000) 16.0213045s ago: executing program 8 (id=3468): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{}, {&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759e5bfba0a1c8b2c7d20228827e09902302ddc29760ee36ce64699", 0x44}, {&(0x7f00000001c0)="a786019f1c378f4f095e0925b36fc2189c3ba20825b9fe4ddc95791ce40bd7f8bd7c", 0x22}], 0x3}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 14.585846182s ago: executing program 0 (id=3469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8f", 0xbd, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000440)=""/206, 0xce, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224\x00'}}) 14.38884928s ago: executing program 8 (id=3472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13.214580981s ago: executing program 0 (id=3473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="0afff088a8", 0x0, 0xc339, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x2a) 11.913267553s ago: executing program 0 (id=3474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff"], 0x94}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) 11.710761085s ago: executing program 8 (id=3475): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}) 11.348455325s ago: executing program 37 (id=3433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x84d9000) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fallocate(r3, 0x1, 0x100000000, 0x10000) 11.32764944s ago: executing program 9 (id=3477): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c0004801c0001800a00010071756575650000000c00028006000140040000002c0001800a00010071"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 9.856842853s ago: executing program 0 (id=3479): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, 0x0) 9.532557705s ago: executing program 9 (id=3480): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x5, 0x30}, 0xc) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 9.103675644s ago: executing program 9 (id=3482): syz_open_dev$video4linux(0x0, 0xfff, 0x40840) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="722ea15074c78ac3fe4918deb7172c", 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f00000000c0)='eth0\x00', 0x42, 0x1, 0x0) lseek(r3, 0x3, 0x1) 8.241206389s ago: executing program 2 (id=3483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8f", 0xbd, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000440)=""/206, 0xce, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224\x00'}}) 7.170364281s ago: executing program 8 (id=3484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="0afff088a8", 0x0, 0xc339, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x2a) 6.866003832s ago: executing program 2 (id=3485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.281174619s ago: executing program 8 (id=3486): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000001c0)={0x60000012}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$loop(0x0, 0x25b6, 0x0) socketpair(0x8, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000380)={'veth0_to_bond\x00', @remote}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x306021, 0x0) 5.401992986s ago: executing program 9 (id=3487): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5.234823999s ago: executing program 2 (id=3488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff"], 0x94}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) 4.581254147s ago: executing program 2 (id=3489): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000080000000000010000000900030073797a30000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c0004801c0001800a00010071756575650000000c00028006000140040000002c0001800a00010071"], 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.581112831s ago: executing program 9 (id=3490): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x3b42, 0x2, 0xfffffffe, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d78009282010203010902"], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.262134083s ago: executing program 0 (id=3491): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x5, 0x30}, 0xc) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 2.729717543s ago: executing program 2 (id=3492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000300)={{@local, 0x2}, 0xfffffffffffffffe, 0x9, 0xffffffff, 0x43}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) 2.029017902s ago: executing program 8 (id=3493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x100000) 1.994814366s ago: executing program 9 (id=3494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8f", 0xbd, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000440)=""/206, 0xce, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224\x00'}}) 1.45368866s ago: executing program 0 (id=3495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="0afff088a8", 0x0, 0xc339, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x2a) 0s ago: executing program 2 (id=3496): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0x3, 0x2a, "93635527de507fc4976135f52387acd68bedd6dff2ec991fc15bb8ad7f2fd8f922a45ba907bac5077443"}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x20, 0x30}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 17] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 943.380494][ T5717] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 946.621791][ T5717] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 946.621827][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.655972][ T5717] usb 5-1: can't set config #1, error -71 [ 946.712189][ T5717] usb 5-1: USB disconnect, device number 4 [ 947.933954][ T59] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 948.123560][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2016'. [ 948.162305][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2017'. [ 952.793556][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 952.860092][T12454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 953.015400][T12462] 9p: Bad value for 'rfdno' [ 953.161238][T12468] "syz.1.2037" (12468) uses obsolete ecb(arc4) skcipher [ 953.421110][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'. [ 953.421846][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'. [ 955.799756][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 955.944363][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 958.378951][T12507] 9p: Bad value for 'rfdno' [ 958.892571][ T5717] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 959.223086][ T5717] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 959.223131][ T5717] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 959.231905][ T5717] usb 6-1: string descriptor 0 read error: -22 [ 959.232040][ T5717] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 959.232060][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.275162][ T5717] usb 6-1: low speed audio streaming not supported [ 959.275183][ T5717] usb 6-1: low speed audio streaming not supported [ 959.465025][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 959.515501][ T5789] usb 6-1: USB disconnect, device number 5 [ 959.526521][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 959.984647][T12543] 9p: Bad value for 'rfdno' [ 962.487963][T12380] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 962.630415][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 962.637931][T12380] usb 6-1: Using ep0 maxpacket: 16 [ 962.658340][T12380] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.658363][T12380] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.663500][T12380] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.663528][T12380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.663545][T12380] usb 6-1: Product: syz [ 962.663558][T12380] usb 6-1: Manufacturer: syz [ 962.663583][T12380] usb 6-1: SerialNumber: syz [ 962.747478][T12380] usb 6-1: 0:2 : does not exist [ 962.868542][T12568] No control pipe specified [ 962.945113][T12380] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 964.059902][T12380] usb 6-1: USB disconnect, device number 6 [ 964.352319][T12583] 9pnet_fd: Insufficient options for proto=fd [ 964.408991][T12033] udevd[12033]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.913186][T12604] No control pipe specified [ 967.266973][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 968.056992][T12619] 9p: Bad value for 'rfdno' [ 969.636198][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2098'. [ 970.090113][T12654] 9p: Bad value for 'rfdno' [ 972.036586][T12686] 9p: Bad value for 'rfdno' [ 974.144646][T12719] 9p: Bad value for 'rfdno' [ 975.898300][ T5789] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 976.049472][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 976.053529][ T5789] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 976.053553][ T5789] usb 5-1: config 0 has no interface number 0 [ 976.053598][ T5789] usb 5-1: config 0 interface 184 has no altsetting 0 [ 976.100176][ T5789] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 976.100202][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.100220][ T5789] usb 5-1: Product: syz [ 976.100232][ T5789] usb 5-1: Manufacturer: syz [ 976.100244][ T5789] usb 5-1: SerialNumber: syz [ 976.116002][ T5789] usb 5-1: config 0 descriptor?? [ 976.357882][ T822] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 977.253379][ T822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.253431][ T822] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.253522][ T822] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 977.253542][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.297270][ T822] usb 6-1: config 0 descriptor?? [ 977.329950][ T822] qmi_wwan 6-1:0.0: skipping garbage [ 977.336613][ T822] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 977.514355][ T5717] usb 6-1: USB disconnect, device number 7 [ 978.022727][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 978.022756][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 978.023335][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 978.023361][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 978.023376][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 978.023391][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 978.023660][ T5789] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 978.156931][ T5789] usb 5-1: USB disconnect, device number 5 [ 980.597918][ T5717] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 980.706514][T12798] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.2155'. [ 980.756371][ T5717] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 980.756389][ T5717] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 980.756399][ T5717] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 980.756417][ T5717] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 980.756436][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 980.756446][ T5717] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 980.803175][ T5717] usb 6-1: string descriptor 0 read error: -22 [ 980.803334][ T5717] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 980.803363][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.879920][ T5717] usb 6-1: config 0 descriptor?? [ 980.883051][ T5717] hub 6-1:0.0: bad descriptor, ignoring hub [ 980.883071][ T5717] hub 6-1:0.0: probe with driver hub failed with error -5 [ 981.198452][ T5789] usb 6-1: USB disconnect, device number 8 [ 982.677938][ T5789] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 982.827884][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 982.829802][ T5789] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 982.829817][ T5789] usb 5-1: config 0 has no interface number 0 [ 982.829841][ T5789] usb 5-1: config 0 interface 184 has no altsetting 0 [ 982.835928][ T5789] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 982.835954][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.835971][ T5789] usb 5-1: Product: syz [ 982.835983][ T5789] usb 5-1: Manufacturer: syz [ 982.835996][ T5789] usb 5-1: SerialNumber: syz [ 983.071065][ T5789] usb 5-1: config 0 descriptor?? [ 984.485777][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 984.485807][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 984.488022][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 984.488049][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 984.488089][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 984.488104][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 984.488392][ T5789] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 984.524405][T12845] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.2170'. [ 984.582743][ T5789] usb 5-1: USB disconnect, device number 6 [ 985.246281][ T5789] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 985.423463][ T5789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.424561][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.424590][ T5789] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 985.424602][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.481577][ T5789] usb 6-1: config 0 descriptor?? [ 985.558179][ T5789] qmi_wwan 6-1:0.0: skipping garbage [ 985.558483][ T5789] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 985.740107][ T5789] usb 6-1: USB disconnect, device number 9 [ 986.575974][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2184'. [ 986.783594][T12885] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.2186'. [ 987.279590][ T5789] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 987.510987][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 987.528804][ T5789] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 987.528829][ T5789] usb 5-1: config 0 has no interface number 0 [ 987.528863][ T5789] usb 5-1: config 0 interface 184 has no altsetting 0 [ 987.531177][ T5789] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 987.531201][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.531218][ T5789] usb 5-1: Product: syz [ 987.531230][ T5789] usb 5-1: Manufacturer: syz [ 987.531242][ T5789] usb 5-1: SerialNumber: syz [ 987.601438][ T5789] usb 5-1: config 0 descriptor?? [ 988.328609][T12917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2199'. [ 988.516653][T12921] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2202'. [ 989.660071][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 989.660099][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 989.660590][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 989.660611][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 989.660626][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 989.660641][ T5789] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 989.660927][ T5789] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 989.753852][ T5789] usb 5-1: USB disconnect, device number 7 [ 990.914440][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 990.944726][T12948] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2214'. [ 992.542767][T12963] 9p: Could not find request transport: fd0xffffffffffffffff [ 992.817930][ T5717] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 992.977923][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 992.980317][ T5717] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 992.980341][ T5717] usb 5-1: config 0 has no interface number 0 [ 992.980384][ T5717] usb 5-1: config 0 interface 184 has no altsetting 0 [ 992.982391][ T5717] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 992.982415][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.982439][ T5717] usb 5-1: Product: syz [ 992.982451][ T5717] usb 5-1: Manufacturer: syz [ 992.982461][ T5717] usb 5-1: SerialNumber: syz [ 992.993773][ T5717] usb 5-1: config 0 descriptor?? [ 993.062788][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.062855][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.234595][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 993.504111][T12988] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2229'. [ 994.633959][ T5717] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 994.633989][ T5717] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 994.635229][ T5717] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 994.635252][ T5717] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 994.635268][ T5717] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 994.635284][ T5717] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 994.635571][ T5717] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 994.724861][ T5717] usb 5-1: USB disconnect, device number 8 [ 996.477245][T13008] 9p: Could not find request transport: fd0x0000000000000004 [ 996.824708][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2239'. [ 998.871646][T13048] 9p: Could not find request transport: fd0xffffffffffffffff [ 998.922849][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 1002.055151][T13086] 9pnet_fd: Insufficient options for proto=fd [ 1002.707883][ T822] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1002.892521][ T822] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1002.892549][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.892577][ T822] usb 5-1: Product: syz [ 1002.892584][ T822] usb 5-1: Manufacturer: syz [ 1002.892591][ T822] usb 5-1: SerialNumber: syz [ 1002.941927][ T822] usb 5-1: config 0 descriptor?? [ 1002.958088][ T822] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 009 [ 1004.273372][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1004.318522][ T822] i2c i2c-1: failure reading functionality [ 1004.413985][ T59] Bluetooth: hci5: connection err: -111 [ 1004.414955][ T822] i2c i2c-1: connected i2c-tiny-usb device [ 1004.430149][ T822] usb 5-1: USB disconnect, device number 9 [ 1006.692219][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1006.692300][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1007.029488][T13128] 9p: Bad value for 'wfdno' [ 1009.941805][ T5789] IPVS: starting estimator thread 0... [ 1010.147943][T13154] IPVS: using max 9 ests per chain, 21600 per kthread [ 1011.716548][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 1011.717293][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 1012.399895][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 1012.399916][T13180] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2295'. [ 1013.134030][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 1015.857207][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2307'. [ 1015.857290][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2307'. [ 1016.448323][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'. [ 1020.026939][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2321'. [ 1020.027579][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2321'. [ 1021.290919][T13270] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1021.291012][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1022.517009][ T822] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 1022.679805][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.679855][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.679890][ T822] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1022.679901][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.683717][ T822] usb 5-1: config 0 descriptor?? [ 1022.693515][ T822] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1022.892598][ T5717] usb 5-1: USB disconnect, device number 10 [ 1025.556950][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2333'. [ 1025.561356][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2333'. [ 1026.625469][T13312] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2336'. [ 1026.625562][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 1028.808036][ T5717] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1028.931931][T13340] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2346'. [ 1028.958049][ T5717] usb 5-1: Using ep0 maxpacket: 8 [ 1028.990716][ T5717] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1028.990740][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1028.990784][ T5717] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1028.994758][ T5717] usb 5-1: string descriptor 0 read error: -22 [ 1028.994903][ T5717] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.994925][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.092817][ T5717] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1029.092844][ T5717] cdc_ncm 5-1:1.0: bind() failure [ 1029.450346][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 1029.450904][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 1030.151379][T12380] usb 5-1: USB disconnect, device number 11 [ 1030.625101][T13361] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2350'. [ 1030.625169][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'. [ 1032.990250][T13389] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2361'. [ 1033.669796][T13401] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2365'. [ 1033.670130][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2365'. [ 1033.718450][ T59] Bluetooth: Wrong link type (-71) [ 1034.378875][T13403] fuse: Bad value for 'fd' [ 1036.156744][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'. [ 1036.157384][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'. [ 1036.808538][T13436] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2377'. [ 1039.305662][T13454] fuse: Bad value for 'fd' [ 1039.432457][T13457] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1039.432481][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1042.066726][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1042.067427][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1043.347657][T13502] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2395'. [ 1044.778673][ T5717] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1045.562672][ T5717] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1045.562695][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.562705][ T5717] usb 5-1: Product: syz [ 1045.562711][ T5717] usb 5-1: Manufacturer: syz [ 1045.562718][ T5717] usb 5-1: SerialNumber: syz [ 1045.601708][ T5717] usb 5-1: config 0 descriptor?? [ 1045.606773][ T5717] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 1046.065588][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'. [ 1046.066322][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'. [ 1046.949250][ T5717] i2c i2c-1: failure reading functionality [ 1046.988451][ T5717] i2c i2c-1: connected i2c-tiny-usb device [ 1046.994329][ T5717] usb 5-1: USB disconnect, device number 12 [ 1047.616637][T13551] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2410'. [ 1048.914766][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2420'. [ 1048.915433][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2420'. [ 1049.697935][ T822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1049.878153][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 1049.880226][ T822] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1049.880251][ T822] usb 6-1: config 0 has no interface number 0 [ 1049.882412][ T822] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1049.882438][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.882455][ T822] usb 6-1: Product: syz [ 1049.882467][ T822] usb 6-1: Manufacturer: syz [ 1049.882479][ T822] usb 6-1: SerialNumber: syz [ 1049.886045][ T822] usb 6-1: config 0 descriptor?? [ 1050.427173][ T822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1050.427201][ T822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1050.526611][T13594] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2426'. [ 1051.182376][ T822] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1051.182675][ T822] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1051.355158][T13599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2429'. [ 1051.355894][T13599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2429'. [ 1051.937121][T13614] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2433'. [ 1052.431455][ T5717] usb 6-1: USB disconnect, device number 10 [ 1053.096149][T13634] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2442'. [ 1055.216179][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.216247][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.302468][T13664] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2456'. [ 1060.662005][T13711] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2471'. [ 1062.548698][ T5717] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1062.698412][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 1062.701860][ T5717] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1062.701886][ T5717] usb 6-1: config 0 has no interface number 0 [ 1062.727518][ T5717] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1062.727552][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.727570][ T5717] usb 6-1: Product: syz [ 1062.727589][ T5717] usb 6-1: Manufacturer: syz [ 1062.727602][ T5717] usb 6-1: SerialNumber: syz [ 1062.775774][ T5717] usb 6-1: config 0 descriptor?? [ 1063.805804][ T5717] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1063.805833][ T5717] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1064.099392][ T5717] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1064.099675][ T5717] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1065.046258][T13756] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2487'. [ 1065.046352][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'. [ 1065.626986][ T5717] usb 6-1: USB disconnect, device number 11 [ 1068.508013][ T822] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1068.710258][T13798] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1068.710352][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1069.527922][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 1069.530255][ T822] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1069.530279][ T822] usb 5-1: config 0 has no interface number 0 [ 1069.532652][ T822] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1069.532676][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.532686][ T822] usb 5-1: Product: syz [ 1069.532693][ T822] usb 5-1: Manufacturer: syz [ 1069.532699][ T822] usb 5-1: SerialNumber: syz [ 1069.537713][ T822] usb 5-1: config 0 descriptor?? [ 1070.009344][ T822] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1070.009374][ T822] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1070.151940][T13810] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2506'. [ 1070.211880][ T822] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1070.212179][ T822] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1070.504528][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1070.504599][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2505'. [ 1070.609132][ T5717] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1070.807874][ T5717] usb 6-1: device descriptor read/64, error -71 [ 1071.157981][ T5717] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1071.287884][ T5717] usb 6-1: device descriptor read/64, error -71 [ 1071.303174][ T822] usb 5-1: USB disconnect, device number 13 [ 1071.403077][ T5717] usb usb6-port1: attempt power cycle [ 1071.877890][ T5717] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1071.898842][ T5717] usb 6-1: device descriptor read/8, error -71 [ 1072.329003][ T5717] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1072.457970][ T5717] usb 6-1: device descriptor read/8, error -71 [ 1072.568419][ T5717] usb usb6-port1: unable to enumerate USB device [ 1073.205574][T13839] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2515'. [ 1073.205667][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 1076.948114][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'. [ 1076.948200][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2525'. [ 1079.060378][T13901] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1081.732308][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 1081.732383][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 1082.787957][ T5717] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1082.938025][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 1082.940053][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.940075][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.943307][ T5717] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.943333][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.943350][ T5717] usb 5-1: Product: syz [ 1082.943362][ T5717] usb 5-1: Manufacturer: syz [ 1082.943369][ T5717] usb 5-1: SerialNumber: syz [ 1083.012581][ T5717] usb 5-1: 0:2 : does not exist [ 1083.174149][ T5717] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1083.262103][ T5717] usb 5-1: USB disconnect, device number 14 [ 1083.454629][T11685] udevd[11685]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.513123][T13954] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2556'. [ 1084.475771][T13987] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2570'. [ 1085.317907][ T5717] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1085.467871][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 1085.470634][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.470656][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.472810][ T5717] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1085.472835][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.472853][ T5717] usb 5-1: Product: syz [ 1085.472865][ T5717] usb 5-1: Manufacturer: syz [ 1085.472878][ T5717] usb 5-1: SerialNumber: syz [ 1085.534902][ T5717] usb 5-1: 0:2 : does not exist [ 1085.752692][ T5717] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1085.940984][T14017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2583'. [ 1086.007428][ T5717] usb 5-1: USB disconnect, device number 15 [ 1088.305252][T14056] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2597'. [ 1088.305433][T14057] sctp: [Deprecated]: syz.4.2598 (pid 14057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1088.305433][T14057] Use struct sctp_sack_info instead [ 1088.813745][T14064] 9p: Bad value for 'rfdno' [ 1092.435133][T14101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1094.255660][T14124] overlayfs: failed to resolve './bus': -2 [ 1094.606719][T14134] sctp: [Deprecated]: syz.5.2623 (pid 14134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1094.606719][T14134] Use struct sctp_sack_info instead [ 1094.734018][T14138] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2626'. [ 1097.560886][T14180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2638'. [ 1099.037947][ T5717] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1099.187944][ T5717] usb 6-1: Using ep0 maxpacket: 8 [ 1099.192472][ T5717] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1099.192500][ T5717] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1099.195191][ T5717] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.195209][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.195219][ T5717] usb 6-1: Product: syz [ 1099.195225][ T5717] usb 6-1: Manufacturer: syz [ 1099.195232][ T5717] usb 6-1: SerialNumber: syz [ 1099.484357][ T5717] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1099.484402][ T5717] cdc_ncm 6-1:1.0: bind() failure [ 1099.503748][ T5717] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1099.503774][ T5717] cdc_ncm 6-1:1.1: bind() failure [ 1099.528920][ T5717] usb 6-1: USB disconnect, device number 16 [ 1099.566992][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2650'. [ 1099.657163][T14213] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1100.188483][ T5789] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1100.357956][ T5789] usb 5-1: Using ep0 maxpacket: 8 [ 1100.364002][ T5789] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1100.364047][ T5789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1100.364086][ T5789] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1100.364106][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.420567][ T5789] usb 5-1: config 0 descriptor?? [ 1100.857482][ T5789] chicony 0003:04F2:1123.0002: ignoring exceeding usage max [ 1100.866960][ T5789] chicony 0003:04F2:1123.0002: unknown main item tag 0x2 [ 1100.906602][ T5789] chicony 0003:04F2:1123.0002: hidraw0: USB HID v0.05 Device [HID 04f2:1123] on usb-dummy_hcd.4-1/input0 [ 1101.090783][ T5789] usb 5-1: USB disconnect, device number 16 [ 1101.497093][T14226] fido_id[14226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1106.129636][T14316] tipc: Enabling of bearer rejected, failed to enable media [ 1110.385434][T14364] fuse: Bad value for 'fd' [ 1114.908416][T14404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2721'. [ 1116.206533][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.206599][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.676598][T14417] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2725'. [ 1116.676715][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2725'. [ 1121.467116][T14452] 9p: Bad value for 'wfdno' [ 1122.170654][ T37] audit: type=1326 audit(2000000975.726:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14458 comm="syz.5.2742" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3340c4ce59 code=0x0 [ 1127.210264][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2752'. [ 1128.157222][T14509] lo: entered promiscuous mode [ 1128.173461][T14509] tunl0: entered promiscuous mode [ 1128.179033][T14509] gre0: entered promiscuous mode [ 1128.218760][T14509] gretap0: entered promiscuous mode [ 1128.261114][T14509] erspan0: entered promiscuous mode [ 1128.294977][T14509] ip_vti0: entered promiscuous mode [ 1128.296837][T14509] ip6_vti0: entered promiscuous mode [ 1128.299500][T14509] sit0: entered promiscuous mode [ 1128.313258][T14509] ip6tnl0: entered promiscuous mode [ 1128.322392][T14509] ip6gre0: entered promiscuous mode [ 1128.324562][T14509] syz_tun: entered promiscuous mode [ 1128.326936][T14509] ip6gretap0: entered promiscuous mode [ 1128.331438][T14509] bridge0: entered promiscuous mode [ 1128.332985][T14509] vcan0: entered promiscuous mode [ 1128.334610][T14509] bond0: entered promiscuous mode [ 1128.334626][T14509] : entered promiscuous mode [ 1128.334835][T14509] bond_slave_1: entered promiscuous mode [ 1128.337177][T14509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.371277][T14509] team0: entered promiscuous mode [ 1128.371295][T14509] team_slave_0: entered promiscuous mode [ 1128.376604][T14509] team_slave_1: entered promiscuous mode [ 1128.385962][T14509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.440343][T14511] fuseblk: Bad value for 'source' [ 1128.440766][T14509] dummy0: entered promiscuous mode [ 1128.471689][T14509] nlmon0: entered promiscuous mode [ 1128.489948][T14509] batadv0: entered promiscuous mode [ 1128.491816][T14509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.492764][T14509] vxcan0: entered promiscuous mode [ 1128.494191][T14509] vxcan1: entered promiscuous mode [ 1128.495496][T14509] veth0: entered promiscuous mode [ 1128.496929][T14509] veth1: entered promiscuous mode [ 1128.613904][T14509] wg0: entered promiscuous mode [ 1128.668973][T14509] wg1: entered promiscuous mode [ 1128.711149][T14509] wg2: entered promiscuous mode [ 1128.765626][T14509] veth0_to_bridge: entered promiscuous mode [ 1128.794395][T14509] veth1_to_bridge: entered promiscuous mode [ 1128.825516][T14509] veth0_to_bond: entered promiscuous mode [ 1128.840980][T14509] veth1_to_bond: entered promiscuous mode [ 1128.855537][T14509] veth0_to_team: entered promiscuous mode [ 1128.871516][T14509] veth1_to_team: entered promiscuous mode [ 1128.899373][T14509] veth0_to_batadv: entered promiscuous mode [ 1128.903144][T14509] batadv_slave_0: entered promiscuous mode [ 1128.904063][T14509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.904543][T14509] veth1_to_batadv: entered promiscuous mode [ 1128.906109][T14509] batadv_slave_1: entered promiscuous mode [ 1128.924643][T14509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.925158][T14509] xfrm0: entered promiscuous mode [ 1128.954287][T14509] veth0_to_hsr: entered promiscuous mode [ 1128.985244][T14509] veth1_to_hsr: entered promiscuous mode [ 1128.993633][T14509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1129.001920][T14509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.002008][T14509] hsr0: entered promiscuous mode [ 1129.011020][T14509] veth1_virt_wifi: entered promiscuous mode [ 1129.021051][T14509] veth0_virt_wifi: entered promiscuous mode [ 1129.067447][T14509] virt_wifi0: entered promiscuous mode [ 1129.076357][T14509] veth0_vlan: left promiscuous mode [ 1129.076377][T14509] veth0_vlan: entered promiscuous mode [ 1129.094967][T14509] vlan0: entered promiscuous mode [ 1129.095481][T14509] vlan1: entered promiscuous mode [ 1129.099380][T14509] veth1_vlan: entered promiscuous mode [ 1129.099450][T14509] macvlan0: entered promiscuous mode [ 1129.105082][T14509] macvlan1: entered promiscuous mode [ 1129.134590][T14509] ipvlan0: entered promiscuous mode [ 1129.169194][T14509] ipvlan1: entered promiscuous mode [ 1129.189422][T14509] veth1_macvtap: left promiscuous mode [ 1129.189447][T14509] veth1_macvtap: entered promiscuous mode [ 1129.194298][T14509] veth0_macvtap: left promiscuous mode [ 1129.194315][T14509] veth0_macvtap: entered promiscuous mode [ 1129.231786][T14509] macvtap0: entered promiscuous mode [ 1129.249231][T14509] macsec0: entered promiscuous mode [ 1129.257294][T14509] geneve0: entered promiscuous mode [ 1129.264293][T14509] geneve1: entered promiscuous mode [ 1129.273666][T14509] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1129.274067][T14509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.276677][T14509] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1129.378575][T14509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.379765][T14509] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1129.383644][T14509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1129.400747][T14509] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1129.401208][T14509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.411257][T14509] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1129.495115][T14509] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1129.527047][T14509] @: entered promiscuous mode [ 1129.536793][T14509] mac80211_hwsim hwsim2 pim6reg1: entered promiscuous mode [ 1129.536827][T14509] A link change request failed with some changes committed already. Interface pim6reg1 may have been left with an inconsistent configuration, please check. [ 1129.647568][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.649463][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.278039][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.278171][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.709216][ T160] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.709250][ T160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.934510][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1130.994065][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1131.003432][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1131.011911][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1131.017211][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1131.144013][ T160] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.144044][ T160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.205045][ T160] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.205078][ T160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.212776][ T160] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.212806][ T160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.137942][ T59] Bluetooth: hci3: command tx timeout [ 1135.224363][ T59] Bluetooth: hci3: command tx timeout [ 1136.169340][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2775'. [ 1136.259480][T14527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.259601][T14527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.259706][T14527] bridge_slave_0: entered allmulticast mode [ 1136.261094][T14527] bridge_slave_0: entered promiscuous mode [ 1136.263030][T14527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.263155][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.263253][T14527] bridge_slave_1: entered allmulticast mode [ 1136.264734][T14527] bridge_slave_1: entered promiscuous mode [ 1136.624076][T12307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.624111][T12307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.747920][ T5789] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1136.789182][T14527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.792844][T14527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.826100][T14527] team0: Port device team_slave_0 added [ 1136.834392][T14527] team0: Port device team_slave_1 added [ 1136.884925][T14527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.884938][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.884951][T14527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.886277][T14527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.886288][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.886302][T14527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.927859][ T5789] usb 6-1: Using ep0 maxpacket: 32 [ 1136.935958][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.935989][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.936024][ T5789] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1136.936044][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.971215][T14527] hsr_slave_0: entered promiscuous mode [ 1136.972480][T14527] hsr_slave_1: entered promiscuous mode [ 1136.973517][T14527] debugfs: 'hsr0' already exists in 'hsr' [ 1136.973540][T14527] Cannot create hsr debugfs directory [ 1137.062512][ T5789] usb 6-1: config 0 descriptor?? [ 1137.090503][ T5789] hub 6-1:0.0: USB hub found [ 1137.307916][ T59] Bluetooth: hci3: command tx timeout [ 1137.330358][ T5789] hub 6-1:0.0: 1 port detected [ 1139.034896][T12307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.034925][T12307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.375436][ T5789] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1139.375774][ T9120] usb 6-1: USB disconnect, device number 17 [ 1139.381061][ T59] Bluetooth: hci3: command tx timeout [ 1140.686652][T12307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1140.686685][T12307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.021555][T12307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.021577][T12307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.998927][T12307] bridge_slave_1: left allmulticast mode [ 1141.999120][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.159209][T12307] bridge_slave_0: left allmulticast mode [ 1142.161022][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.438590][ T822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1143.142697][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.142728][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.142749][ T822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.142788][ T822] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.142808][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.210590][ T822] usb 6-1: config 0 descriptor?? [ 1143.848563][ T822] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1143.989193][T12380] usb 6-1: USB disconnect, device number 18 [ 1146.428452][T12307] bond0 (unregistering): (slave 30): Releasing backup interface [ 1146.642980][T12307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.681097][T12307] bond0 (unregistering): Released all slaves [ 1147.644830][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1152.192478][T14785] mmap: syz.5.2831 (14785) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1154.094339][T12307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.094443][T12307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.155889][T12307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.155916][T12307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.235206][T12307] veth1_vlan: left promiscuous mode [ 1157.007673][T14846] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1157.178629][T12307] team0 (unregistering): Port device team_slave_1 removed [ 1157.248557][T12307] team0 (unregistering): Port device team_slave_0 removed [ 1158.449384][T14527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1158.471948][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.588857][T14527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1158.660007][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.661569][T14527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1158.727191][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.736735][T14527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1158.779629][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1159.174725][T14527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.199033][T14527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.207086][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.207292][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.245180][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.245312][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.552050][T14920] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2849'. [ 1163.069240][T14527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.272587][T14527] veth0_vlan: entered promiscuous mode [ 1163.633427][T14955] overlayfs: missing 'lowerdir' [ 1164.484763][T14957] netlink: 'syz.5.2854': attribute type 16 has an invalid length. [ 1164.505236][T14527] veth1_vlan: entered promiscuous mode [ 1164.638975][T14527] veth0_macvtap: entered promiscuous mode [ 1164.682216][T14527] veth1_macvtap: entered promiscuous mode [ 1164.742480][T14527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.747483][T14527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.042740][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.048237][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.286312][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.538211][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.402514][ T5797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.402530][ T5797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.712257][T14999] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2861'. [ 1169.841816][ T5885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.841835][ T5885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.584597][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1173.813137][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1173.864239][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1173.880794][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1173.884426][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1173.885560][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1176.073341][ T59] Bluetooth: hci0: command tx timeout [ 1177.483094][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.483163][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.111318][ T59] Bluetooth: hci0: command tx timeout [ 1179.490445][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1179.953138][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1180.189584][ T59] Bluetooth: hci0: command tx timeout [ 1180.216263][T15065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.225517][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.225764][T15065] bridge_slave_0: entered allmulticast mode [ 1180.227223][T15065] bridge_slave_0: entered promiscuous mode [ 1182.324344][ T59] Bluetooth: hci0: command tx timeout [ 1182.510191][T15065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.510345][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.510558][T15065] bridge_slave_1: entered allmulticast mode [ 1182.512067][T15065] bridge_slave_1: entered promiscuous mode [ 1182.642928][T15065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.655618][T15065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.958584][T15065] team0: Port device team_slave_0 added [ 1183.976427][T15065] team0: Port device team_slave_1 added [ 1185.652519][T15170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2899'. [ 1186.022508][T15065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.022520][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.022534][T15065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.029166][T15065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.029180][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.029204][T15065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.717196][T15065] hsr_slave_0: entered promiscuous mode [ 1186.732064][T15065] hsr_slave_1: entered promiscuous mode [ 1187.191029][ T5797] bridge_slave_1: left allmulticast mode [ 1187.191051][ T5797] bridge_slave_1: left promiscuous mode [ 1187.191211][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.912831][T15214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2911'. [ 1190.947604][T15214] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1190.998689][ T5797] bond0 (unregistering): (slave 30): Releasing backup interface [ 1191.078583][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.121717][ T5797] bond0 (unregistering): Released all slaves [ 1191.147041][ T5797] bond1 (unregistering): Released all slaves [ 1191.217001][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1194.369554][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2922'. [ 1194.369686][T15250] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1196.904145][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1196.937974][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1196.942277][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1196.958569][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.966435][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1198.633636][ T5797] hsr_slave_0: left promiscuous mode [ 1198.718057][ T5797] hsr_slave_1: left promiscuous mode [ 1198.719017][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.778741][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.150381][ T59] Bluetooth: hci1: command tx timeout [ 1199.232992][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1199.233131][T15284] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1199.869477][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 1199.954692][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 1201.810391][ T59] Bluetooth: hci1: command tx timeout [ 1203.327605][T15065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1203.534509][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1203.543556][T15065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1203.661158][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.782571][ T59] Bluetooth: hci1: command tx timeout [ 1205.418960][T15065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1205.495877][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1205.554304][T15065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1205.600447][T15065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1205.817881][ T9120] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1205.886008][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.886127][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.886335][T15264] bridge_slave_0: entered allmulticast mode [ 1205.910641][T15264] bridge_slave_0: entered promiscuous mode [ 1205.915131][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.915333][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.915548][T15264] bridge_slave_1: entered allmulticast mode [ 1205.944333][T15264] bridge_slave_1: entered promiscuous mode [ 1205.990189][ T9120] usb 6-1: Using ep0 maxpacket: 32 [ 1205.992457][ T9120] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1205.992505][ T9120] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1205.992525][ T9120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.996104][ T9120] usb 6-1: config 0 descriptor?? [ 1206.094029][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.100749][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.146085][T15264] team0: Port device team_slave_0 added [ 1206.152208][T15264] team0: Port device team_slave_1 added [ 1206.216213][ T9120] usb 6-1: USB disconnect, device number 19 [ 1206.243460][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.243471][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.243485][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.245957][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.245969][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.245984][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.391649][T15379] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1206.826400][ T59] Bluetooth: hci1: command tx timeout [ 1207.607379][ T5797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.989508][T15392] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2950'. [ 1208.325463][T15264] hsr_slave_0: entered promiscuous mode [ 1208.326276][T15264] hsr_slave_1: entered promiscuous mode [ 1208.326775][T15264] debugfs: 'hsr0' already exists in 'hsr' [ 1208.326792][T15264] Cannot create hsr debugfs directory [ 1208.766907][ T5797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.237387][ T5797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.444873][T15065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.736806][T15406] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1209.764216][ T5797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.267653][T15065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.310597][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.311640][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.439995][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.440087][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.805782][T15417] fuse: Bad value for 'fd' [ 1211.237108][T15264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1211.277015][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.293477][T15264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1211.732188][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.881960][T15264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1211.959100][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.968275][T15264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1212.021754][T15264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1213.633716][ T5797] bridge_slave_1: left allmulticast mode [ 1213.633755][ T5797] bridge_slave_1: left promiscuous mode [ 1213.633997][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.950932][ T5797] bridge_slave_0: left allmulticast mode [ 1213.950955][ T5797] bridge_slave_0: left promiscuous mode [ 1213.951110][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.048640][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.129251][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.151946][ T5797] bond0 (unregistering): Released all slaves [ 1216.071624][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.160857][T15264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.192230][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.192312][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.251282][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.251402][T12307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.378953][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1218.571719][T15065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.748102][ T5797] hsr_slave_0: left promiscuous mode [ 1218.753218][T15504] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1218.790620][ T5797] hsr_slave_1: left promiscuous mode [ 1218.791661][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.791684][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.839734][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.839756][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.919300][ T5797] veth1_macvtap: left promiscuous mode [ 1218.919378][ T5797] veth0_macvtap: left promiscuous mode [ 1218.927729][ T5797] veth1_vlan: left promiscuous mode [ 1218.936159][ T5797] veth0_vlan: left promiscuous mode [ 1219.130750][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1219.518140][ T5717] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1219.692575][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1219.692607][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.692642][ T5717] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1219.692662][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.751876][ T5717] usb 6-1: config 0 descriptor?? [ 1219.808674][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 1219.868548][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 1220.171767][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1220.172169][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1220.172325][ T5717] usbhid 6-1:0.0: can't add hid device: -32 [ 1220.172435][ T5717] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1220.176565][ T5717] usb 6-1: USB disconnect, device number 20 [ 1220.476787][T15065] veth0_vlan: entered promiscuous mode [ 1220.611584][T15065] veth1_vlan: entered promiscuous mode [ 1221.051202][T15065] veth0_macvtap: entered promiscuous mode [ 1221.105406][T15065] veth1_macvtap: entered promiscuous mode [ 1221.187513][T15065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.240364][T15525] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1221.240401][T15525] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1221.240437][T15525] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1221.366788][T15065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.400884][T15525] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1221.436132][T15525] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1221.476534][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.489054][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.522390][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.523322][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.686934][T15264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.782225][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1223.016214][ T5795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.016233][ T5795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.222351][ T5885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.222369][ T5885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.390734][T15264] veth0_vlan: entered promiscuous mode [ 1223.785582][T15264] veth1_vlan: entered promiscuous mode [ 1224.712524][T15264] veth0_macvtap: entered promiscuous mode [ 1224.723371][T15264] veth1_macvtap: entered promiscuous mode [ 1224.784683][T15264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.865134][T15264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.916533][ T5885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.935467][ T5885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.958352][ T5885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.961639][ T5885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.615782][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1226.957577][ T5797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.957593][ T5797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.073412][ T5795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.073431][ T5795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.329439][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1230.390858][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1230.404776][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1230.440284][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1230.482954][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1230.857304][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1232.578011][ T59] Bluetooth: hci3: command tx timeout [ 1232.842009][T15682] netlink: 'syz.6.3018': attribute type 8 has an invalid length. [ 1234.492882][ T5885] smbdirect: ib_dev[syz1] removed [ 1234.857425][ T59] Bluetooth: hci3: command tx timeout [ 1235.192080][T15646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.192210][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.192331][T15646] bridge_slave_0: entered allmulticast mode [ 1235.193730][T15646] bridge_slave_0: entered promiscuous mode [ 1235.224761][T15646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.224889][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.225056][T15646] bridge_slave_1: entered allmulticast mode [ 1235.226490][T15646] bridge_slave_1: entered promiscuous mode [ 1235.328705][T15646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.360586][T15646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.483938][T15646] team0: Port device team_slave_0 added [ 1235.485976][T15646] team0: Port device team_slave_1 added [ 1235.565759][T15646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.565774][T15646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.565798][T15646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.571859][T15646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.571873][T15646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.571897][T15646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.678260][T15646] hsr_slave_0: entered promiscuous mode [ 1235.681943][T15646] hsr_slave_1: entered promiscuous mode [ 1235.682831][T15646] debugfs: 'hsr0' already exists in 'hsr' [ 1235.682854][T15646] Cannot create hsr debugfs directory [ 1236.899128][ T59] Bluetooth: hci3: command tx timeout [ 1239.294725][T15756] fuse: Unknown parameter 'user_id00000000000000000000' [ 1240.043357][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.043426][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.051996][ T59] Bluetooth: hci3: command tx timeout [ 1241.054132][T15765] bridge1: entered promiscuous mode [ 1241.054167][T15765] bridge1: entered allmulticast mode [ 1242.946823][T15775] binder: 15774:15775 ioctl 4018620d 0 returned -22 [ 1243.452227][T15646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1243.483198][T15646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1243.484104][T15646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1243.522799][T15646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.527421][T15646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1243.561540][T15646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1243.562959][T15646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1243.607211][T15646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1243.897982][ T5716] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1243.943439][T15646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.966552][T15646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.036319][T15646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1244.036343][T15646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1244.120316][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1244.120364][ T5716] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1244.120384][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.431917][T14990] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1244.524701][ T5716] usb 6-1: config 0 descriptor?? [ 1244.916286][T15800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1244.951403][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.951608][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.956333][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.956463][ T5796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.135943][T14990] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1245.135973][T14990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.135991][T14990] usb 3-1: Product: syz [ 1245.136003][T14990] usb 3-1: Manufacturer: syz [ 1245.136015][T14990] usb 3-1: SerialNumber: syz [ 1245.158382][T14990] usb 3-1: config 0 descriptor?? [ 1245.421839][T15819] binder: 15818:15819 ioctl 4018620d 0 returned -22 [ 1245.489541][ T5716] hid (null): unknown global tag 0xc [ 1245.515815][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.515858][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.515886][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.515910][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.515935][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.517570][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.517600][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.517625][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.517649][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.517673][ T5716] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0 [ 1245.598757][ T5716] asus 0003:0B05:1ABE.0004: unknown global tag 0xc [ 1245.598778][ T5716] asus 0003:0B05:1ABE.0004: item 0 1 1 12 parsing failed [ 1245.599623][ T5716] asus 0003:0B05:1ABE.0004: Asus hid parse failed: -22 [ 1245.599797][ T5716] asus 0003:0B05:1ABE.0004: probe with driver asus failed with error -22 [ 1245.683992][ T5716] usb 6-1: USB disconnect, device number 21 [ 1246.206920][T14990] usb 3-1: Firmware version (0.0) predates our first public release. [ 1246.206942][T14990] usb 3-1: Please update to version 0.2 or newer [ 1246.857428][T14990] usb 3-1: USB disconnect, device number 4 [ 1248.592995][T15646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.362223][T15646] veth0_vlan: entered promiscuous mode [ 1250.407910][T15646] veth1_vlan: entered promiscuous mode [ 1250.669592][T15646] veth0_macvtap: entered promiscuous mode [ 1250.711697][T15646] veth1_macvtap: entered promiscuous mode [ 1250.846816][T15646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.873982][T15891] binder: 15889:15891 ioctl 4018620d 0 returned -22 [ 1250.933177][T15646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.963483][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.972067][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.972322][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.972550][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.424437][T14992] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1251.610926][T14992] usb 7-1: Using ep0 maxpacket: 16 [ 1251.620549][T14992] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1251.620572][T14992] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.620589][T14992] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1251.660868][T14992] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1251.660897][T14992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.660916][T14992] usb 7-1: Product: syz [ 1251.660929][T14992] usb 7-1: Manufacturer: syz [ 1251.660943][T14992] usb 7-1: SerialNumber: syz [ 1251.828477][T14992] usb 7-1: 0:2 : does not exist [ 1252.244551][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.244570][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.465200][T15812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.465217][T15812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.591437][T14992] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1252.901475][T14992] usb 7-1: USB disconnect, device number 2 [ 1253.277908][ T822] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1253.437043][ T822] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1253.437072][ T822] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1253.437090][ T822] usb 1-1: Product: syz [ 1253.437102][ T822] usb 1-1: SerialNumber: syz [ 1253.455498][ T822] usb 1-1: config 0 descriptor?? [ 1253.742182][T14992] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1253.764682][ T822] hso 1-1:0.0: Failed to find BULK eps [ 1253.814606][T15939] binder: 15938:15939 ioctl c0306201 0 returned -14 [ 1253.901798][T14992] usb 7-1: Using ep0 maxpacket: 32 [ 1253.904152][T14992] usb 7-1: config 0 has no interfaces? [ 1253.922902][T14992] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1253.922931][T14992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.922948][T14992] usb 7-1: Product: syz [ 1253.922960][T14992] usb 7-1: Manufacturer: syz [ 1253.922972][T14992] usb 7-1: SerialNumber: syz [ 1254.062264][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1254.117387][T14992] usb 7-1: config 0 descriptor?? [ 1254.131582][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1254.135330][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1254.159823][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1254.174337][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1254.435624][ T822] usb 1-1: USB disconnect, device number 3 [ 1254.560315][T14992] usb 7-1: USB disconnect, device number 3 [ 1256.517169][ T5610] Bluetooth: hci2: command tx timeout [ 1257.785234][T15985] binder: 15984:15985 ioctl c0306201 0 returned -14 [ 1259.140529][ T5610] Bluetooth: hci2: command tx timeout [ 1259.313512][T15942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.313720][T15942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.314253][T15942] bridge_slave_0: entered allmulticast mode [ 1259.316959][T15942] bridge_slave_0: entered promiscuous mode [ 1259.347796][T15942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.348008][T15942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.348208][T15942] bridge_slave_1: entered allmulticast mode [ 1259.350922][T15942] bridge_slave_1: entered promiscuous mode [ 1259.557021][T15942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.008802][T15942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.322960][T15942] team0: Port device team_slave_0 added [ 1260.355289][T15942] team0: Port device team_slave_1 added [ 1260.609032][T15942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.609048][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.609071][T15942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.613827][T15942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.613842][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.613865][T15942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.722306][T15942] hsr_slave_0: entered promiscuous mode [ 1260.723667][T15942] hsr_slave_1: entered promiscuous mode [ 1260.724734][T15942] debugfs: 'hsr0' already exists in 'hsr' [ 1260.724758][T15942] Cannot create hsr debugfs directory [ 1261.817939][ T5610] Bluetooth: hci2: command tx timeout [ 1262.461816][T14696] libceph: connect (1)[c::]:6789 error -101 [ 1262.462548][T14696] libceph: mon0 (1)[c::]:6789 connect error [ 1263.606812][T14696] libceph: connect (1)[c::]:6789 error -101 [ 1263.607071][T14696] libceph: mon0 (1)[c::]:6789 connect error [ 1263.660826][T16019] ceph: No mds server is up or the cluster is laggy [ 1263.858859][ T5610] Bluetooth: hci2: command tx timeout [ 1264.151935][T14696] libceph: connect (1)[c::]:6789 error -101 [ 1264.152126][T14696] libceph: mon0 (1)[c::]:6789 connect error [ 1271.373994][T16079] fuse: Bad value for 'fd' [ 1271.496116][T15942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1271.775518][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1271.781294][T15942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1272.900826][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1273.065046][T15942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1273.156330][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1273.175658][T15942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1273.327293][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1273.695200][T15942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.737156][T15942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.821016][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.821132][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.946467][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.946589][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.529468][T15942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.542000][T15942] veth0_vlan: entered promiscuous mode [ 1279.564110][T15942] veth1_vlan: entered promiscuous mode [ 1279.646935][T15942] veth0_macvtap: entered promiscuous mode [ 1279.667792][T15942] veth1_macvtap: entered promiscuous mode [ 1279.742067][T15942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.767298][T15942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.834329][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.834607][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.834645][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.834675][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.209620][ T5794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.209640][ T5794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.661363][T12307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.661385][T12307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.218064][T14531] Bluetooth: hci0: command 0x0406 tx timeout [ 1300.261088][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.261158][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.254344][T14531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1302.296306][T14531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1302.302921][T14531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1302.446908][T14531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1302.492498][T14531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1304.582869][T14531] Bluetooth: hci4: command tx timeout [ 1306.659571][T14531] Bluetooth: hci4: command tx timeout [ 1306.775380][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.775575][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.775761][T16242] bridge_slave_0: entered allmulticast mode [ 1306.800093][T16242] bridge_slave_0: entered promiscuous mode [ 1306.803472][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.803662][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.803884][T16242] bridge_slave_1: entered allmulticast mode [ 1306.806538][T16242] bridge_slave_1: entered promiscuous mode [ 1306.953891][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.956737][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.052025][T14531] Bluetooth: hci4: command tx timeout [ 1309.162650][T16242] team0: Port device team_slave_0 added [ 1309.194127][T16242] team0: Port device team_slave_1 added [ 1309.248958][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.248974][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.248998][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.251346][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.251359][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.251382][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.479944][T16242] hsr_slave_0: entered promiscuous mode [ 1309.481297][T16242] hsr_slave_1: entered promiscuous mode [ 1309.486367][T16242] debugfs: 'hsr0' already exists in 'hsr' [ 1309.486389][T16242] Cannot create hsr debugfs directory [ 1309.983686][T16242] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1310.387362][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1310.492509][T16242] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1311.058066][ T59] Bluetooth: hci4: command tx timeout [ 1311.545787][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1311.616338][T16242] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1311.663518][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1311.665077][T16242] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1311.867274][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1313.364432][T16242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.417932][T14689] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1313.438892][T16242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.590123][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.598285][T15813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.600751][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.600869][T15813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.607969][T14689] usb 1-1: Using ep0 maxpacket: 16 [ 1313.629333][T14689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.629382][T14689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.629407][T14689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1313.629425][T14689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1313.629446][T14689] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.630717][T14689] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1313.630740][T14689] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1313.630757][T14689] usb 1-1: Manufacturer: syz [ 1313.646753][T14689] usb 1-1: config 0 descriptor?? [ 1314.507899][T14689] rc_core: IR keymap rc-hauppauge not found [ 1314.507929][T14689] Registered IR keymap rc-empty [ 1314.508838][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1314.528513][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1314.865306][T14689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1314.875778][T14689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 1315.025974][T16242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.775693][T16242] veth0_vlan: entered promiscuous mode [ 1315.806639][T16242] veth1_vlan: entered promiscuous mode [ 1315.880172][T16242] veth0_macvtap: entered promiscuous mode [ 1315.893938][T16242] veth1_macvtap: entered promiscuous mode [ 1315.953010][T16242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.984384][T16242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.995816][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.052596][ T152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.054285][ T152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.055384][ T152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.055882][ T152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.167137][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.178242][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.197935][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.218095][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.240667][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.257947][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.277953][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.297952][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.317951][T14689] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.342999][T14689] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1316.343023][T14689] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1316.404913][T14689] usb 1-1: USB disconnect, device number 4 [ 1318.737306][ T5797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.737328][ T5797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.010264][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.010285][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.066371][T14531] Bluetooth: hci1: command 0x0406 tx timeout [ 1323.669786][T14531] Bluetooth: Unknown LE signaling command 0x1d [ 1323.669809][T14531] Bluetooth: Wrong link type (-22) [ 1327.585191][ T59] Bluetooth: hci4: SCO packet for unknown connection handle 240 [ 1340.690132][ T59] Bluetooth: Unknown LE signaling command 0x1d [ 1340.690152][ T59] Bluetooth: Wrong link type (-22) [ 1340.847912][ T5609] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1341.006528][ T5609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1341.006560][ T5609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.006596][ T5609] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1341.006617][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.075156][ T5609] usb 3-1: config 0 descriptor?? [ 1342.316969][ T5609] hid_parser_main: 419 callbacks suppressed [ 1342.316986][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.317003][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.317018][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.317033][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.317046][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.317060][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.317087][ T5609] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 1342.468275][T16463] IPVS: Scheduler module ip_vs_ not found [ 1342.931594][ T5609] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 1342.986671][ T5609] isku 0003:1E7D:319C.0005: couldn't init struct isku_device [ 1342.986727][ T5609] isku 0003:1E7D:319C.0005: couldn't install keyboard [ 1343.158193][ T5609] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -32 [ 1343.193676][ T5609] usb 3-1: USB disconnect, device number 5 [ 1343.317154][T16472] netlink: 'syz.6.3220': attribute type 10 has an invalid length. [ 1343.325958][T16472] team0: Port device dummy0 added [ 1346.837973][T15814] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1346.841998][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1347.226225][T15814] usb 3-1: device descriptor read/64, error -32 [ 1347.957922][T15814] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1353.430161][T16529] sg_write: process 170 (syz.2.3241) changed security contexts after opening file descriptor, this is not allowed. [ 1353.677926][T15814] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1353.858161][T14531] Bluetooth: hci3: command 0x0406 tx timeout [ 1354.660085][T15814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.660136][T15814] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1354.660175][T15814] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1354.660195][T15814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.946419][T15814] usb 3-1: config 0 descriptor?? [ 1355.027431][T15814] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1355.202574][T16540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3245'. [ 1355.843860][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1355.843944][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1355.847267][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1355.886778][T16547] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1355.886816][T16547] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1355.886852][T16547] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1355.994479][T16547] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1356.212629][T16549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1357.084199][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.260204][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.426555][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.465243][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.533461][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.535531][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.659945][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.780311][T16547] virt_wifi0 speed is unknown, defaulting to 1000 [ 1358.028003][T14689] usb 3-1: USB disconnect, device number 8 [ 1359.229147][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3253'. [ 1361.857559][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.857625][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.858972][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1373.983382][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1374.066613][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1374.090179][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1374.094956][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1374.115309][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1374.116199][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1374.152444][T14531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1374.154901][T14531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1374.182937][T14531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1375.231879][T16637] virt_wifi0 speed is unknown, defaulting to 1000 [ 1376.048987][T16664] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3276'. [ 1376.230852][T16637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.231073][T16637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.231296][T16637] bridge_slave_0: entered allmulticast mode [ 1376.246485][T16637] bridge_slave_0: entered promiscuous mode [ 1376.280914][T16637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.282645][T16637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.282890][T16637] bridge_slave_1: entered allmulticast mode [ 1376.313170][T16637] bridge_slave_1: entered promiscuous mode [ 1376.355492][T14531] Bluetooth: hci2: command tx timeout [ 1376.508406][T14531] Bluetooth: hci6: command tx timeout [ 1376.545683][T16637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.576421][T16637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.797668][T16637] team0: Port device team_slave_0 added [ 1376.805258][T16638] virt_wifi0 speed is unknown, defaulting to 1000 [ 1376.826793][T16637] team0: Port device team_slave_1 added [ 1376.925834][T16637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.925851][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.925876][T16637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.223307][T16673] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1377.729478][T16637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.729496][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.729521][T16637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.418052][T14531] Bluetooth: hci2: command tx timeout [ 1378.578085][T14531] Bluetooth: hci6: command tx timeout [ 1379.502197][T16637] hsr_slave_0: entered promiscuous mode [ 1379.507337][T16637] hsr_slave_1: entered promiscuous mode [ 1379.532583][T16637] debugfs: 'hsr0' already exists in 'hsr' [ 1379.532610][T16637] Cannot create hsr debugfs directory [ 1380.512525][T14531] Bluetooth: hci2: command tx timeout [ 1380.659614][T14531] Bluetooth: hci6: command tx timeout [ 1381.443459][T16637] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1381.540332][T16637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1381.582065][T16637] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1381.903211][T16637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1381.962176][T16637] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1382.578254][T14531] Bluetooth: hci2: command tx timeout [ 1382.711620][T16637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1382.715089][T16637] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1382.737958][T14531] Bluetooth: hci6: command tx timeout [ 1383.484649][T16637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1384.121368][T16638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.121612][T16638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.121881][T16638] bridge_slave_0: entered allmulticast mode [ 1384.161096][T16638] bridge_slave_0: entered promiscuous mode [ 1384.298335][T16638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.298546][T16638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.298867][T16638] bridge_slave_1: entered allmulticast mode [ 1384.301533][T16638] bridge_slave_1: entered promiscuous mode [ 1384.347903][ T5609] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1384.527924][ T5609] usb 3-1: Using ep0 maxpacket: 8 [ 1384.530521][ T5609] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1384.530547][ T5609] usb 3-1: config 127 has no interface number 1 [ 1384.530599][ T5609] usb 3-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1384.530623][ T5609] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1384.530644][ T5609] usb 3-1: config 127 interface 0 altsetting 10 bulk endpoint 0x88 has invalid maxpacket 0 [ 1384.530665][ T5609] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1384.530681][ T5609] usb 3-1: config 127 interface 0 has no altsetting 0 [ 1384.533835][ T5609] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1384.533860][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.533878][ T5609] usb 3-1: Product: syz [ 1384.533891][ T5609] usb 3-1: Manufacturer: syz [ 1384.533903][ T5609] usb 3-1: SerialNumber: syz [ 1384.711134][T16638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.785990][T16638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.970372][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.971388][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.005612][ T5609] xr_serial 3-1:127.171: xr_serial converter detected [ 1385.027177][ T5609] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1385.027234][ T5609] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1385.046358][T16638] team0: Port device team_slave_0 added [ 1385.079439][ T5609] usb 3-1: USB disconnect, device number 9 [ 1385.104463][ T5609] xr_serial 3-1:127.171: device disconnected [ 1385.190666][T16638] team0: Port device team_slave_1 added [ 1385.475820][T14991] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1386.284723][T16712] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3290'. [ 1386.418331][T14991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.418361][T14991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.418381][T14991] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1386.418432][T14991] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1386.418452][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.553578][T14991] usb 6-1: config 0 descriptor?? [ 1387.028547][T14991] usbhid 6-1:0.0: can't add hid device: -71 [ 1387.028677][T14991] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1387.071318][T14991] usb 6-1: USB disconnect, device number 22 [ 1387.231295][T16638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.231312][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.231335][T16638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.284414][T16638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.284431][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.284457][T16638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.541626][T16638] hsr_slave_0: entered promiscuous mode [ 1387.546109][T16638] hsr_slave_1: entered promiscuous mode [ 1387.563229][T16638] debugfs: 'hsr0' already exists in 'hsr' [ 1387.563257][T16638] Cannot create hsr debugfs directory [ 1388.149431][T16637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.454069][T16637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.743047][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.744097][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.865577][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.865710][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.501958][T16638] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1393.186605][T16739] virtio-fs: tag not found [ 1393.275773][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1393.368271][T16638] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1394.126184][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1394.129209][T16638] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1394.631683][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1394.634792][T16638] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1394.798678][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1395.128900][T16756] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3300'. [ 1395.885235][T16637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.610564][T14990] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1396.768031][T16638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.781162][T14990] usb 6-1: Using ep0 maxpacket: 32 [ 1396.792094][T14990] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1396.792119][T14990] usb 6-1: config 0 has no interface number 0 [ 1396.794496][T14990] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1396.794520][T14990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.794538][T14990] usb 6-1: Product: syz [ 1396.794550][T14990] usb 6-1: Manufacturer: syz [ 1396.794562][T14990] usb 6-1: SerialNumber: syz [ 1396.846732][T14990] usb 6-1: config 0 descriptor?? [ 1397.123307][T16638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.307540][T14990] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1397.307558][T14990] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1397.676735][T16769] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1397.685080][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.692840][T15813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.155091][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.155343][ T5796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.289225][T14990] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1398.289533][T14990] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1398.567320][T16637] veth0_vlan: entered promiscuous mode [ 1398.655615][T16637] veth1_vlan: entered promiscuous mode [ 1398.892696][T16637] veth0_macvtap: entered promiscuous mode [ 1398.916043][T16637] veth1_macvtap: entered promiscuous mode [ 1399.062798][T16637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.127938][T16637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.249247][T16455] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.254646][T16455] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.256782][T16455] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.296370][T16455] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.435954][ T5716] usb 6-1: USB disconnect, device number 23 [ 1401.572214][T16783] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1401.623843][T15812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.623862][T15812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.136719][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.136739][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.447494][T16638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.376465][T16638] veth0_vlan: entered promiscuous mode [ 1403.425961][T16638] veth1_vlan: entered promiscuous mode [ 1403.504688][T16638] veth0_macvtap: entered promiscuous mode [ 1403.534318][T16638] veth1_macvtap: entered promiscuous mode [ 1403.678524][T16638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.755352][T16638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.798950][T16504] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.800063][T16504] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.812657][T16504] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.816851][T16504] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.905773][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3310'. [ 1409.905831][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3310'. [ 1411.141481][T16822] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3313'. [ 1412.226727][T15812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.226746][T15812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.475026][ T5797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.475047][ T5797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.145746][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.145816][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.571342][T14991] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1435.727999][T14991] usb 6-1: Using ep0 maxpacket: 16 [ 1435.806310][T14991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.806363][T14991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1435.806388][T14991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1435.806406][T14991] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1435.806425][T14991] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.898267][T14991] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1435.898296][T14991] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1435.898314][T14991] usb 6-1: Manufacturer: syz [ 1435.962711][T14991] usb 6-1: config 0 descriptor?? [ 1436.467998][T14991] rc_core: IR keymap rc-hauppauge not found [ 1436.468019][T14991] Registered IR keymap rc-empty [ 1436.468935][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1436.497171][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1436.512260][T14991] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1436.537275][T14991] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 1436.719592][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.750251][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.788089][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.812365][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.829995][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.855792][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.868695][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.888146][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.917958][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.938607][T14991] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1437.965910][T14991] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1437.965935][T14991] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1438.020576][T14991] usb 6-1: USB disconnect, device number 24 [ 1445.197366][T14531] Bluetooth: Unknown LE signaling command 0x1d [ 1445.197389][T14531] Bluetooth: Wrong link type (-22) [ 1452.834209][T14990] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1453.200618][T14990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1453.200650][T14990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.200688][T14990] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1453.200708][T14990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.206118][T14990] usb 9-1: config 0 descriptor?? [ 1454.606776][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.606810][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.606836][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.606860][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.606884][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.606907][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.606931][T14990] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1454.857443][T14990] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 1455.581344][T14990] usb 9-1: USB disconnect, device number 2 [ 1457.160505][T16995] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3365'. [ 1461.071061][T14531] Bluetooth: hci4: command 0x0406 tx timeout [ 1461.747983][ T5789] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1461.899829][ T5789] usb 6-1: Using ep0 maxpacket: 16 [ 1461.903352][ T5789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.903403][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1461.903428][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1461.903447][ T5789] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1461.903466][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1461.906017][ T5789] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1461.906042][ T5789] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1461.906059][ T5789] usb 6-1: Manufacturer: syz [ 1462.004902][ T5789] usb 6-1: config 0 descriptor?? [ 1462.926926][T17023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1464.219728][ T5789] rc_core: IR keymap rc-hauppauge not found [ 1464.219750][ T5789] Registered IR keymap rc-empty [ 1464.219901][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.238054][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.299130][ T5789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1464.342350][ T5789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 1464.379736][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.398201][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.422861][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.438073][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.457941][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.478033][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.498019][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.520728][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.538109][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.558290][ T5789] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1464.597901][ T5789] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1464.597979][ T5789] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1464.678633][ T5789] usb 6-1: USB disconnect, device number 25 [ 1466.288430][ T59] Bluetooth: hci2: SCO packet for unknown connection handle 240 [ 1473.947344][T17081] fuse: fd is not a fuse device [ 1478.610940][T17102] binder: 17099:17102 ioctl 40045407 0 returned -22 [ 1478.665513][T17102] binder: 17099:17102 ioctl c0306201 200000000640 returned -22 [ 1480.245481][T16964] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1481.077913][T16964] usb 9-1: Using ep0 maxpacket: 32 [ 1481.080173][T16964] usb 9-1: config 0 has no interfaces? [ 1481.085150][T16964] usb 9-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1481.085176][T16964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.085194][T16964] usb 9-1: Product: syz [ 1481.085207][T16964] usb 9-1: Manufacturer: syz [ 1481.085219][T16964] usb 9-1: SerialNumber: syz [ 1481.104720][T16964] usb 9-1: config 0 descriptor?? [ 1482.959009][T16964] usb 9-1: USB disconnect, device number 3 [ 1484.016347][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.016717][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.505662][T17141] netlink: 'syz.9.3411': attribute type 10 has an invalid length. [ 1484.557520][T17126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1484.562625][T17126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.596245][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.650097][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.181743][T17141] team0: Port device dummy0 added [ 1486.181941][T16807] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.258206][T16807] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.259379][T16807] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.260529][T16807] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.408362][T14529] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1489.578958][T14529] usb 9-1: Using ep0 maxpacket: 32 [ 1489.580608][T14529] usb 9-1: config 0 has no interfaces? [ 1489.587190][T14529] usb 9-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1489.587215][T14529] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.587233][T14529] usb 9-1: Product: syz [ 1489.587246][T14529] usb 9-1: Manufacturer: syz [ 1489.587258][T14529] usb 9-1: SerialNumber: syz [ 1489.665590][T14529] usb 9-1: config 0 descriptor?? [ 1490.027990][T15814] usb 9-1: USB disconnect, device number 4 [ 1490.350813][T17191] netlink: 'syz.0.3427': attribute type 10 has an invalid length. [ 1492.379542][T17191] team0: Port device dummy0 added [ 1495.077915][T16964] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1495.255010][T16964] usb 10-1: Using ep0 maxpacket: 32 [ 1495.260794][T16964] usb 10-1: config 0 has no interfaces? [ 1495.272127][T16964] usb 10-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1495.272181][T16964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.272199][T16964] usb 10-1: Product: syz [ 1495.272212][T16964] usb 10-1: Manufacturer: syz [ 1495.272225][T16964] usb 10-1: SerialNumber: syz [ 1495.299711][T16964] usb 10-1: config 0 descriptor?? [ 1495.632926][T16964] usb 10-1: USB disconnect, device number 2 [ 1496.907210][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 1501.077984][T14992] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1501.182257][T17280] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1501.237896][T14992] usb 9-1: Using ep0 maxpacket: 32 [ 1501.240249][T14992] usb 9-1: config 0 has no interfaces? [ 1501.247001][T14992] usb 9-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1501.247027][T14992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.247045][T14992] usb 9-1: Product: syz [ 1501.247057][T14992] usb 9-1: Manufacturer: syz [ 1501.247070][T14992] usb 9-1: SerialNumber: syz [ 1501.303419][T14992] usb 9-1: config 0 descriptor?? [ 1501.513732][T14992] usb 9-1: USB disconnect, device number 5 [ 1502.092444][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1502.093024][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1508.004332][T17332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3474'. [ 1508.715314][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3477'. [ 1508.716053][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3477'. [ 1509.137970][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1509.221999][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1509.225618][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1509.251744][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1509.270023][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1509.538002][T17148] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1509.689386][T17148] usb 9-1: Using ep0 maxpacket: 16 [ 1509.696763][T17148] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1509.696798][T17148] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.696816][T17148] usb 9-1: Product: syz [ 1509.696829][T17148] usb 9-1: Manufacturer: syz [ 1509.696842][T17148] usb 9-1: SerialNumber: syz [ 1510.008439][T17148] usb 9-1: config 0 descriptor?? [ 1510.016631][T17148] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1510.251327][T17148] gspca_spca508: reg_read err -32 [ 1510.466140][T17148] gspca_spca508: reg_read err -71 [ 1510.466539][T17148] gspca_spca508: reg_read err -71 [ 1510.466996][T17148] gspca_spca508: reg_read err -71 [ 1510.467495][T17148] gspca_spca508: reg write: error -71 [ 1510.467601][T17148] spca508 9-1:0.0: probe with driver spca508 failed with error -71 [ 1510.568207][T17148] usb 9-1: USB disconnect, device number 6 [ 1511.477021][T14531] Bluetooth: hci7: command tx timeout [ 1512.186084][T17335] virt_wifi0 speed is unknown, defaulting to 1000 [ 1513.639500][ T59] Bluetooth: hci7: command tx timeout [ 1514.286366][T17387] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1514.402422][T17335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.407110][T17335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.407489][T17335] bridge_slave_0: entered allmulticast mode [ 1514.448479][T17335] bridge_slave_0: entered promiscuous mode [ 1514.466514][T17335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.466666][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.466918][T17335] bridge_slave_1: entered allmulticast mode [ 1514.489772][T17335] bridge_slave_1: entered promiscuous mode [ 1514.869652][T17335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.902812][T17335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.245208][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1515.245468][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1515.862611][ T59] Bluetooth: hci7: command tx timeout [ 1515.889110][T14992] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1515.922869][T17335] team0: Port device team_slave_0 added [ 1516.047967][T14992] usb 10-1: Using ep0 maxpacket: 32 [ 1516.053969][T14992] usb 10-1: config 0 has no interfaces? [ 1516.060782][T14992] usb 10-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1516.060809][T14992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.060826][T14992] usb 10-1: Product: syz [ 1516.060838][T14992] usb 10-1: Manufacturer: syz [ 1516.060850][T14992] usb 10-1: SerialNumber: syz [ 1516.107307][T14992] usb 10-1: config 0 descriptor?? [ 1516.320014][T14991] usb 10-1: USB disconnect, device number 3 [ 1516.403865][T17335] team0: Port device team_slave_1 added [ 1516.555890][T17335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.555907][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.555931][T17335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.560708][T17335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.560724][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.560748][T17335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.923406][T17335] hsr_slave_0: entered promiscuous mode [ 1516.928294][T17335] hsr_slave_1: entered promiscuous mode [ 1516.932913][T17335] debugfs: 'hsr0' already exists in 'hsr' [ 1516.932939][T17335] Cannot create hsr debugfs directory [ 1517.917879][T17406] lo speed is unknown, defaulting to 1000 [ 1517.923516][T17406] lo speed is unknown, defaulting to 1000 [ 1517.965934][T17406] lo speed is unknown, defaulting to 1000 [ 1518.002989][T17406] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1518.003050][T17406] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1518.003111][T17406] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1518.182385][T17406] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1518.183088][ T5610] Bluetooth: hci6: command 0x0406 tx timeout [ 1518.183387][ T5610] Bluetooth: hci7: command tx timeout [ 1518.275558][T17406] lo speed is unknown, defaulting to 1000 [ 1518.278661][T17406] lo speed is unknown, defaulting to 1000 [ 1518.281284][T17406] lo speed is unknown, defaulting to 1000 [ 1518.283955][T17406] lo speed is unknown, defaulting to 1000 [ 1518.286582][T17406] lo speed is unknown, defaulting to 1000 [ 1518.291657][T17406] lo speed is unknown, defaulting to 1000 [ 1518.294369][T17406] lo speed is unknown, defaulting to 1000 [ 1518.298910][T17406] lo speed is unknown, defaulting to 1000 [ 1518.301571][T17406] lo speed is unknown, defaulting to 1000 [ 1518.304225][T17406] lo speed is unknown, defaulting to 1000 [ 1518.306955][T17406] lo speed is unknown, defaulting to 1000 [ 1519.338763][ T38] INFO: task syz.7.3251:16559 blocked for more than 144 seconds. [ 1519.338804][ T38] Tainted: G L syzkaller #0 [ 1519.338814][ T38] Blocked by coredump. [ 1519.338820][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1519.338833][ T38] task:syz.7.3251 state:D stack:25432 pid:16559 tgid:16558 ppid:16242 task_flags:0x40054c flags:0x00080000 [ 1519.338898][ T38] Call Trace: [ 1519.338904][ T38] [ 1519.338917][ T38] __schedule+0x16ec/0x5620[ 1519.338917][ T38] __schedule+0x16ec/0x5620 [ 1519.339029][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.339060][ T38] ? look_up_lock_class+0x57/0x110 [ 1519.339111][ T38] ? __pfx___schedule+0x10/0x10 [ 1519.339142][ T38] ? schedule+0x90/0x360 [ 1519.339166][ T38] schedule+0x164/0x360 [ 1519.339189][ T38] schedule_timeout+0xc3/0x2c0 [ 1519.339237][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1519.339259][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1519.339289][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.339309][ T38] ? wait_for_completion+0x274/0x5e0 [ 1519.339332][ T38] wait_for_completion+0x2cc/0x5e0 [ 1519.339366][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1519.339402][ T38] exit_aio+0x319/0x3f0 [ 1519.339428][ T38] ? __pfx_exit_aio+0x10/0x10 [ 1519.339456][ T38] ? uprobe_clear_state+0x2bf/0x3f0 [ 1519.339483][ T38] __mmput+0x68/0x3d0 [ 1519.339504][ T38] exit_mm+0x1f6/0x2d0 [ 1519.339531][ T38] do_exit+0x6a2/0x22c0 [ 1519.339556][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1519.339582][ T38] ? __pfx_do_exit+0x10/0x10 [ 1519.339601][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1519.339620][ T38] ? reacquire_held_locks+0x104/0x190 [ 1519.339643][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1519.339673][ T38] do_group_exit+0x21b/0x2d0 [ 1519.339696][ T38] ? rt_spin_unlock+0x160/0x200 [ 1519.339717][ T38] get_signal+0x1284/0x1330 [ 1519.339756][ T38] arch_do_signal_or_restart+0xbc/0x840 [ 1519.339786][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1519.339830][ T38] exit_to_user_mode_loop+0x8c/0x4d0 [ 1519.339858][ T38] ? rcu_is_watching+0x15/0xb0 [ 1519.339884][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.339904][ T38] do_syscall_64+0x33e/0xf80 [ 1519.339954][ T38] ? trace_irq_disable+0x3b/0x140 [ 1519.339975][ T38] ? clear_bhb_loop+0x40/0x90 [ 1519.339997][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.340019][ T38] RIP: 0033:0x7fd6256bce59 [ 1519.340035][ T38] RSP: 002b:00007fd6239160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1519.340054][ T38] RAX: fffffffffffffe00 RBX: 00007fd625935fa8 RCX: 00007fd6256bce59 [ 1519.340098][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd625935fa8 [ 1519.340109][ T38] RBP: 00007fd625935fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.340120][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1519.340131][ T38] R13: 00007fd625936038 R14: 00007ffff0f7c260 R15: 00007ffff0f7c348 [ 1519.340163][ T38] [ 1519.340171][ T38] INFO: task syz.6.3253:16568 blocked for more than 144 seconds. [ 1519.340187][ T38] Tainted: G L syzkaller #0 [ 1519.340196][ T38] Blocked by coredump. [ 1519.340202][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1519.340210][ T38] task:syz.6.3253 state:D stack:27736 pid:16568 tgid:16562 ppid:15264 task_flags:0x40044c flags:0x00080001 [ 1519.340254][ T38] Call Trace: [ 1519.340261][ T38] [ 1519.340271][ T38] __schedule+0x16ec/0x5620 [ 1519.340307][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.340335][ T38] ? look_up_lock_class+0x57/0x110 [ 1519.340360][ T38] ? __pfx___schedule+0x10/0x10 [ 1519.340391][ T38] ? schedule+0x90/0x360 [ 1519.340419][ T38] schedule+0x164/0x360 [ 1519.340442][ T38] schedule_timeout+0xc3/0x2c0 [ 1519.340466][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1519.340486][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1519.340516][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.340536][ T38] ? wait_for_completion+0x274/0x5e0 [ 1519.340559][ T38] wait_for_completion+0x2cc/0x5e0 [ 1519.340593][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1519.340628][ T38] exit_aio+0x319/0x3f0 [ 1519.340653][ T38] ? __pfx_exit_aio+0x10/0x10 [ 1519.340682][ T38] ? uprobe_clear_state+0x2bf/0x3f0 [ 1519.340707][ T38] __mmput+0x68/0x3d0 [ 1519.340728][ T38] exit_mm+0x1f6/0x2d0 [ 1519.340755][ T38] do_exit+0x6a2/0x22c0 [ 1519.340779][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1519.340805][ T38] ? __pfx_do_exit+0x10/0x10 [ 1519.340824][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1519.340843][ T38] ? reacquire_held_locks+0x104/0x190 [ 1519.340874][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1519.340904][ T38] do_group_exit+0x21b/0x2d0 [ 1519.340926][ T38] ? rt_spin_unlock+0x160/0x200 [ 1519.340947][ T38] get_signal+0x1284/0x1330 [ 1519.340986][ T38] arch_do_signal_or_restart+0xbc/0x840 [ 1519.341015][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1519.341047][ T38] ? __x64_sys_recvmmsg+0x198/0x250 [ 1519.341156][ T38] exit_to_user_mode_loop+0x8c/0x4d0 [ 1519.341177][ T38] ? rcu_is_watching+0x15/0xb0 [ 1519.341201][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.341220][ T38] do_syscall_64+0x33e/0xf80 [ 1519.341241][ T38] ? trace_irq_disable+0x3b/0x140 [ 1519.341260][ T38] ? clear_bhb_loop+0x40/0x90 [ 1519.341282][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.341299][ T38] RIP: 0033:0x7fce7165ce59 [ 1519.341314][ T38] RSP: 002b:00007fce6f867028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1519.341332][ T38] RAX: 0000000000010106 RBX: 00007fce718d6180 RCX: 00007fce7165ce59 [ 1519.341345][ T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1519.341356][ T38] RBP: 00007fce716f2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1519.341368][ T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1519.341379][ T38] R13: 00007fce718d6218 R14: 00007fce718d6180 R15: 00007fff48883fe8 [ 1519.341409][ T38] [ 1519.341452][ T38] [ 1519.341452][ T38] Showing all locks held in the system: [ 1519.341461][ T38] 3 locks held by kworker/u8:1/13: [ 1519.341472][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.341520][ T38] #1: ffffc90000127c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.341561][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.341603][ T38] 3 locks held by rcuc/1/28: [ 1519.341614][ T38] 1 lock held by khungtaskd/38: [ 1519.341623][ T38] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1519.341670][ T38] 3 locks held by kworker/u8:3/55: [ 1519.341680][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.341721][ T38] #1: ffffc9000121fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.341762][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.341808][ T38] 4 locks held by kworker/u9:0/59: [ 1519.341818][ T38] #0: ffff88804dc56938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.341862][ T38] #1: ffffc9000125fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.344474][ T38] #2: ffff88805114cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1519.344605][ T38] #3: ffff88805114c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1519.344653][ T38] 3 locks held by kworker/u8:5/148: [ 1519.344665][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.344708][ T38] #1: ffffc900038bfc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.344751][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.344792][ T38] 3 locks held by kworker/u8:6/152: [ 1519.344803][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.344844][ T38] #1: ffffc9000394fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.344895][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.344937][ T38] 3 locks held by kworker/u8:7/160: [ 1519.344947][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.344989][ T38] #1: ffffc9000395fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.345031][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.345094][ T38] 2 locks held by getty/5348: [ 1519.345104][ T38] #0: ffff88802880a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1519.345149][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1519.345202][ T38] 3 locks held by kworker/u8:10/5794: [ 1519.345212][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.345255][ T38] #1: ffffc900055cfc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.345297][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.345337][ T38] 4 locks held by kworker/u8:11/5795: [ 1519.345348][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.345390][ T38] #1: ffffc900055efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.345432][ T38] #2: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1519.345508][ T38] #3: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.345550][ T38] 3 locks held by kworker/u8:12/5796: [ 1519.345560][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.345603][ T38] #1: ffffc9000560fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.345646][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.345686][ T38] 3 locks held by kworker/u8:15/5885: [ 1519.345695][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.345736][ T38] #1: ffffc90005a27c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.345777][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.345815][ T38] 3 locks held by kworker/1:0/9120: [ 1519.345825][ T38] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.345869][ T38] #1: ffffc90005e77c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.345907][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.345947][ T38] 1 lock held by udevd/11685: [ 1519.345955][ T38] #0: ffff8880116da480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1519.346016][ T38] 1 lock held by udevd/12033: [ 1519.358279][ T38] #0: ffff8880116da480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1519.358349][ T38] 3 locks held by kworker/u8:0/12307: [ 1519.358360][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.358404][ T38] #1: ffffc90011ebfc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.358445][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.358488][ T38] 2 locks held by kworker/0:5/14991: [ 1519.358499][ T38] 1 lock held by syz-executor/15065: [ 1519.358509][ T38] #0: ffff88803584e480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1519.358556][ T38] 1 lock held by syz-executor/15646: [ 1519.358566][ T38] #0: ffff888036430480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1519.358613][ T38] 2 locks held by kworker/u8:2/15812: [ 1519.358623][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.358663][ T38] #1: ffffc9000cf4fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.358704][ T38] 3 locks held by kworker/u8:4/15813: [ 1519.358714][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.358754][ T38] #1: ffffc9000ceefc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.358795][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.358834][ T38] 1 lock held by syz.4.3081/16166: [ 1519.358844][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.358891][ T38] 2 locks held by kworker/u8:14/16415: [ 1519.358901][ T38] 3 locks held by kworker/u8:16/16455: [ 1519.358911][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.358952][ T38] #1: ffffc9000404fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.358991][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.359031][ T38] 5 locks held by kworker/u8:17/16503: [ 1519.359041][ T38] 3 locks held by kworker/u8:18/16504: [ 1519.359051][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.359091][ T38] #1: ffffc90003f1fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.359132][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.359176][ T38] 5 locks held by kworker/u8:19/16807: [ 1519.359200][ T38] 3 locks held by kworker/u8:20/16808: [ 1519.359211][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.359252][ T38] #1: ffffc9000912fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.359293][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.359331][ T38] 3 locks held by kworker/u8:21/17028: [ 1519.359341][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.359382][ T38] #1: ffffc90003f8fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.359422][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.359463][ T38] 1 lock held by syz.5.3433/17208: [ 1519.359473][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1519.359512][ T38] 4 locks held by syz.9.3454/17261: [ 1519.359522][ T38] 3 locks held by syz.9.3466/17302: [ 1519.359533][ T38] 5 locks held by syz-executor/17335: [ 1519.359542][ T38] 9 locks held by kworker/u8:22/17342: [ 1519.359551][ T38] 3 locks held by kworker/u8:23/17343: [ 1519.359561][ T38] 2 locks held by syz.9.3480/17351: [ 1519.359570][ T38] 4 locks held by kworker/u8:24/17379: [ 1519.359580][ T38] 3 locks held by syz.0.3491/17402: [ 1519.359589][ T38] 4 locks held by syz.8.3493/17408: [ 1519.359599][ T38] 3 locks held by kworker/u8:25/17411: [ 1519.359609][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1519.359648][ T38] #1: ffffc9000f767c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1519.359688][ T38] #2: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1519.791252][ T38] 6 locks held by syz.9.3494/17414: [ 1519.791300][ T38] [ 1519.791332][ T38] ============================================= [ 1519.791332][ T38] [ 1519.791405][ T38] NMI backtrace for cpu 0 [ 1519.791434][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1519.791459][ T38] Tainted: [L]=SOFTLOCKUP [ 1519.791465][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1519.791476][ T38] Call Trace: [ 1519.791485][ T38] [ 1519.791494][ T38] dump_stack_lvl+0xe8/0x150 [ 1519.791522][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1519.791621][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1519.791644][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1519.791666][ T38] sys_info+0x135/0x170 [ 1519.791688][ T38] watchdog+0xfd3/0x1030 [ 1519.791716][ T38] ? watchdog+0x1c9/0x1030 [ 1519.791740][ T38] kthread+0x388/0x470 [ 1519.791763][ T38] ? __pfx_watchdog+0x10/0x10 [ 1519.791780][ T38] ? __pfx_kthread+0x10/0x10 [ 1519.791802][ T38] ret_from_fork+0x514/0xb70 [ 1519.791826][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1519.791845][ T38] ? __switch_to+0xc79/0x1410 [ 1519.791873][ T38] ? __pfx_kthread+0x10/0x10 [ 1519.791896][ T38] ret_from_fork_asm+0x1a/0x30 [ 1519.791933][ T38] [ 1519.791941][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1519.791969][ C1] NMI backtrace for cpu 1 [ 1519.791984][ C1] CPU: 1 UID: 0 PID: 17414 Comm: syz.9.3494 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1519.792006][ C1] Tainted: [L]=SOFTLOCKUP [ 1519.792011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1519.792021][ C1] RIP: 0010:check_preemption_disabled+0x29/0xe0 [ 1519.792045][ C1] Code: 90 55 41 57 41 56 53 65 8b 05 77 8f 4d 07 65 8b 0d 6c 8f 4d 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 09 aa 03 00 cc 9c <59> f7 c1 00 02 00 00 74 ea 65 4c 8b 3d 1e 8f 4d 07 41 f6 47 2f 04 [ 1519.792059][ C1] RSP: 0018:ffffc9000fc57520 EFLAGS: 00000046 [ 1519.792073][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000000 [ 1519.792083][ C1] RDX: 0000000000000000 RSI: ffffffff8d865ad1 RDI: ffffffff8ba75860 [ 1519.792094][ C1] RBP: 00000000ffffffff R08: ffffffff88f18cb9 R09: ffff888031eb0198 [ 1519.792104][ C1] R10: dffffc0000000000 R11: fffffbfff1f1209f R12: 0000000000000246 [ 1519.792115][ C1] R13: ffff88804d1b5c40 R14: ffffffff8dfc8140 R15: 0000000000000002 [ 1519.792126][ C1] FS: 00007f34335356c0(0000) GS:ffff888126271000(0000) knlGS:0000000000000000 [ 1519.792139][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1519.792150][ C1] CR2: 00007f343534a540 CR3: 000000004c75c000 CR4: 00000000003526f0 [ 1519.792164][ C1] Call Trace: [ 1519.792170][ C1] [ 1519.792178][ C1] lock_is_held_type+0xdf/0x150 [ 1519.792197][ C1] __might_resched+0x37/0x480 [ 1519.792217][ C1] rt_spin_lock+0xc2/0x400 [ 1519.792233][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1519.792250][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1519.792269][ C1] __skb_try_recv_datagram+0x89/0x1b0 [ 1519.792336][ C1] __unix_dgram_recvmsg+0x2e3/0xd60 [ 1519.792386][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1519.792403][ C1] ? irqentry_exit+0x218/0x760 [ 1519.792420][ C1] ? trace_irq_disable+0x3b/0x140 [ 1519.792438][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1519.792458][ C1] ? unix_dgram_recvmsg+0xae/0xd0 [ 1519.792499][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1519.792517][ C1] sock_recvmsg_nosec+0x10c/0x140 [ 1519.792535][ C1] ____sys_recvmsg+0x3ef/0x4b0 [ 1519.792557][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1519.792582][ C1] ? import_iovec+0x73/0xa0 [ 1519.792600][ C1] ___sys_recvmsg+0x215/0x590 [ 1519.792621][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1519.792654][ C1] do_recvmmsg+0x33a/0x800 [ 1519.792675][ C1] ? file_init_path+0x3b/0x5b0 [ 1519.792695][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1519.792712][ C1] ? __asan_memcpy+0x40/0x70 [ 1519.792736][ C1] ? __pfx_do_futex+0x10/0x10 [ 1519.792762][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 1519.792782][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1519.792811][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.792827][ C1] do_syscall_64+0x15f/0xf80 [ 1519.792844][ C1] ? trace_irq_disable+0x3b/0x140 [ 1519.792860][ C1] ? clear_bhb_loop+0x40/0x90 [ 1519.792878][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.792893][ C1] RIP: 0033:0x7f34352fce59 [ 1519.792906][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.792919][ C1] RSP: 002b:00007f3433535028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1519.792935][ C1] RAX: ffffffffffffffda RBX: 00007f3435576090 RCX: 00007f34352fce59 [ 1519.792946][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1519.792956][ C1] RBP: 00007f3435392d6f R08: 0000000000000000 R09: 0000000000000000 [ 1519.792965][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1519.792974][ C1] R13: 00007f3435576128 R14: 00007f3435576090 R15: 00007fffd993e258 [ 1519.792992][ C1] [ 1520.141321][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1520.141343][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1520.141368][ T38] Tainted: [L]=SOFTLOCKUP [ 1520.141375][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1520.141385][ T38] Call Trace: [ 1520.141392][ T38] [ 1520.141400][ T38] vpanic+0x56c/0xa60 [ 1520.141425][ T38] ? __pfx___schedule+0x10/0x10 [ 1520.141447][ T38] ? __pfx_vpanic+0x10/0x10 [ 1520.141474][ T38] panic+0xc5/0xd0 [ 1520.141494][ T38] ? __pfx_panic+0x10/0x10 [ 1520.141514][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1520.141543][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1520.141565][ T38] watchdog+0x102c/0x1030 [ 1520.141592][ T38] ? watchdog+0x1c9/0x1030 [ 1520.141616][ T38] kthread+0x388/0x470 [ 1520.141638][ T38] ? __pfx_watchdog+0x10/0x10 [ 1520.141656][ T38] ? __pfx_kthread+0x10/0x10 [ 1520.141677][ T38] ret_from_fork+0x514/0xb70 [ 1520.141700][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1520.141717][ T38] ? __switch_to+0xc79/0x1410 [ 1520.141744][ T38] ? __pfx_kthread+0x10/0x10 [ 1520.141770][ T38] ret_from_fork_asm+0x1a/0x30 [ 1520.141812][ T38] [ 1520.142222][ T38] Kernel Offset: disabled