last executing test programs: 48.95438745s ago: executing program 3 (id=256): socket$key(0xf, 0x3, 0x2) openat$vcsa(0xffffff9c, 0x0, 0xe100, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e27, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) 48.144194315s ago: executing program 3 (id=261): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 47.522072566s ago: executing program 3 (id=264): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 45.836282175s ago: executing program 3 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 42.432317077s ago: executing program 3 (id=281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 41.684301904s ago: executing program 3 (id=286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 25.446904401s ago: executing program 32 (id=286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) 15.266978049s ago: executing program 2 (id=334): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0xfffffffe, 0x1, 0x8, 0x5, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x0, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r0, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 14.495629539s ago: executing program 2 (id=335): syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d00000524"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r2 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x3, 0x6, @random="71d2e1764654"}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 9.41417795s ago: executing program 0 (id=341): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) dup(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x34930c73, 0x48342) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) ptrace(0x4217, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) read$hiddev(r2, &(0x7f0000001140)=""/126, 0x7e) 9.04404531s ago: executing program 2 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 8.442894236s ago: executing program 2 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(r2) 7.888959294s ago: executing program 4 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 6.307991528s ago: executing program 1 (id=347): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") 3.969684644s ago: executing program 4 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0xfffffd03, 0x3, {[0xa20, 0xfff9, 0x81, 0xe, 0x8, 0x7, 0xaa, 0x5]}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) 3.747446722s ago: executing program 0 (id=349): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480)=0x100, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e1d, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3.676626058s ago: executing program 2 (id=350): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.515672904s ago: executing program 1 (id=351): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x6) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x400) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x28, 0x4010}}], 0x1, 0x20020015) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r1) 3.127200577s ago: executing program 0 (id=352): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0x4) 2.650973155s ago: executing program 0 (id=353): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) 2.50046464s ago: executing program 4 (id=354): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) 2.317396337s ago: executing program 1 (id=355): r0 = socket(0x200000000000011, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 2.060345975s ago: executing program 0 (id=356): bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.881878386s ago: executing program 4 (id=357): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0300000000000000000000000080040004800c00bc0cffd1aeaacf810001140000001100010000000000000000000000000ae046e868317ca46f778ccb9590166092ce0ba0922df3040baef2e0bdbc5a8b204327cfc2b327b79b64"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000880) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, 0x0}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.624902321s ago: executing program 0 (id=358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r2, &(0x7f0000000080)=""/60, 0x3c, 0x101, 0x0, 0x0) 1.456069238s ago: executing program 1 (id=359): fanotify_init(0x200, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x8, 0x40000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x682f, 0x10000, 0x1, 0x10000055, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 866.791385ms ago: executing program 1 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 632.026024ms ago: executing program 4 (id=361): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r0, 0x3) landlock_restrict_self(r0, 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') 493.277249ms ago: executing program 2 (id=362): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) dup(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x34930c73, 0x48342) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) ptrace(0x4217, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) read$hiddev(r2, &(0x7f0000001140)=""/126, 0x7e) 395.353964ms ago: executing program 1 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0xfffffd03, 0x3, {[0xa20, 0xfff9, 0x81, 0xe, 0x8, 0x7, 0xaa, 0x5]}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) 0s ago: executing program 4 (id=364): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x6) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x400) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsmount(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x28, 0x4010}}], 0x1, 0x20020015) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 156.058225][ T5562] cgroup: Unknown subsys name 'net' [ 156.180155][ T5562] cgroup: Unknown subsys name 'cpuset' [ 156.193929][ T5562] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.726401][ T5562] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.908108][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.920352][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.930930][ T5581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.946180][ T5581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.959313][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.001379][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.015556][ T5584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.025653][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.053351][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.065011][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.074834][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.082775][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.083768][ T5590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.091824][ T5587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.099838][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.115320][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.115761][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.126411][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.135485][ T5590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.145576][ T5581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.147160][ T5590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.153480][ T5581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.174870][ T4876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.225682][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.245853][ T4876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.023283][ T4876] Bluetooth: hci0: command tx timeout [ 168.265328][ T4876] Bluetooth: hci2: command tx timeout [ 168.266841][ T48] Bluetooth: hci3: command tx timeout [ 168.270961][ T5584] Bluetooth: hci1: command tx timeout [ 168.342788][ T4876] Bluetooth: hci4: command tx timeout [ 170.105476][ T4876] Bluetooth: hci0: command tx timeout [ 170.252644][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.274542][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.291880][ T5582] bridge_slave_0: entered allmulticast mode [ 170.310511][ T5582] bridge_slave_0: entered promiscuous mode [ 170.345271][ T4876] Bluetooth: hci2: command tx timeout [ 170.351021][ T5584] Bluetooth: hci3: command tx timeout [ 170.353164][ T48] Bluetooth: hci1: command tx timeout [ 170.379826][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.405386][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.418394][ T5582] bridge_slave_1: entered allmulticast mode [ 170.425494][ T48] Bluetooth: hci4: command tx timeout [ 170.427601][ T5582] bridge_slave_1: entered promiscuous mode [ 170.666686][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.678026][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.688189][ T5579] bridge_slave_0: entered allmulticast mode [ 170.699123][ T5579] bridge_slave_0: entered promiscuous mode [ 170.713180][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.722664][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.730085][ T5593] bridge_slave_0: entered allmulticast mode [ 170.738829][ T5593] bridge_slave_0: entered promiscuous mode [ 170.777920][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.788531][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.796476][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.804086][ T5579] bridge_slave_1: entered allmulticast mode [ 170.812914][ T5579] bridge_slave_1: entered promiscuous mode [ 170.851605][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.859155][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.866723][ T5593] bridge_slave_1: entered allmulticast mode [ 170.874987][ T5593] bridge_slave_1: entered promiscuous mode [ 170.885296][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.893095][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.900479][ T5589] bridge_slave_0: entered allmulticast mode [ 170.908972][ T5589] bridge_slave_0: entered promiscuous mode [ 170.926183][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.029863][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.037757][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.049987][ T5589] bridge_slave_1: entered allmulticast mode [ 171.058384][ T5589] bridge_slave_1: entered promiscuous mode [ 171.137812][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.258948][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.280174][ T5582] team0: Port device team_slave_0 added [ 171.288537][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.296539][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.306214][ T5586] bridge_slave_0: entered allmulticast mode [ 171.315376][ T5586] bridge_slave_0: entered promiscuous mode [ 171.333670][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.350501][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.368139][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.384033][ T5582] team0: Port device team_slave_1 added [ 171.390845][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.398665][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.406817][ T5586] bridge_slave_1: entered allmulticast mode [ 171.415143][ T5586] bridge_slave_1: entered promiscuous mode [ 171.454183][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.647036][ T5579] team0: Port device team_slave_0 added [ 171.683199][ T5589] team0: Port device team_slave_0 added [ 171.690921][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.698240][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.724678][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.744219][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.760884][ T5579] team0: Port device team_slave_1 added [ 171.773666][ T5593] team0: Port device team_slave_0 added [ 171.786395][ T5589] team0: Port device team_slave_1 added [ 171.794283][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.801832][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.828315][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.846747][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.884504][ T5593] team0: Port device team_slave_1 added [ 172.039203][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.046413][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.072720][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.108736][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.116255][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.142548][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.158847][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.166181][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.192420][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.192826][ T48] Bluetooth: hci0: command tx timeout [ 172.213282][ T5586] team0: Port device team_slave_0 added [ 172.220952][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.228260][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.254603][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.268037][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.275901][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.302257][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.371826][ T5586] team0: Port device team_slave_1 added [ 172.393294][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.400379][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.426738][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.428354][ T48] Bluetooth: hci1: command tx timeout [ 172.443470][ T4876] Bluetooth: hci2: command tx timeout [ 172.449094][ T5584] Bluetooth: hci3: command tx timeout [ 172.502802][ T48] Bluetooth: hci4: command tx timeout [ 172.528546][ T5582] hsr_slave_0: entered promiscuous mode [ 172.537091][ T5582] hsr_slave_1: entered promiscuous mode [ 172.578289][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.585804][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.612347][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.628595][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.635841][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.662092][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.806490][ T5593] hsr_slave_0: entered promiscuous mode [ 172.814723][ T5593] hsr_slave_1: entered promiscuous mode [ 172.822580][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 172.828454][ T5593] Cannot create hsr debugfs directory [ 172.917861][ T5589] hsr_slave_0: entered promiscuous mode [ 172.926407][ T5589] hsr_slave_1: entered promiscuous mode [ 172.934361][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 172.940172][ T5589] Cannot create hsr debugfs directory [ 172.959156][ T5579] hsr_slave_0: entered promiscuous mode [ 172.967584][ T5579] hsr_slave_1: entered promiscuous mode [ 172.975490][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 172.981420][ T5579] Cannot create hsr debugfs directory [ 173.149881][ T5586] hsr_slave_0: entered promiscuous mode [ 173.158383][ T5586] hsr_slave_1: entered promiscuous mode [ 173.166491][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 173.172415][ T5586] Cannot create hsr debugfs directory [ 174.251980][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.261651][ T48] Bluetooth: hci0: command tx timeout [ 174.284418][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.294815][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.312253][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.335143][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.354089][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.379227][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.397473][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.486790][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.502982][ T48] Bluetooth: hci1: command tx timeout [ 174.508690][ T5584] Bluetooth: hci3: command tx timeout [ 174.512264][ T4876] Bluetooth: hci2: command tx timeout [ 174.515309][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.530195][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.547686][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.557568][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.578275][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.585589][ T4876] Bluetooth: hci4: command tx timeout [ 174.594969][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.615414][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.780551][ T5579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.810978][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.820990][ T5579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.839125][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.867671][ T5579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.885347][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.920637][ T5579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.936468][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.110065][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.130152][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.162993][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.180575][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.216884][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.253162][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.324941][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.364386][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.569427][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.591086][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.619885][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.638535][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.649308][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.667797][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.703529][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.721782][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.957131][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.067893][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.137930][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.214645][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.222126][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.289350][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.325114][ T3230] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.332597][ T3230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.380833][ T3230] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.388229][ T3230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.442096][ T3230] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.449422][ T3230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.512865][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.689532][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.725003][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.828058][ T3230] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.835444][ T3230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.899157][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.920675][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.950653][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.958192][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.069770][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.077533][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.170050][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.177605][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.215391][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.411284][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.418794][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.575353][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.582886][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.360051][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.093356][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.920055][ T5593] veth0_vlan: entered promiscuous mode [ 181.130873][ T5593] veth1_vlan: entered promiscuous mode [ 181.299163][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.396028][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.411704][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.603332][ T5593] veth0_macvtap: entered promiscuous mode [ 181.706407][ T5593] veth1_macvtap: entered promiscuous mode [ 181.756925][ T5582] veth0_vlan: entered promiscuous mode [ 181.874442][ T5579] veth0_vlan: entered promiscuous mode [ 181.940577][ T5582] veth1_vlan: entered promiscuous mode [ 181.964208][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.976648][ T5579] veth1_vlan: entered promiscuous mode [ 182.082413][ T5586] veth0_vlan: entered promiscuous mode [ 182.090533][ T5589] veth0_vlan: entered promiscuous mode [ 182.109372][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.184477][ T1011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.194243][ T1011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.224446][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.236695][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.256656][ T5589] veth1_vlan: entered promiscuous mode [ 182.298475][ T5586] veth1_vlan: entered promiscuous mode [ 182.477583][ T5582] veth0_macvtap: entered promiscuous mode [ 182.586510][ T5582] veth1_macvtap: entered promiscuous mode [ 182.649695][ T5579] veth0_macvtap: entered promiscuous mode [ 182.717988][ T5589] veth0_macvtap: entered promiscuous mode [ 182.756540][ T5579] veth1_macvtap: entered promiscuous mode [ 182.840912][ T5589] veth1_macvtap: entered promiscuous mode [ 182.869844][ T5586] veth0_macvtap: entered promiscuous mode [ 182.908613][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.978078][ T5586] veth1_macvtap: entered promiscuous mode [ 183.014895][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.119336][ T1026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.132233][ T1026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.159250][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.183868][ T1026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.197134][ T1026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.231644][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.300068][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.329920][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.395373][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.468023][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.497591][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.518645][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.529126][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.606742][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.629537][ T5703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.647600][ T5703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.666256][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.726272][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.754928][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.807561][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.831498][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.890525][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.742638][ T3230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.776598][ T3230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.034894][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.077061][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.441407][ T5593] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.954145][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 187.975637][ T5834] batadv_slave_0: entered promiscuous mode [ 188.005785][ T5832] batadv_slave_0: left promiscuous mode [ 188.568545][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.603247][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.895277][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.937548][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.022708][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.047379][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.137886][ T5703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.149230][ T5703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.326405][ T5714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.351636][ T5714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.586549][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.607790][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.804434][ T5703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.831288][ T5703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.935631][ T5854] mmap: syz.4.7 (5854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.959396][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.995308][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.595730][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.604808][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.954213][ T5861] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1'. [ 190.986048][ T5862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 191.164317][ T5864] syzkaller0: entered promiscuous mode [ 191.182938][ T5864] syzkaller0: entered allmulticast mode [ 192.107821][ T5879] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 192.736112][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 192.765652][ T5875] batadv_slave_0: entered promiscuous mode [ 192.832288][ T5873] batadv_slave_0: left promiscuous mode [ 192.996302][ T5886] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 194.765143][ T5913] batman_adv: batadv0: Adding interface: dummy0 [ 194.809634][ T5913] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.919571][ T5913] batman_adv: batadv0: Interface activated: dummy0 [ 195.099545][ T5916] batadv0: mtu less than device minimum [ 195.160699][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.173760][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.186711][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.199526][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.212499][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.225505][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.238370][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.251335][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.264209][ T5916] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.997146][ T5923] syzkaller0: entered promiscuous mode [ 196.039676][ T5923] syzkaller0: entered allmulticast mode [ 196.738674][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 196.937985][ T5938] batadv_slave_0: entered promiscuous mode [ 197.045306][ T5937] batadv_slave_0: left promiscuous mode [ 197.619002][ T5681] IPVS: starting estimator thread 0... [ 197.735705][ T5955] IPVS: using max 240 ests per chain, 12000 per kthread [ 197.851255][ T5956] Zero length message leads to an empty skb [ 198.121598][ T5677] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 198.319933][ T5677] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.358516][ T5677] usb 1-1: config 0 has no interface number 0 [ 198.397651][ T5677] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.440668][ T5677] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.508921][ T5677] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.589167][ T5677] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 198.608179][ T5677] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 198.641422][ T5677] usb 1-1: Product: syz [ 198.677253][ T5677] usb 1-1: config 0 descriptor?? [ 198.839723][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.847368][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.107524][ T5971] netlink: 100 bytes leftover after parsing attributes in process `syz.2.42'. [ 199.150991][ T5677] chicony 0003:04F2:1421.0001: ignoring exceeding usage max [ 199.196376][ T5677] chicony 0003:04F2:1421.0001: collection stack underflow [ 199.222216][ T5677] chicony 0003:04F2:1421.0001: item 0 0 0 12 parsing failed [ 199.248669][ T5677] chicony 0003:04F2:1421.0001: Chicony hid parse failed: -22 [ 199.268940][ T5677] chicony 0003:04F2:1421.0001: probe with driver chicony failed with error -22 [ 200.807365][ T5681] usb 1-1: USB disconnect, device number 2 [ 201.439149][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 201.581735][ T5995] batadv_slave_0: entered promiscuous mode [ 201.649021][ T5994] batadv_slave_0: left promiscuous mode [ 201.933797][ T5681] IPVS: starting estimator thread 0... [ 202.043151][ T5998] IPVS: using max 336 ests per chain, 16800 per kthread [ 202.771803][ T6007] netlink: 100 bytes leftover after parsing attributes in process `syz.0.53'. [ 203.711540][ T5677] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 203.926096][ T5677] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.994170][ T5677] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 204.039116][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.074076][ T5677] usb 1-1: Product: syz [ 204.099358][ T5677] usb 1-1: Manufacturer: syz [ 204.128678][ T5677] usb 1-1: SerialNumber: syz [ 204.708712][ T5677] usb 1-1: unit 5 not found! [ 204.733523][ T5677] usb 1-1: unit 3 not found! [ 205.369127][ T5677] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 205.404606][ T5677] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 205.569684][ T5677] usb 1-1: USB disconnect, device number 3 [ 206.019268][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.614023][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 207.191868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 208.911920][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 209.116606][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.164518][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.229456][ T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 209.287162][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.318305][ T24] usb 5-1: Product: syz [ 209.353795][ T24] usb 5-1: Manufacturer: syz [ 209.368868][ T24] usb 5-1: SerialNumber: syz [ 209.414787][ T24] usb 5-1: config 0 descriptor?? [ 209.502220][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 209.590045][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.680254][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 209.744489][ T24] usb 5-1: media controller created [ 209.767918][ T6058] netlink: 'syz.0.70': attribute type 4 has an invalid length. [ 209.809886][ T6058] netlink: 17 bytes leftover after parsing attributes in process `syz.0.70'. [ 209.947753][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.291698][ T5677] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.492481][ T5677] usb 1-1: Using ep0 maxpacket: 8 [ 210.527959][ T5677] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 210.556873][ T5677] usb 1-1: config 0 has no interface number 0 [ 210.589694][ T5677] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 210.607031][ T24] DVB: Unable to find symbol tda10046_attach() [ 210.616485][ T5677] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 210.630210][ T5677] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 210.669964][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.690540][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 210.706151][ T5677] usb 1-1: Product: syz [ 210.727149][ T5677] usb 1-1: Manufacturer: syz [ 210.731862][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 210.741913][ T5681] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 210.802299][ T5677] usb 1-1: SerialNumber: syz [ 210.858537][ T5677] usb 1-1: config 0 descriptor?? [ 210.893374][ T6059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 210.968153][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.052052][ T5681] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 211.075772][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.096306][ T5681] usb 3-1: Product: syz [ 211.100918][ T5681] usb 3-1: Manufacturer: syz [ 211.107939][ T5681] usb 3-1: SerialNumber: syz [ 211.349711][ T5677] ath6kl: Failed to submit usb control message: -71 [ 211.400693][ T5677] ath6kl: unable to send the bmi data to the device: -71 [ 211.416931][ T24] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 211.420281][ T5677] ath6kl: Unable to send get target info: -71 [ 211.470443][ T5677] ath6kl: Failed to init ath6kl core: -71 [ 211.518340][ T24] usb 5-1: USB disconnect, device number 2 [ 211.550808][ T5677] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 211.715605][ T5677] usb 1-1: USB disconnect, device number 4 [ 211.823177][ T5681] usb 3-1: unit 5 not found! [ 211.843082][ T5681] usb 3-1: unit 3 not found! [ 212.224472][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.75'. [ 212.514117][ T5681] snd-usb-us122l 3-1:1.1: usb_set_interface error [ 212.532716][ T5681] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 212.624042][ T5681] usb 3-1: USB disconnect, device number 2 [ 212.767416][ T24] IPVS: starting estimator thread 0... [ 212.894445][ T6086] IPVS: using max 240 ests per chain, 12000 per kthread [ 212.963642][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.202172][ T6114] netlink: 'syz.4.87': attribute type 4 has an invalid length. [ 216.243510][ T6114] netlink: 17 bytes leftover after parsing attributes in process `syz.4.87'. [ 216.502977][ T5681] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.661754][ T5677] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 216.692100][ T5681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.701626][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 216.755830][ T5681] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 216.778154][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.803064][ T5681] usb 1-1: Product: syz [ 216.819829][ T5681] usb 1-1: Manufacturer: syz [ 216.835912][ T5681] usb 1-1: SerialNumber: syz [ 216.851508][ T5677] usb 5-1: Using ep0 maxpacket: 8 [ 216.904804][ T5677] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 216.919971][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.944306][ T5677] usb 5-1: config 0 has no interface number 0 [ 216.966016][ T5677] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 216.970442][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.010911][ T5677] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 217.055680][ T24] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 217.081317][ T5677] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 217.091879][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.107388][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.131862][ T24] usb 3-1: Product: syz [ 217.150723][ T24] usb 3-1: Manufacturer: syz [ 217.167479][ T5677] usb 5-1: Product: syz [ 217.170293][ T24] usb 3-1: SerialNumber: syz [ 217.184393][ T5677] usb 5-1: Manufacturer: syz [ 217.196832][ T5677] usb 5-1: SerialNumber: syz [ 217.211609][ T24] usb 3-1: config 0 descriptor?? [ 217.252143][ T5677] usb 5-1: config 0 descriptor?? [ 217.265177][ T5683] IPVS: starting estimator thread 0... [ 217.303493][ T6119] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.319148][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 217.413618][ T6124] IPVS: using max 240 ests per chain, 12000 per kthread [ 217.418697][ T5681] usb 1-1: unit 5 not found! [ 217.455097][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.484052][ T5681] usb 1-1: unit 3 not found! [ 217.518631][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 217.624801][ T24] usb 3-1: media controller created [ 217.712988][ T5677] ath6kl: Failed to submit usb control message: -71 [ 217.724929][ T5677] ath6kl: unable to send the bmi data to the device: -71 [ 217.775343][ T5677] ath6kl: Unable to send get target info: -71 [ 217.807152][ T5677] ath6kl: Failed to init ath6kl core: -71 [ 217.912654][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.946927][ T5677] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 218.093191][ T5677] usb 5-1: USB disconnect, device number 3 [ 218.266807][ T5681] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 218.289829][ T5681] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 218.404975][ T5681] usb 1-1: USB disconnect, device number 5 [ 218.527786][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 218.699266][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.795531][ T24] DVB: Unable to find symbol tda10046_attach() [ 218.813518][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 218.867755][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 219.322441][ T24] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 219.411742][ T24] usb 3-1: USB disconnect, device number 3 [ 222.162270][ T6165] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 222.217439][ T6165] netlink: 17 bytes leftover after parsing attributes in process `syz.0.103'. [ 222.243411][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 222.478427][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.528151][ T24] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 222.558458][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.579659][ T24] usb 5-1: Product: syz [ 222.596248][ T24] usb 5-1: Manufacturer: syz [ 222.601813][ T5681] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.624224][ T24] usb 5-1: SerialNumber: syz [ 222.782140][ T5681] usb 1-1: Using ep0 maxpacket: 8 [ 222.812243][ T5681] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 222.824286][ T5681] usb 1-1: config 0 has no interface number 0 [ 222.846864][ T5681] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 222.886485][ T5681] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 222.960299][ T5681] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 223.004186][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.045326][ T5681] usb 1-1: Product: syz [ 223.073941][ T5681] usb 1-1: Manufacturer: syz [ 223.090012][ T5681] usb 1-1: SerialNumber: syz [ 223.132873][ T5681] usb 1-1: config 0 descriptor?? [ 223.175614][ T6165] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.336599][ T24] usb 5-1: unit 5 not found! [ 223.352470][ T24] usb 5-1: unit 3 not found! [ 223.540651][ T5681] ath6kl: Failed to submit usb control message: -71 [ 223.568031][ T5681] ath6kl: unable to send the bmi data to the device: -71 [ 223.625594][ T5681] ath6kl: Unable to send get target info: -71 [ 223.645645][ T5681] ath6kl: Failed to init ath6kl core: -71 [ 223.717357][ T5681] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 223.752487][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 223.784428][ T24] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 223.809928][ T24] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 223.830163][ T5681] usb 1-1: USB disconnect, device number 6 [ 223.926229][ T24] usb 5-1: USB disconnect, device number 4 [ 224.153650][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.691819][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 225.787724][ T6187] fuse: Unknown parameter 'group_i00000000000000000000' [ 225.892951][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.923943][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.038087][ T24] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 226.067016][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.076053][ T24] usb 2-1: Product: syz [ 226.080442][ T24] usb 2-1: Manufacturer: syz [ 226.122251][ T24] usb 2-1: SerialNumber: syz [ 226.159176][ T24] usb 2-1: config 0 descriptor?? [ 226.216603][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 226.285562][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.370574][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 226.431335][ T24] usb 2-1: media controller created [ 226.730354][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.036206][ T6206] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 227.119699][ T6206] netlink: 17 bytes leftover after parsing attributes in process `syz.2.117'. [ 227.193092][ T5683] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 227.303609][ T24] DVB: Unable to find symbol tda10046_attach() [ 227.327075][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 227.374852][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 227.398834][ T5683] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 227.450665][ T5683] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 227.531894][ T5683] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 227.572830][ T5681] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 227.609478][ T5683] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 227.675210][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.735899][ T5683] usb 4-1: config 0 descriptor?? [ 227.784314][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 227.850943][ T5681] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 227.885883][ T5681] usb 3-1: config 0 has no interface number 0 [ 227.912438][ T5681] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 227.938630][ T5681] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 228.038391][ T5681] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 228.069530][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.103523][ T5681] usb 3-1: Product: syz [ 228.115684][ T5681] usb 3-1: Manufacturer: syz [ 228.150575][ T5681] usb 3-1: SerialNumber: syz [ 228.198996][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.223292][ T5681] usb 3-1: config 0 descriptor?? [ 228.266831][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.271716][ T6208] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 228.298919][ T5677] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 228.380583][ T5683] usb 4-1: string descriptor 0 read error: -71 [ 228.552405][ T5683] usb 4-1: USB disconnect, device number 2 [ 228.613302][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.732758][ T5677] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 228.783978][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.806357][ T5681] ath6kl: Failed to submit usb control message: -71 [ 228.851034][ T5681] ath6kl: unable to send the bmi data to the device: -71 [ 228.858052][ T5677] usb 5-1: Product: syz [ 228.871390][ T5677] usb 5-1: Manufacturer: syz [ 228.904384][ T5681] ath6kl: Unable to send get target info: -71 [ 228.911770][ T5677] usb 5-1: SerialNumber: syz [ 228.945814][ T5681] ath6kl: Failed to init ath6kl core: -71 [ 229.066753][ T5681] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 229.199405][ T5681] usb 3-1: USB disconnect, device number 4 [ 229.465958][ T24] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 229.680950][ T5677] usb 5-1: unit 5 not found! [ 229.737970][ T5677] usb 5-1: unit 3 not found! [ 229.970369][ T5683] usb 2-1: USB disconnect, device number 2 [ 230.453762][ T5677] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 230.495177][ T5677] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 230.609728][ T5677] usb 5-1: USB disconnect, device number 5 [ 231.146546][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.531902][ T5677] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 234.754595][ T5677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.792444][ T5677] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.948935][ T5677] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 234.990445][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.035377][ T5677] usb 3-1: Product: syz [ 235.073242][ T5677] usb 3-1: Manufacturer: syz [ 235.106147][ T5677] usb 3-1: SerialNumber: syz [ 235.165000][ T5677] usb 3-1: config 0 descriptor?? [ 235.259797][ T5677] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 235.334865][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.393081][ T6263] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 235.412005][ T5677] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 235.433880][ T6263] netlink: 17 bytes leftover after parsing attributes in process `syz.4.136'. [ 235.443576][ T5677] usb 3-1: media controller created [ 235.670749][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.942643][ T5683] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 236.158052][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 236.211773][ T5683] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 236.261899][ T5683] usb 5-1: config 0 has no interface number 0 [ 236.310383][ T5683] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 236.395761][ T5683] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 236.497643][ T5683] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 236.539264][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.586141][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 236.587272][ T5683] usb 5-1: Product: syz [ 236.625424][ T5677] DVB: Unable to find symbol tda10046_attach() [ 236.637537][ T5683] usb 5-1: Manufacturer: syz [ 236.646448][ T5677] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 236.670346][ T5683] usb 5-1: SerialNumber: syz [ 236.704185][ T5677] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 236.729143][ T5683] usb 5-1: config 0 descriptor?? [ 236.790366][ T6263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.906608][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.065398][ T24] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 237.157058][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.209725][ T24] usb 2-1: Product: syz [ 237.240754][ T24] usb 2-1: Manufacturer: syz [ 237.269845][ T24] usb 2-1: SerialNumber: syz [ 237.349800][ T5683] ath6kl: Failed to submit usb control message: -71 [ 237.402594][ T5683] ath6kl: unable to send the bmi data to the device: -71 [ 237.471512][ T5683] ath6kl: Unable to send get target info: -71 [ 237.517827][ T5683] ath6kl: Failed to init ath6kl core: -71 [ 237.644050][ T5683] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 237.827307][ T5683] usb 5-1: USB disconnect, device number 6 [ 238.308754][ T24] usb 2-1: unit 5 not found! [ 238.348747][ T24] usb 2-1: unit 3 not found! [ 238.583765][ T5677] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 238.667521][ T5677] usb 3-1: USB disconnect, device number 5 [ 239.275345][ T24] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 239.312877][ T24] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 239.481933][ T24] usb 2-1: USB disconnect, device number 3 [ 240.009635][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.302278][ T5677] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 242.465769][ T6316] netlink: 'syz.4.153': attribute type 4 has an invalid length. [ 242.511726][ T6316] netlink: 17 bytes leftover after parsing attributes in process `syz.4.153'. [ 242.594331][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.650673][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.710363][ T5677] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.776945][ T5677] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.808756][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.907128][ T5677] usb 2-1: config 0 descriptor?? [ 243.142073][ T5683] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 243.365863][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 243.432251][ T5683] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 243.454602][ T5683] usb 5-1: config 0 has no interface number 0 [ 243.480621][ T5683] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 243.552218][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.595414][ T5683] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 243.609423][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.658045][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.694655][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.708574][ T5683] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 243.747892][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.780830][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.806192][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.825655][ T5683] usb 5-1: Product: syz [ 243.836420][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.856567][ T5683] usb 5-1: Manufacturer: syz [ 243.876014][ T5683] usb 5-1: SerialNumber: syz [ 243.885586][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.934340][ T5683] usb 5-1: config 0 descriptor?? [ 243.940176][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.989128][ T5677] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 243.999541][ T6316] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 244.132035][ T5677] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 244.266857][ T5677] usb 2-1: USB disconnect, device number 4 [ 244.521348][ T5683] ath6kl: Failed to submit usb control message: -71 [ 244.568076][ T5683] ath6kl: unable to send the bmi data to the device: -71 [ 244.601288][ T5683] ath6kl: Unable to send get target info: -71 [ 244.642359][ T5683] ath6kl: Failed to init ath6kl core: -71 [ 244.737748][ T5683] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 244.889042][ T5683] usb 5-1: USB disconnect, device number 7 [ 245.354588][ T6327] fido_id[6327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 250.061981][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 250.226576][ T24] usb 1-1: device descriptor read/64, error -71 [ 250.515229][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 250.701978][ T24] usb 1-1: device descriptor read/64, error -71 [ 250.729300][ T6372] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 250.773815][ T6372] netlink: 17 bytes leftover after parsing attributes in process `syz.1.167'. [ 250.844512][ T24] usb usb1-port1: attempt power cycle [ 251.212083][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.270053][ T24] usb 1-1: device descriptor read/8, error -71 [ 251.289207][ T5683] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.411561][ T5677] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 251.511502][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 251.532943][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.549918][ T5683] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 251.583444][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.589088][ T24] usb 1-1: device descriptor read/8, error -71 [ 251.607965][ T5683] usb 5-1: Product: syz [ 251.615933][ T5683] usb 5-1: Manufacturer: syz [ 251.622679][ T5677] usb 2-1: Using ep0 maxpacket: 8 [ 251.662489][ T5683] usb 5-1: SerialNumber: syz [ 251.716272][ T5677] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 251.742196][ T24] usb usb1-port1: unable to enumerate USB device [ 251.749576][ T5683] usb 5-1: config 0 descriptor?? [ 251.768948][ T5677] usb 2-1: config 0 has no interface number 0 [ 251.800790][ T5677] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 251.855570][ T5677] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 251.915547][ T5677] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 251.941025][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.006792][ T5677] usb 2-1: Product: syz [ 252.031043][ T5677] usb 2-1: Manufacturer: syz [ 252.040659][ T5677] usb 2-1: SerialNumber: syz [ 252.065937][ T5677] usb 2-1: config 0 descriptor?? [ 252.103241][ T6372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 252.173462][ T5683] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 008 [ 252.382499][ T5677] ath6kl: Failed to submit usb control message: -71 [ 252.400001][ T5677] ath6kl: unable to send the bmi data to the device: -71 [ 252.437392][ T5677] ath6kl: Unable to send get target info: -71 [ 252.463093][ T5677] ath6kl: Failed to init ath6kl core: -71 [ 252.463737][ T5681] usb 5-1: USB disconnect, device number 8 [ 252.560263][ T5677] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 252.700148][ T5677] usb 2-1: USB disconnect, device number 5 [ 256.870767][ T6426] netlink: 'syz.1.186': attribute type 4 has an invalid length. [ 256.990508][ T6426] netlink: 17 bytes leftover after parsing attributes in process `syz.1.186'. [ 257.381899][ T5677] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 257.562402][ T5677] usb 2-1: Using ep0 maxpacket: 8 [ 257.642947][ T5677] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 257.689470][ T5677] usb 2-1: config 0 has no interface number 0 [ 257.728294][ T5677] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 257.793839][ T5677] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 257.882248][ T5677] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 257.931489][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.971466][ T5677] usb 2-1: Product: syz [ 258.015288][ T5677] usb 2-1: Manufacturer: syz [ 258.035827][ T5677] usb 2-1: SerialNumber: syz [ 258.083643][ T5677] usb 2-1: config 0 descriptor?? [ 258.129391][ T6426] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.410363][ T6443] fuse: Bad value for 'user_id' [ 258.494344][ T6443] fuse: Bad value for 'user_id' [ 258.611064][ T5677] ath6kl: Failed to submit usb control message: -71 [ 258.635909][ T5677] ath6kl: unable to send the bmi data to the device: -71 [ 258.729144][ T5677] ath6kl: Unable to send get target info: -71 [ 258.768998][ T5677] ath6kl: Failed to init ath6kl core: -71 [ 258.906308][ T5677] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 259.067913][ T5677] usb 2-1: USB disconnect, device number 6 [ 259.441587][ T5683] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 259.696300][ T5683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.787288][ T5683] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 259.836386][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.877649][ T5683] usb 4-1: Product: syz [ 259.899314][ T5683] usb 4-1: Manufacturer: syz [ 259.917716][ T5683] usb 4-1: SerialNumber: syz [ 260.278135][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.285136][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.559257][ T5683] usb 4-1: unit 5 not found! [ 260.570971][ T5683] usb 4-1: unit 3 not found! [ 260.749932][ T6460] warning: `syz.4.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.015915][ T5683] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 261.042626][ T5683] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 261.216894][ T5683] usb 4-1: USB disconnect, device number 3 [ 261.494938][ T5849] udevd[5849]: setting mode of /dev/bus/usb/004/003 to 020664 failed: No such file or directory [ 261.576967][ T5849] udevd[5849]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory [ 261.808499][ T6462] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.198'. [ 261.872299][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.136735][ T6464] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 262.282194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 262.410709][ T6464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.704318][ T6478] netlink: 'syz.2.205': attribute type 4 has an invalid length. [ 264.754606][ T6478] netlink: 17 bytes leftover after parsing attributes in process `syz.2.205'. [ 265.286002][ T5683] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 265.431569][ T5681] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 265.492223][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 265.545780][ T5683] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 265.584572][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.610616][ T5683] usb 3-1: config 0 has no interface number 0 [ 265.653529][ T5683] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 265.701795][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.726012][ T5683] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 265.784055][ T9] usb 5-1: device descriptor read/64, error -71 [ 265.790851][ T5683] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 265.801661][ T5681] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 265.843905][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.849466][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.916158][ T5681] usb 2-1: Product: syz [ 265.934050][ T5683] usb 3-1: Product: syz [ 265.944659][ T5681] usb 2-1: Manufacturer: syz [ 265.962178][ T5683] usb 3-1: Manufacturer: syz [ 265.979103][ T5681] usb 2-1: SerialNumber: syz [ 265.995771][ T5683] usb 3-1: SerialNumber: syz [ 266.059597][ T5683] usb 3-1: config 0 descriptor?? [ 266.103920][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.123519][ T6478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.321745][ T9] usb 5-1: device descriptor read/64, error -71 [ 266.435735][ T9] usb usb5-port1: attempt power cycle [ 266.536502][ T5683] ath6kl: Failed to submit usb control message: -71 [ 266.559230][ T5683] ath6kl: unable to send the bmi data to the device: -71 [ 266.608338][ T5683] ath6kl: Unable to send get target info: -71 [ 266.642602][ T5683] ath6kl: Failed to init ath6kl core: -71 [ 266.737680][ T5681] usb 2-1: unit 5 not found! [ 266.755062][ T5683] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 266.768104][ T5681] usb 2-1: unit 3 not found! [ 266.821912][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.906771][ T9] usb 5-1: device descriptor read/8, error -71 [ 266.926911][ T5683] usb 3-1: USB disconnect, device number 6 [ 267.200245][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 267.287656][ T9] usb 5-1: device descriptor read/8, error -71 [ 267.433127][ T9] usb usb5-port1: unable to enumerate USB device [ 267.587186][ T5681] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 267.637387][ T5681] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 267.769293][ T5681] usb 2-1: USB disconnect, device number 7 [ 268.304671][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.039290][ T6516] loop9: detected capacity change from 0 to 7 [ 270.087918][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.097558][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.115005][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.124593][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.154316][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.163886][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.187098][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.196668][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.205838][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.215331][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.225063][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.234532][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.244749][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.254280][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.294385][ T6516] ldm_validate_partition_table(): Disk read failed. [ 270.345681][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.355296][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.368346][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.377822][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.406147][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.415681][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.432541][ T6516] Dev loop9: unable to read RDB block 0 [ 270.498187][ T6516] loop9: unable to read partition table [ 270.528391][ T6516] loop9: partition table beyond EOD, truncated [ 270.540815][ T6516] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X ր{֐ȵ4FLQk݊5) failed (rc=-5) [ 270.749995][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.218'. [ 270.752158][ T6518] batadv_slave_0: entered promiscuous mode [ 270.974457][ T6513] batadv_slave_0: left promiscuous mode [ 271.388452][ T6533] 9p: Bad value for 'rfdno' [ 271.924813][ T6533] syz.3.223 (6533) used greatest stack depth: 2712 bytes left [ 273.940922][ T6557] binder: BINDER_SET_CONTEXT_MGR already set [ 273.980416][ T6557] binder: 6555:6557 ioctl 4018620d 200000004a80 returned -16 [ 274.013774][ T6557] binder: 6555:6557 ioctl c0306201 0 returned -14 [ 274.266208][ T6562] fuse: Bad value for 'fd' [ 276.512918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 276.833799][ T6598] loop1: detected capacity change from 0 to 512 [ 276.906325][ T6598] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.245: invalid indirect mapped block 256 (level 2) [ 276.994256][ T6598] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 277.001270][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 277.017327][ C0] EXT4-fs (loop1): initial error at time 1780572584: ext4_free_branches:1023: inode 11 [ 277.027304][ C0] EXT4-fs (loop1): last error at time 1780572584: ext4_free_branches:1023: inode 11 [ 277.047447][ T6598] EXT4-fs (loop1): 2 truncates cleaned up [ 277.059123][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.185745][ T29] audit: type=1800 audit(1780572585.114:2): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.245" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 277.309002][ T6605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 277.390657][ T5714] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 232 with error 28 [ 277.471951][ T5714] EXT4-fs (loop1): This should not happen!! Data will be lost [ 277.471951][ T5714] [ 277.510364][ T5714] EXT4-fs (loop1): Total free blocks count 0 [ 277.548772][ T6610] fuse: Bad value for 'fd' [ 277.562279][ T5714] EXT4-fs (loop1): Free/Dirty block details [ 277.581840][ T5714] EXT4-fs (loop1): free_blocks=0 [ 277.590757][ T5714] EXT4-fs (loop1): dirty_blocks=232 [ 277.629176][ T5714] EXT4-fs (loop1): Block reservation details [ 277.676776][ T5714] EXT4-fs (loop1): i_reserved_data_blocks=232 [ 277.979430][ T5579] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 278.043705][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.166171][ T6654] loop3: detected capacity change from 0 to 256 [ 280.204256][ T6654] ======================================================= [ 280.204256][ T6654] WARNING: The mand mount option has been deprecated and [ 280.204256][ T6654] and is ignored by this kernel. Remove the mand [ 280.204256][ T6654] option from the mount to silence this warning. [ 280.204256][ T6654] ======================================================= [ 280.452505][ T6662] fuse: Bad value for 'fd' [ 280.573472][ T6654] FAT-fs (loop3): Directory bread(block 64) failed [ 280.621640][ T6654] FAT-fs (loop3): Directory bread(block 65) failed [ 280.652286][ T6654] FAT-fs (loop3): Directory bread(block 66) failed [ 280.692306][ T6654] FAT-fs (loop3): Directory bread(block 67) failed [ 280.717797][ T6654] FAT-fs (loop3): Directory bread(block 68) failed [ 280.761385][ T6654] FAT-fs (loop3): Directory bread(block 69) failed [ 280.789413][ T6654] FAT-fs (loop3): Directory bread(block 70) failed [ 280.824985][ T6654] FAT-fs (loop3): Directory bread(block 71) failed [ 280.864267][ T6654] FAT-fs (loop3): Directory bread(block 72) failed [ 280.889906][ T6654] FAT-fs (loop3): Directory bread(block 73) failed [ 281.131674][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 281.339619][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 281.389624][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 281.451711][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.485889][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.515277][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.617472][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.642394][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.674896][ T24] usb 2-1: Product: syz [ 281.698997][ T24] usb 2-1: Manufacturer: syz [ 281.725271][ T24] usb 2-1: SerialNumber: syz [ 282.221648][ T6682] hub 8-0:1.0: USB hub found [ 282.232348][ T6682] hub 8-0:1.0: 1 port detected [ 285.438289][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 285.492988][ T24] cdc_ncm 2-1:1.0: bind() failure [ 285.566963][ T24] usb 2-1: USB disconnect, device number 8 [ 285.809128][ T6710] loop1: detected capacity change from 0 to 512 [ 285.866604][ T6710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.928589][ T6714] fuse: Bad value for 'fd' [ 288.808543][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.879712][ T6710] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.470788][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.531821][ T5681] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 292.719011][ T5681] usb 5-1: Using ep0 maxpacket: 16 [ 292.756378][ T5681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 292.780954][ T5681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.809623][ T5681] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.829990][ T5681] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.943005][ T5681] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.986405][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.049062][ T5681] usb 5-1: Product: syz [ 293.065722][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 293.066403][ T5595] Bluetooth: hci0: command 0x0406 tx timeout [ 293.072683][ T5590] Bluetooth: hci3: command 0x0406 tx timeout [ 293.078331][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 293.085014][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 293.157106][ T5681] usb 5-1: Manufacturer: syz [ 293.211408][ T5681] usb 5-1: SerialNumber: syz [ 293.835586][ T6760] loop1: detected capacity change from 0 to 512 [ 293.890828][ T6763] fuse: Invalid rootmode [ 294.034933][ T6760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 294.135044][ T6760] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.448384][ T5681] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 294.473774][ T5681] cdc_ncm 5-1:1.0: bind() failure [ 294.513019][ T5681] usb 5-1: USB disconnect, device number 13 [ 298.079000][ T5579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 298.323384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 298.733297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 300.781233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 300.883527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 302.538284][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.547695][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.475603][ T6800] fuse: Invalid rootmode [ 303.693691][ T5584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.708405][ T5584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.725231][ T5584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.755852][ T5584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.776262][ T5584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.491613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 305.768793][ T6809] tipc: Started in network mode [ 305.820425][ T6809] tipc: Node identity f23ad366e764, cluster identity 4711 [ 305.861490][ T5591] Bluetooth: hci5: command tx timeout [ 305.878767][ T6809] tipc: Enabled bearer , priority 0 [ 305.975407][ T6811] syzkaller0: entered promiscuous mode [ 306.010177][ T6811] syzkaller0: entered allmulticast mode [ 306.130109][ T6815] tipc: Resetting bearer [ 306.234667][ T6805] tipc: Resetting bearer [ 306.399590][ T6805] tipc: Disabling bearer [ 306.531556][ T5681] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 306.742339][ T5681] usb 3-1: Using ep0 maxpacket: 16 [ 306.788937][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.878146][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.911607][ T5681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 306.946995][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.050293][ T5681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.081835][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.137140][ T5681] usb 3-1: Product: syz [ 307.151812][ T5681] usb 3-1: Manufacturer: syz [ 307.175002][ T5681] usb 3-1: SerialNumber: syz [ 307.185550][ T6824] loop4: detected capacity change from 0 to 4096 [ 307.320095][ T6824] NILFS (loop4): invalid segment: Checksum error in segment payload [ 307.367426][ T6824] NILFS (loop4): trying rollback from an earlier position [ 307.533461][ T6824] NILFS (loop4): recovery complete [ 307.590589][ T6833] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.941907][ T5591] Bluetooth: hci5: command tx timeout [ 308.271296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 308.634727][ T5681] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 308.715372][ T5681] cdc_ncm 3-1:1.0: bind() failure [ 308.841038][ T5681] usb 3-1: USB disconnect, device number 7 [ 310.021624][ T5591] Bluetooth: hci5: command tx timeout [ 311.564858][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 312.104323][ T5591] Bluetooth: hci5: command tx timeout [ 312.411377][ T6878] batadv_slave_0: entered promiscuous mode [ 312.750139][ T6875] batadv_slave_0: left promiscuous mode [ 313.258435][ T6859] loop1: detected capacity change from 0 to 32768 [ 313.393691][ T5681] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 313.571523][ T5681] usb 3-1: Using ep0 maxpacket: 16 [ 313.623336][ T5681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.662775][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.684760][ T5681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 313.721515][ T5681] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.838032][ T5681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.865644][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.892769][ T5681] usb 3-1: Product: syz [ 313.909296][ T5681] usb 3-1: Manufacturer: syz [ 313.931562][ T5681] usb 3-1: SerialNumber: syz [ 314.027228][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.062055][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.171341][ T6803] bridge_slave_0: entered allmulticast mode [ 314.407317][ T6803] bridge_slave_0: entered promiscuous mode [ 314.966892][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.084027][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.212017][ T6803] bridge_slave_1: entered allmulticast mode [ 315.716859][ T6803] bridge_slave_1: entered promiscuous mode [ 318.329506][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.404822][ T5681] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 318.448675][ T5681] cdc_ncm 3-1:1.0: bind() failure [ 318.459494][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.567687][ T5681] usb 3-1: USB disconnect, device number 8 [ 318.731916][ T1727] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 318.850778][ T6803] team0: Port device team_slave_0 added [ 318.955146][ T6803] team0: Port device team_slave_1 added [ 318.971443][ T1727] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.052059][ T1727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.135373][ T1727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.191891][ T1727] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.249079][ T1727] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.286496][ T1727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.307700][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.324671][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.341739][ T1727] usb 1-1: config 0 descriptor?? [ 319.441852][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.747214][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.795111][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.277361][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.701582][ T1727] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 321.766138][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.783614][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.455789][ T6927] loop1: detected capacity change from 0 to 8 [ 323.598993][ T1727] usb 1-1: USB disconnect, device number 11 [ 323.983227][ T6803] hsr_slave_0: entered promiscuous mode [ 324.022797][ T6803] hsr_slave_1: entered promiscuous mode [ 324.060207][ T6928] fido_id[6928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 324.066727][ T6803] debugfs: 'hsr0' already exists in 'hsr' [ 324.118252][ T6803] Cannot create hsr debugfs directory [ 324.148317][ T6930] batadv_slave_0: entered promiscuous mode [ 324.188733][ T6929] batadv_slave_0: left promiscuous mode [ 325.395174][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 325.496035][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.505359][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.157738][ T6803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.272912][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.317754][ T6803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.390126][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.440581][ T6803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.538065][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.599985][ T6803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.696940][ T6803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.491549][ T5686] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 327.561545][ T6970] batadv_slave_0: entered promiscuous mode [ 327.597349][ T6956] ===================================================== [ 327.604939][ T6956] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 327.617074][ T6956] mptcp_established_options+0x112f/0x3530 [ 327.624162][ T6956] tcp_established_options+0x312/0xcc0 [ 327.629832][ T6956] __tcp_transmit_skb+0x5dc/0x5fe0 [ 327.635275][ T6956] __tcp_send_ack+0x967/0xad0 [ 327.640144][ T6956] tcp_send_ack+0x3d/0x60 [ 327.644747][ T6956] mptcp_subflow_shutdown+0x164/0x690 [ 327.650303][ T6956] mptcp_check_send_data_fin+0x31b/0x3d0 [ 327.656196][ T6956] __mptcp_close+0x860/0x1360 [ 327.661037][ T6956] mptcp_close+0x42/0x260 [ 327.669515][ T6956] inet_release+0x1ee/0x2a0 [ 327.674752][ T6956] sock_close+0xd6/0x2f0 [ 327.679185][ T6956] __fput+0x60e/0x1010 [ 327.683564][ T6956] ____fput+0x25/0x30 [ 327.687742][ T6956] task_work_run+0x208/0x2b0 [ 327.692579][ T6956] exit_to_user_mode_loop+0x505/0x2420 [ 327.698175][ T6956] do_syscall_64+0x261/0x3c0 [ 327.703072][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.706176][ T6969] batadv_slave_0: left promiscuous mode [ 327.709171][ T6956] [ 327.709195][ T6956] Local variable opts created at: [ 327.709230][ T6956] __tcp_transmit_skb+0x4d/0x5fe0 [ 327.727466][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.732875][ T6956] __tcp_send_ack+0x967/0xad0 [ 327.749023][ T6956] [ 327.751867][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.0.358 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.761340][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.771617][ T6956] ===================================================== [ 327.778723][ T6956] Disabling lock debugging due to kernel taint [ 327.782571][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.830093][ T6956] Kernel panic - not syncing: kmsan.panic set ... [ 327.836658][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.0.358 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 327.847588][ T6956] Tainted: [B]=BAD_PAGE [ 327.851820][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.861989][ T6956] Call Trace: [ 327.865345][ T6956] [ 327.868351][ T6956] __dump_stack+0x26/0x30 [ 327.872834][ T6956] dump_stack_lvl+0x50/0x1c0 [ 327.877577][ T6956] ? dump_stack+0x12/0x25 [ 327.882067][ T6956] dump_stack+0x1e/0x25 [ 327.886368][ T6956] vpanic+0x7b4/0x1430 [ 327.890621][ T6956] panic+0x15d/0x160 [ 327.894721][ T6956] kmsan_report+0x31a/0x320 [ 327.899403][ T6956] ? __msan_warning+0x1b/0x30 [ 327.904244][ T6956] ? mptcp_established_options+0x112f/0x3530 [ 327.910409][ T6956] ? tcp_established_options+0x312/0xcc0 [ 327.916193][ T6956] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 327.921627][ T6956] ? __tcp_send_ack+0x967/0xad0 [ 327.926616][ T6956] ? tcp_send_ack+0x3d/0x60 [ 327.931287][ T6956] ? mptcp_subflow_shutdown+0x164/0x690 [ 327.937017][ T6956] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 327.943007][ T6956] ? __mptcp_close+0x860/0x1360 [ 327.948025][ T6956] ? mptcp_close+0x42/0x260 [ 327.952656][ T6956] ? inet_release+0x1ee/0x2a0 [ 327.957501][ T6956] ? sock_close+0xd6/0x2f0 [ 327.962047][ T6956] ? __fput+0x60e/0x1010 [ 327.966417][ T6956] ? ____fput+0x25/0x30 [ 327.970697][ T6956] ? task_work_run+0x208/0x2b0 [ 327.975577][ T6956] ? exit_to_user_mode_loop+0x505/0x2420 [ 327.981344][ T6956] ? do_syscall_64+0x261/0x3c0 [ 327.986276][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.992476][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.998689][ T6956] ? kmsan_get_metadata+0xf1/0x160 [ 328.003971][ T6956] ? tcp_established_options+0x312/0xcc0 [ 328.009740][ T6956] ? __msan_warning+0x1b/0x30 [ 328.014567][ T6956] ? filter_irq_stacks+0x13f/0x190 [ 328.019811][ T6956] ? stack_depot_save_flags+0x35/0x790 [ 328.025409][ T6956] ? kmsan_get_metadata+0xf1/0x160 [ 328.030702][ T6956] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 328.037197][ T6956] ? kmsan_get_metadata+0xf1/0x160 [ 328.042488][ T6956] __msan_warning+0x1b/0x30 [ 328.047140][ T6956] mptcp_established_options+0x112f/0x3530 [ 328.053167][ T6956] tcp_established_options+0x312/0xcc0 [ 328.058787][ T6956] __tcp_transmit_skb+0x5dc/0x5fe0 [ 328.064059][ T6956] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 328.070390][ T6956] ? kmsan_get_metadata+0xf1/0x160 [ 328.075662][ T6956] ? kmsan_get_metadata+0xf1/0x160 [ 328.080940][ T6956] ? kmsan_get_metadata+0xf1/0x160 [ 328.086216][ T6956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 328.092204][ T6956] ? __alloc_skb+0xb7d/0x1190 [ 328.097058][ T6956] __tcp_send_ack+0x967/0xad0 [ 328.101909][ T6956] tcp_send_ack+0x3d/0x60 [ 328.106404][ T6956] mptcp_subflow_shutdown+0x164/0x690 [ 328.111951][ T6956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 328.117938][ T6956] mptcp_check_send_data_fin+0x31b/0x3d0 [ 328.123750][ T6956] __mptcp_close+0x860/0x1360 [ 328.128608][ T6956] ? __pfx_mptcp_close+0x10/0x10 [ 328.133670][ T6956] mptcp_close+0x42/0x260 [ 328.138124][ T6956] ? __pfx_mptcp_close+0x10/0x10 [ 328.143190][ T6956] inet_release+0x1ee/0x2a0 [ 328.147860][ T6956] ? __pfx_inet_release+0x10/0x10 [ 328.153043][ T6956] sock_close+0xd6/0x2f0 [ 328.157417][ T6956] ? __pfx_sock_close+0x10/0x10 [ 328.162386][ T6956] __fput+0x60e/0x1010 [ 328.166618][ T6956] ? __pfx_____fput+0x10/0x10 [ 328.171427][ T6956] ____fput+0x25/0x30 [ 328.175553][ T6956] task_work_run+0x208/0x2b0 [ 328.180273][ T6956] exit_to_user_mode_loop+0x505/0x2420 [ 328.185906][ T6956] ? __x64_sys_close_range+0x97/0xe0 [ 328.191333][ T6956] do_syscall_64+0x261/0x3c0 [ 328.196100][ T6956] ? clear_bhb_loop+0x50/0xa0 [ 328.200917][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.206961][ T6956] RIP: 0033:0x7ff1bd79ce59 [ 328.211479][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.231218][ T6956] RSP: 002b:00007fff290af628 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 328.239769][ T6956] RAX: 0000000000000000 RBX: 00007ff1bda17da0 RCX: 00007ff1bd79ce59 [ 328.247864][ T6956] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 328.255923][ T6956] RBP: 00007ff1bda17da0 R08: 0000000000000006 R09: 0000000000000000 [ 328.263987][ T6956] R10: 00007ff1bda17cb0 R11: 0000000000000246 R12: 000000000004ff13 [ 328.272057][ T6956] R13: 00007ff1bda15fac R14: 000000000004fca1 R15: 00007fff290af730 [ 328.280160][ T6956] [ 328.283429][ T6956] Kernel Offset: disabled [ 328.287793][ T6956] Rebooting in 86400 seconds..