last executing test programs: 4m53.919369521s ago: executing program 4 (id=1029): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[], 0xe0}], 0x1}, 0x0) 4m53.84919155s ago: executing program 4 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x20008004) 4m53.676390735s ago: executing program 4 (id=1033): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x86dd}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r1, &(0x7f0000000080), 0x10) 4m53.182838207s ago: executing program 4 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x2001) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0b00000000000000001cffffff20000180140002006261746164765f736c6176655f31000008000100", @ANYRES32], 0x34}}, 0x0) 4m50.305265895s ago: executing program 4 (id=1052): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket(0x2a, 0x2, 0x0) socket$kcm(0x23, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m49.821592439s ago: executing program 4 (id=1060): socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109242, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4m34.641371132s ago: executing program 32 (id=1060): socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109242, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m59.473007096s ago: executing program 1 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x40) 1m58.667628531s ago: executing program 1 (id=1895): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xb, 0xf}, {0x0, 0x1}, {0xe, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m58.623416321s ago: executing program 3 (id=1896): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 1m58.37933604s ago: executing program 1 (id=1897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1m57.943194076s ago: executing program 1 (id=1898): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xf7fff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) syz_emit_ethernet(0xe0, &(0x7f0000000000)=ANY=[], 0x0) 1m56.799890371s ago: executing program 1 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m56.440824028s ago: executing program 1 (id=1900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_create(0x9, 0x80800) unshare(0x64000600) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x7}) 1m55.460942217s ago: executing program 3 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x40) 1m54.331335067s ago: executing program 3 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m52.916339786s ago: executing program 3 (id=1914): ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x9) r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) 1m51.190300204s ago: executing program 3 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1m49.388561772s ago: executing program 3 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = socket(0x2b, 0x80801, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="080003", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m45.840031988s ago: executing program 0 (id=1929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="18010000070a0101"], 0x118}, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) 1m44.416039019s ago: executing program 0 (id=1931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2213d3ae303f049be5e169931e92dee61d15238c574a8505d2c6fb75bd2f21b52206f3fc8231dae59d2a3c80dd1cf71df19c3994e65be6ee47379df730f69b6ad5e2fbb25d067d8b7675bed674ff6c823b033239b51b19d8684ba2398a58ae13b25e926a8171731d380e81444aca27e767bf9743c2f7aa29583cac99d514731875d6906ccace56671373a16aeb05cf16e2880f34be5b181340435397c82fa6cae74d67dc9a1b8a4074181673469a46", 0xaf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0ce6aa3cc945806f57221a976481", 0x6b}, {&(0x7f0000000600)="6cb9b5ed91ee06e31b329aaaa4a64f8fa6270166d3d080904b759c88abab7238eaa063fa30bb668dce79bcf9fb8a890b00f98b1f7b0aa2d8dbd95626cecf55e25bae5de7881f4104e5decd17d3f114552b1823c193aba621e46d3f4517296b8ab5e26a0fe8046927b9833816d92dbefb90d76f9f7fea0391b305c1cb1ee06648ef3830ed26ddc6344d3cc2b7dfc939afef93447e99e2d747cf37513d087578a3dae42244248a398db533031d31127501e9", 0xb1}, {&(0x7f00000006c0)="92933ae6adb1fbe9f93f904b11157cbe3d27e7dbdc7f9cccef5f06a85d3511526419362ad07778698bcebc880c5e77b2b383be1189b36200bce422d231acbfe6a476aebf0e18d3b7bff6d94f364d70bf82c296bb5e8c6c8d06862148", 0x5c}, {&(0x7f0000000880)="e7563d3bb5ebdd5911d6455ec077369c67edc049c04cedaa94a80fda6648457f7a33c1a416dc225c16532da98fe761fae7f3af41b44ad74fc305a1bc7e36fb0775781c4cd5fd363237d965eeae4dd235564063f2661696ef27e44c9ad566d32ab793bf8f1207a834189e7953188fa13cc3fa9e73ab24555264b41ca4d39dd58d64f08f4d6606c05597bc7bbc95ec8cd3790dee4a84568232eb25b0ad97263f0d67d4e9c73dc9f97a8d73ae1d528757b6f07b0d24d2b791f5e26187ffd55c14b8f283", 0xc2}, {&(0x7f0000000980)="a678b293c750616fd11ef3bc19251270aaf5b9b340", 0x15}], 0x5}}], 0x2, 0x4080) sendto$inet(r0, &(0x7f00000003c0)="3012cf201b2320a513015a6b6e89ad8061789a45e4865cbe3fe9e1f0137f6473ce1d8d4d2870e27820d73d9c6f58e35f6ff19b62845727203592c945ed10b8d5c9179f52fbad88442684110cff45c5f1e1f39e200b9b4c396da262cc107a59", 0x5f, 0x40, 0x0, 0x0) 1m42.959409706s ago: executing program 0 (id=1933): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, @remote, @mcast1={0xff, 0x5}, 0x5, 0x4, 0x0, 0x200, 0xfc8, 0x20c200a2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair(0x29, 0x6, 0x0, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r9 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900090035000800060000000400150004000000000000dc1338d54400009b84136ef75a0184de4411001600c43ab8220000060cb211d2f994", 0x55}], 0x1}, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 1m40.560543669s ago: executing program 33 (id=1900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_create(0x9, 0x80800) unshare(0x64000600) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x7}) 1m39.550018462s ago: executing program 0 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) 1m39.013585269s ago: executing program 0 (id=1939): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) 1m37.408806732s ago: executing program 0 (id=1944): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1m33.651901425s ago: executing program 34 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = socket(0x2b, 0x80801, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="080003", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m26.587457867s ago: executing program 5 (id=1952): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 1m25.79770027s ago: executing program 5 (id=1953): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) 1m23.731715156s ago: executing program 5 (id=1957): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) 1m23.241294599s ago: executing program 5 (id=1959): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x47, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x2, 0x81, 0xc3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000d270000002708b5743125cc6bad051a92108af7d5cb74096a723795737187943b1ca4ef333593e1b645d83d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m20.256576455s ago: executing program 35 (id=1944): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1m18.850558697s ago: executing program 5 (id=1963): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = dup(0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87fffc, 0x2000, 0xfffffd, 0x804}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000003c0)={0x2e, 0x68, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 1m17.135004403s ago: executing program 5 (id=1966): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c02e0f01cb09083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0xa8}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.715377127s ago: executing program 36 (id=1966): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c02e0f01cb09083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0xa8}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 27.267865701s ago: executing program 2 (id=1992): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0) 25.775545957s ago: executing program 2 (id=1993): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 25.226493436s ago: executing program 2 (id=1994): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r3, 0x6700000000000000) 22.623146346s ago: executing program 2 (id=1995): recvmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f844", 0x3a}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 20.24271854s ago: executing program 2 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)={0x44, r1, 0x1, 0x0, 0x25dfdc02, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044042}, 0x0) 17.339090176s ago: executing program 2 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x100d0) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x88, 0x3, 0x80, 0x6}, @ipv6=@gre_packet={0xd, 0x6, '\x00 H', 0x5e, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "4e4355ad34"}, {0x8, 0x88be, 0x4, {{0x3, 0x1, 0x2a, 0x1, 0x1, 0x2, 0x0, 0x9}, 0x1, {0xffffffed}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x7ff, 0x8, 0x3, 0x6, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "dde7928c7a94573b3742594d5753c0adc30563192e"}}}}}, 0x94) 0s ago: executing program 37 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x100d0) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x88, 0x3, 0x80, 0x6}, @ipv6=@gre_packet={0xd, 0x6, '\x00 H', 0x5e, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "4e4355ad34"}, {0x8, 0x88be, 0x4, {{0x3, 0x1, 0x2a, 0x1, 0x1, 0x2, 0x0, 0x9}, 0x1, {0xffffffed}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x7ff, 0x8, 0x3, 0x6, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "dde7928c7a94573b3742594d5753c0adc30563192e"}}}}}, 0x94) kernel console output (not intermixed with test programs): forwarding state [ 104.332068][ T4911] Bluetooth: hci4: command tx timeout [ 104.367565][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.410341][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.412208][ T4911] Bluetooth: hci3: command tx timeout [ 104.438151][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.438341][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.490357][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.490475][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.491142][ T4911] Bluetooth: hci1: command tx timeout [ 104.491175][ T4911] Bluetooth: hci0: command tx timeout [ 104.491200][ T4911] Bluetooth: hci2: command tx timeout [ 104.595103][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.669190][ T2170] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.669413][ T2170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.711992][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.777682][ T2170] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.777804][ T2170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.933212][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.995365][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.016133][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.016240][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.099850][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.100023][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.249145][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.376465][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.386869][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.484552][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.487359][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.836325][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.451670][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.503439][ T5599] veth0_vlan: entered promiscuous mode [ 106.573756][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.676019][ T5599] veth1_vlan: entered promiscuous mode [ 106.866916][ T5600] veth0_vlan: entered promiscuous mode [ 106.906471][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.977478][ T5598] veth0_vlan: entered promiscuous mode [ 106.980603][ T5600] veth1_vlan: entered promiscuous mode [ 107.022506][ T5599] veth0_macvtap: entered promiscuous mode [ 107.110272][ T5598] veth1_vlan: entered promiscuous mode [ 107.129461][ T5599] veth1_macvtap: entered promiscuous mode [ 107.285954][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.318895][ T5600] veth0_macvtap: entered promiscuous mode [ 107.344094][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.361540][ T5600] veth1_macvtap: entered promiscuous mode [ 107.413150][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.472925][ T5598] veth0_macvtap: entered promiscuous mode [ 107.480046][ T2170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.519851][ T2170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.537454][ T2170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.560741][ T5598] veth1_macvtap: entered promiscuous mode [ 107.587329][ T2170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.681338][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.769639][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.891862][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.897072][ T1435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.947410][ T1435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.964301][ T1435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.983433][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.983535][ T1435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.128052][ T2170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.161081][ T2170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.169250][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.241897][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.242359][ T5596] veth0_vlan: entered promiscuous mode [ 108.275296][ T822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.275334][ T822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.643427][ T5596] veth1_vlan: entered promiscuous mode [ 108.697314][ T5597] veth0_vlan: entered promiscuous mode [ 108.720291][ T822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.720311][ T822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.034318][ T2170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.034340][ T2170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.066736][ T5597] veth1_vlan: entered promiscuous mode [ 109.162204][ T2170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.162226][ T2170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.247826][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.247848][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.288174][ T5596] veth0_macvtap: entered promiscuous mode [ 109.497473][ T5596] veth1_macvtap: entered promiscuous mode [ 109.531225][ T822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.531246][ T822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.585561][ T5597] veth0_macvtap: entered promiscuous mode [ 109.688982][ T5597] veth1_macvtap: entered promiscuous mode [ 109.743493][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.924464][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.005911][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.005985][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.048742][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.063509][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.070455][ T5794] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.127047][ T5798] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1'. [ 110.149960][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.203815][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.241169][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.311735][ T5794] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.348340][ T2342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.392791][ T2342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.412357][ T2342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.545413][ T1442] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.954619][ T5810] Bluetooth: MGMT ver 1.23 [ 111.671847][ T5819] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.895637][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.895658][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.933531][ T5824] netlink: 388 bytes leftover after parsing attributes in process `syz.0.14'. [ 112.075721][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.075742][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.213050][ T833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.213073][ T833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.566342][ T2342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.566364][ T2342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.257378][ T5860] netlink: 388 bytes leftover after parsing attributes in process `syz.0.23'. [ 116.927188][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 117.220204][ T5891] fuse: Unknown parameter '0x0000000000000003' [ 118.258042][ T5907] netlink: 120 bytes leftover after parsing attributes in process `syz.3.40'. [ 118.273939][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 118.850011][ T5918] syzkaller0: entered promiscuous mode [ 118.850040][ T5918] syzkaller0: entered allmulticast mode [ 119.667838][ T5939] fuse: Unknown parameter '0x0000000000000003' [ 120.347106][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 120.369198][ T5956] netlink: 144 bytes leftover after parsing attributes in process `syz.0.53'. [ 121.554239][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 121.619471][ T5948] syz.3.50 (5948) used greatest stack depth: 17096 bytes left [ 121.689715][ T5977] fuse: Unknown parameter 'fd0x0000000000000003' [ 122.376424][ T5984] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 122.432094][ T5984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.634748][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 122.688244][ T5988] netlink: 144 bytes leftover after parsing attributes in process `syz.4.65'. [ 123.734580][ T6010] syzkaller1: entered promiscuous mode [ 123.734607][ T6010] syzkaller1: entered allmulticast mode [ 123.788743][ T6012] fuse: Unknown parameter 'fd0x0000000000000003' [ 124.929342][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 124.981325][ T6030] netlink: 144 bytes leftover after parsing attributes in process `syz.1.81'. [ 126.086319][ T6063] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.189958][ T6062] bridge_slave_0: left allmulticast mode [ 126.189994][ T6062] bridge_slave_0: left promiscuous mode [ 126.213930][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.437075][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 126.657169][ T6062] bridge_slave_1: left allmulticast mode [ 126.657201][ T6062] bridge_slave_1: left promiscuous mode [ 126.666299][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.985732][ T6062] bond0: (slave bond_slave_0): Releasing backup interface [ 127.163502][ T6062] bond0: (slave bond_slave_1): Releasing backup interface [ 127.410313][ T6062] team0: Port device team_slave_0 removed [ 127.476998][ T6062] team0: Port device team_slave_1 removed [ 127.477974][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.477995][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.595286][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.595318][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.644409][ T6062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.476468][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'. [ 129.558411][ T6103] netlink: 'syz.3.109': attribute type 13 has an invalid length. [ 130.634837][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 130.808801][ T6108] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.874774][ T6108] syzkaller0: entered promiscuous mode [ 130.874805][ T6108] syzkaller0: entered allmulticast mode [ 130.955057][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 130.993033][ T6113] syzkaller0: entered promiscuous mode [ 130.993061][ T6113] syzkaller0: entered allmulticast mode [ 131.015757][ T6132] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 131.352682][ T6127] geneve1: entered promiscuous mode [ 131.352710][ T6127] geneve1: entered allmulticast mode [ 131.390157][ T6128] geneve1: left promiscuous mode [ 131.390188][ T6128] geneve1: left allmulticast mode [ 132.065805][ T6132] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.071653][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.071751][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.124459][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 134.872736][ T6188] Illegal XDP return value 1327946889 on prog (id 23) dev syz_tun, expect packet loss! [ 136.100782][ T6196] netlink: 14 bytes leftover after parsing attributes in process `syz.4.131'. [ 136.899406][ T4911] Bluetooth: hci4: command 0x0405 tx timeout [ 137.406734][ T6212] syzkaller0: entered promiscuous mode [ 137.406760][ T6212] syzkaller0: entered allmulticast mode [ 137.567529][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 138.513826][ T6235] netlink: 14 bytes leftover after parsing attributes in process `syz.0.142'. [ 139.969163][ T6269] netlink: 2 bytes leftover after parsing attributes in process `syz.4.154'. [ 140.293787][ T6277] warning: `syz.4.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.544712][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 140.716404][ T6287] netlink: 14 bytes leftover after parsing attributes in process `syz.2.157'. [ 140.947290][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 142.703013][ T6339] netlink: 2 bytes leftover after parsing attributes in process `syz.2.177'. [ 144.867095][ T6359] Zero length message leads to an empty skb [ 144.922586][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.181'. [ 145.142556][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 146.728052][ T6443] openvswitch: netlink: Flow actions attr not present in new flow. [ 148.258334][ T6491] netlink: 'syz.4.224': attribute type 11 has an invalid length. [ 149.373249][ T6526] Bluetooth: MGMT ver 1.23 [ 149.568767][ T6532] netlink: 'syz.2.241': attribute type 13 has an invalid length. [ 149.568791][ T6532] netlink: 'syz.2.241': attribute type 17 has an invalid length. [ 151.194110][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 152.534653][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 153.404322][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 153.508646][ T6631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.272'. [ 154.935943][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 157.467337][ T6737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.294306][ T6775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.099980][ T6816] openvswitch: netlink: Flow key attr not present in new flow. [ 166.647969][ T6932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.823685][ T6966] netlink: 144 bytes leftover after parsing attributes in process `syz.3.387'. [ 167.828352][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 168.270286][ T6985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.409804][ T6990] syzkaller0: entered promiscuous mode [ 168.409830][ T6990] syzkaller0: entered allmulticast mode [ 168.553240][ T6994] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 169.809850][ T7029] netlink: 68 bytes leftover after parsing attributes in process `syz.4.414'. [ 171.872129][ T7091] netlink: 68 bytes leftover after parsing attributes in process `syz.3.435'. [ 173.423124][ T7130] netlink: 68 bytes leftover after parsing attributes in process `syz.4.449'. [ 174.454251][ T7153] openvswitch: netlink: IP tunnel dst address not specified [ 174.547463][ T7157] netlink: 68 bytes leftover after parsing attributes in process `syz.0.461'. [ 175.199051][ T7179] netlink: 14 bytes leftover after parsing attributes in process `syz.0.465'. [ 176.129080][ T7199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.477'. [ 177.794949][ T7232] netlink: 14 bytes leftover after parsing attributes in process `syz.1.489'. [ 178.727702][ T7256] syzkaller0: entered promiscuous mode [ 178.727732][ T7256] syzkaller0: entered allmulticast mode [ 180.532909][ T7304] syzkaller0: entered promiscuous mode [ 180.532937][ T7304] syzkaller0: entered allmulticast mode [ 182.846002][ T7351] syzkaller0: entered promiscuous mode [ 182.846031][ T7351] syzkaller0: entered allmulticast mode [ 184.231468][ T7377] syzkaller0: entered promiscuous mode [ 184.231508][ T7377] syzkaller0: entered allmulticast mode [ 186.233250][ T7423] syzkaller0: entered promiscuous mode [ 186.233277][ T7423] syzkaller0: entered allmulticast mode [ 188.121421][ T7455] netlink: 892 bytes leftover after parsing attributes in process `syz.0.565'. [ 188.161717][ T7453] netlink: 14 bytes leftover after parsing attributes in process `syz.3.564'. [ 190.186536][ T7487] netlink: 892 bytes leftover after parsing attributes in process `syz.3.576'. [ 190.325373][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.578'. [ 191.182891][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 191.777117][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.591'. [ 192.986366][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'. [ 194.499457][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.499531][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.347952][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'. [ 200.421241][ T7769] syzkaller0: entered promiscuous mode [ 200.421267][ T7769] syzkaller0: entered allmulticast mode [ 200.600656][ T7778] Bluetooth: MGMT ver 1.23 [ 200.737834][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 201.502020][ T7808] syzkaller1: entered promiscuous mode [ 201.502040][ T7808] syzkaller1: entered allmulticast mode [ 201.942707][ T7819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.667176][ T7841] netlink: 'syz.3.714': attribute type 3 has an invalid length. [ 202.669003][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 203.969024][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 204.075206][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 204.294047][ T7868] vlan2: entered promiscuous mode [ 204.294071][ T7868] bridge0: entered promiscuous mode [ 205.897872][ T7870] vlan2: left promiscuous mode [ 205.897890][ T7870] bridge0: left promiscuous mode [ 205.900067][ T7875] syzkaller0: entered promiscuous mode [ 205.900085][ T7875] syzkaller0: entered allmulticast mode [ 206.226671][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 206.334988][ T14] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.423708][ T7895] batadv_slave_1: entered promiscuous mode [ 206.583842][ T7900] batadv_slave_1 (unregistering): left promiscuous mode [ 206.693507][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 206.733893][ T14] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.810296][ T14] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.122646][ T14] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.425031][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 208.287158][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 208.475774][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 209.696928][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'. [ 210.503574][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 211.497551][ T8082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.993605][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 213.995637][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 215.869598][ T8168] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 216.006446][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 216.330345][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 216.330376][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 216.330475][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 219.782280][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 219.818002][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 219.837843][ T8250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.860'. [ 221.027650][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 221.459890][ T8273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.139597][ T8289] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 222.192166][ T4911] Bluetooth: hci1: command 0x0406 tx timeout [ 222.192196][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 222.192231][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 222.196262][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 222.196300][ T5612] Bluetooth: hci4: command 0x0405 tx timeout [ 223.151799][ T8299] syzkaller0: entered promiscuous mode [ 223.151826][ T8299] syzkaller0: entered allmulticast mode [ 223.160249][ T8299] 0: reclassify loop, rule prio 0, protocol 800 [ 223.903513][ T8316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.387087][ T8330] netlink: 120 bytes leftover after parsing attributes in process `syz.4.886'. [ 224.419430][ T8330] netlink: 144 bytes leftover after parsing attributes in process `syz.4.886'. [ 225.185698][ T8352] macvtap1: entered promiscuous mode [ 225.185723][ T8352] vlan0: entered promiscuous mode [ 225.347611][ T8352] vlan0: left promiscuous mode [ 225.477232][ T8366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.553909][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 226.474715][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 226.504797][ T8395] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 228.691317][ T8459] bond0: entered promiscuous mode [ 228.691341][ T8459] bond_slave_0: entered promiscuous mode [ 228.691602][ T8459] bond_slave_1: entered promiscuous mode [ 228.850183][ T8459] batadv0: entered promiscuous mode [ 228.917169][ T8459] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 229.000960][ T8459] bond0: left promiscuous mode [ 229.000984][ T8459] bond_slave_0: left promiscuous mode [ 229.001389][ T8459] bond_slave_1: left promiscuous mode [ 229.052898][ T8459] batadv0: left promiscuous mode [ 229.275016][ T8461] netlink: 'syz.3.935': attribute type 2 has an invalid length. [ 229.335088][ T8461] bond0: entered promiscuous mode [ 229.335106][ T8461] bond_slave_0: entered promiscuous mode [ 229.335282][ T8461] bond_slave_1: entered promiscuous mode [ 229.360385][ T8461] batadv0: entered promiscuous mode [ 229.369596][ T8461] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 229.390994][ T8461] bond0: left promiscuous mode [ 229.391017][ T8461] bond_slave_0: left promiscuous mode [ 229.391365][ T8461] bond_slave_1: left promiscuous mode [ 229.440999][ T8461] batadv0: left promiscuous mode [ 229.725638][ T8485] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.918755][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.965'. [ 231.955427][ T8551] lo speed is unknown, defaulting to 1000 [ 231.955526][ T8551] lo speed is unknown, defaulting to 1000 [ 232.142703][ T8551] lo speed is unknown, defaulting to 1000 [ 232.248804][ T8551] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 232.266891][ T8551] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 232.266941][ T8551] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 232.541088][ T8551] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 232.735184][ T8551] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.307879][ T8588] bond0: entered promiscuous mode [ 233.307896][ T8588] bond_slave_0: entered promiscuous mode [ 233.308137][ T8588] bond_slave_1: entered promiscuous mode [ 233.320958][ T8588] batadv0: entered promiscuous mode [ 233.327988][ T8588] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 233.468767][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 233.561083][ T8588] bond0: left promiscuous mode [ 233.561106][ T8588] bond_slave_0: left promiscuous mode [ 233.561360][ T8588] bond_slave_1: left promiscuous mode [ 233.621036][ T8588] batadv0: left promiscuous mode [ 233.749397][ T8551] lo speed is unknown, defaulting to 1000 [ 233.844632][ T8551] lo speed is unknown, defaulting to 1000 [ 233.877878][ T8551] lo speed is unknown, defaulting to 1000 [ 233.951755][ T8551] lo speed is unknown, defaulting to 1000 [ 233.957636][ T8551] lo speed is unknown, defaulting to 1000 [ 234.564656][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 234.792332][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 235.613302][ T8662] netlink: 900 bytes leftover after parsing attributes in process `syz.3.1008'. [ 235.844952][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 236.084250][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 236.575965][ T8694] netlink: 900 bytes leftover after parsing attributes in process `syz.1.1021'. [ 236.780508][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 236.811387][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.936778][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 237.606262][ T8725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1034'. [ 237.896383][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 238.186616][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 240.226493][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 240.397380][ T8770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.033362][ T8805] syzkaller0: entered promiscuous mode [ 244.033405][ T8805] syzkaller0: entered allmulticast mode [ 245.069099][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 255.935683][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935759][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.508079][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.536242][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.538499][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.580677][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.597608][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.167661][ T8854] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1079'. [ 257.688744][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 258.123873][ T8865] lo speed is unknown, defaulting to 1000 [ 258.730903][ T5603] Bluetooth: hci5: command tx timeout [ 259.099530][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 259.518164][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 260.239602][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 260.548737][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.549743][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.549972][ T8865] bridge_slave_0: entered allmulticast mode [ 260.579107][ T8865] bridge_slave_0: entered promiscuous mode [ 260.589171][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.589371][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.589580][ T8865] bridge_slave_1: entered allmulticast mode [ 260.613404][ T8865] bridge_slave_1: entered promiscuous mode [ 260.810896][ T5603] Bluetooth: hci5: command tx timeout [ 260.940439][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 261.041896][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.022507][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.322760][ T8865] team0: Port device team_slave_0 added [ 262.337959][ T8865] team0: Port device team_slave_1 added [ 262.657801][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.657818][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.657841][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.715651][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.715666][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.715688][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.893865][ T8865] hsr_slave_0: entered promiscuous mode [ 262.895394][ T8865] hsr_slave_1: entered promiscuous mode [ 262.896391][ T8865] debugfs: 'hsr0' already exists in 'hsr' [ 262.896416][ T8865] Cannot create hsr debugfs directory [ 262.900889][ T5603] Bluetooth: hci5: command tx timeout [ 263.081961][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 264.389875][ T9033] syzkaller0: entered promiscuous mode [ 264.389904][ T9033] syzkaller0: entered allmulticast mode [ 264.454203][ T9024] syzkaller0: left promiscuous mode [ 264.552778][ T9030] syzkaller0: entered promiscuous mode [ 264.970887][ T5603] Bluetooth: hci5: command tx timeout [ 265.908690][ T8865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.037189][ T8865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.040081][ T8865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.099502][ T8865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.110107][ T8865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.229154][ T8865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.300910][ T8865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.497494][ T8865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.350321][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.476891][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.510693][ T822] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.514344][ T822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.695780][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.743068][ T833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.049926][ T9101] bond0: entered promiscuous mode [ 268.049950][ T9101] bond_slave_0: entered promiscuous mode [ 268.050203][ T9101] bond_slave_1: entered promiscuous mode [ 268.072855][ T9101] batadv0: entered promiscuous mode [ 268.076031][ T9101] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 268.120982][ T9101] bond0: left promiscuous mode [ 268.121006][ T9101] bond_slave_0: left promiscuous mode [ 268.121261][ T9101] bond_slave_1: left promiscuous mode [ 268.190979][ T9101] batadv0: left promiscuous mode [ 269.369457][ T8973] Set syz1 is full, maxelem 65536 reached [ 269.699578][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.803075][ T8865] veth0_vlan: entered promiscuous mode [ 270.850287][ T8865] veth1_vlan: entered promiscuous mode [ 271.185355][ T8865] veth0_macvtap: entered promiscuous mode [ 271.226279][ T9188] cgroup: Unknown subsys name 'cpuset' [ 271.267999][ T8865] veth1_macvtap: entered promiscuous mode [ 271.386640][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.445390][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.513099][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.516158][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.516426][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.516466][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.595349][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.595371][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.176442][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.176461][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.783951][ T5720] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 274.079415][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 274.151728][ T5720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.151769][ T5720] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.154842][ T5720] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 274.154872][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.154893][ T5720] usb 3-1: SerialNumber: syz [ 274.413789][ T9255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1219'. [ 274.538530][ T5720] usb 3-1: 0:2 : does not exist [ 275.253604][ T5720] usb 3-1: USB disconnect, device number 2 [ 275.441997][ T9273] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 276.031058][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 276.170488][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1232'. [ 276.318238][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.318272][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.318310][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 276.318333][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.603460][ T9] usb 1-1: config 0 descriptor?? [ 277.478622][ T9] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 277.551975][ T9] cp2112 0003:10C4:EA90.0001: parse failed [ 277.557524][ T9] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 277.921149][ T1254] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 277.922769][ T9] usb 1-1: USB disconnect, device number 2 [ 278.009277][ T9325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1244'. [ 278.122818][ T1254] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.122848][ T1254] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 278.122867][ T1254] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.122886][ T1254] usb 6-1: config 220 has no interface number 2 [ 278.122966][ T1254] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.122993][ T1254] usb 6-1: config 220 interface 0 has no altsetting 0 [ 278.123017][ T1254] usb 6-1: config 220 interface 76 has no altsetting 0 [ 278.123036][ T1254] usb 6-1: config 220 interface 1 has no altsetting 0 [ 278.333850][ T1254] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.333882][ T1254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.333903][ T1254] usb 6-1: Product: syz [ 278.333918][ T1254] usb 6-1: Manufacturer: syz [ 278.333933][ T1254] usb 6-1: SerialNumber: syz [ 278.735460][ T1254] usb 6-1: selecting invalid altsetting 0 [ 278.768920][ T1254] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 278.768961][ T1254] uvcvideo 6-1:220.0: No valid video chain found. [ 278.807436][ T1254] usb 6-1: selecting invalid altsetting 0 [ 278.807476][ T1254] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 278.860401][ T1254] usb 6-1: USB disconnect, device number 2 [ 279.824869][ T9353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1255'. [ 280.150103][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1262'. [ 280.392706][ T9369] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.392738][ T9369] overlayfs: failed to set xattr on upper [ 280.392746][ T9369] overlayfs: ...falling back to redirect_dir=nofollow. [ 280.392754][ T9369] overlayfs: ...falling back to index=off. [ 280.392761][ T9369] overlayfs: ...falling back to uuid=null. [ 280.392770][ T9369] overlayfs: ...falling back to xino=off. [ 280.962431][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1270'. [ 281.010187][ T9391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1272'. [ 281.249946][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1274'. [ 281.850429][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1285'. [ 281.937523][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1286'. [ 282.084745][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1289'. [ 282.418114][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 282.731939][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 282.940951][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 282.947777][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.947810][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.947859][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.947883][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.950100][ T9456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1299'. [ 283.107199][ T9] usb 6-1: config 0 descriptor?? [ 283.118576][ T9] hub 6-1:0.0: USB hub found [ 283.350976][ T9] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 283.788074][ T9] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 284.062578][ T9] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 284.973235][ T9] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 285.086354][ T9] usb 6-1: device reset changed ep0 maxpacket size! [ 285.117103][ T9] usb 6-1: USB disconnect, device number 3 [ 285.134495][ T9503] loop9: detected capacity change from 0 to 1 [ 285.396012][ T9503] Dev loop9: unable to read RDB block 1 [ 285.396059][ T9503] loop9: unable to read partition table [ 285.396292][ T9503] loop9: partition table beyond EOD, truncated [ 285.396341][ T9503] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 285.601757][ T9514] __nla_validate_parse: 3 callbacks suppressed [ 285.601776][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1323'. [ 285.603437][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1323'. [ 286.332223][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1334'. [ 286.334393][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 287.078043][ T9554] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1340'. [ 287.541069][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1346'. [ 287.562344][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1346'. [ 288.492867][ T9591] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1354'. [ 288.613838][ T5720] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 288.807827][ T9601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1359'. [ 288.824915][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 288.850119][ T5720] usb 4-1: config index 0 descriptor too short (expected 64656, got 45) [ 288.869487][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.869518][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.869538][ T5720] usb 4-1: Product: syz [ 288.869553][ T5720] usb 4-1: Manufacturer: syz [ 288.869567][ T5720] usb 4-1: SerialNumber: syz [ 289.137511][ T5720] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 289.137578][ T5720] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 289.137595][ T5720] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 289.363778][ T5720] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 289.397863][ T5720] usb 4-1: USB disconnect, device number 2 [ 289.959423][ T9628] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 290.249269][ T9635] mmap: syz.2.1369 (9635): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 290.900495][ T9652] __nla_validate_parse: 1 callbacks suppressed [ 290.900514][ T9652] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1377'. [ 291.800233][ T833] Bluetooth: hci1: Frame reassembly failed (-84) [ 291.818535][ T833] Bluetooth: hci1: Frame reassembly failed (-84) [ 291.839323][ T9679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1384'. [ 292.354936][ T9691] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1389'. [ 293.158410][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1397'. [ 293.171346][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 293.320859][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 293.331529][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.331635][ T11] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 293.331697][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.400276][ T11] usb 3-1: config 0 descriptor?? [ 293.606611][ T9718] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1401'. [ 293.694386][ T59] Bluetooth: hci1: command 0x1003 tx timeout [ 293.724349][ T5603] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 293.901902][ T11] pantherlord 0003:0810:0002.0003: unexpected long global item [ 293.902648][ T11] pantherlord 0003:0810:0002.0003: parse failed [ 293.902727][ T11] pantherlord 0003:0810:0002.0003: probe with driver pantherlord failed with error -22 [ 294.115061][ T11] usb 3-1: USB disconnect, device number 3 [ 295.091086][ T9745] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1412'. [ 295.742216][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 295.788318][ T9765] random: crng reseeded on system resumption [ 295.900906][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 295.903041][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 295.903068][ T31] usb 2-1: config 0 has no interface number 0 [ 295.906283][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 295.906311][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.906331][ T31] usb 2-1: Product: syz [ 295.906345][ T31] usb 2-1: Manufacturer: syz [ 295.906360][ T31] usb 2-1: SerialNumber: syz [ 295.986331][ T31] usb 2-1: config 0 descriptor?? [ 296.100923][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 296.256548][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.256578][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.256615][ T11] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 296.256637][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.310482][ T11] usb 3-1: config 0 descriptor?? [ 296.465409][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 296.465441][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 296.815587][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 296.815627][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 296.815656][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 296.815684][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 296.815711][ T11] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 296.989219][ T11] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 297.198515][ T9783] tmpfs: Unsupported parameter 'huge' [ 297.593366][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 297.594353][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 297.599548][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.638345][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.682467][ T9788] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1426'. [ 297.686887][ T31] usb 2-1: USB disconnect, device number 2 [ 297.967962][ T11] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input5 [ 298.389259][ T11] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input6 [ 298.656971][ T11] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input7 [ 298.928954][ T11] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input8 [ 299.332894][ T5706] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 299.562813][ T5706] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.562841][ T5706] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.563908][ T5706] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.563932][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.563951][ T5706] usb 6-1: SerialNumber: syz [ 299.750898][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 299.887688][ T5706] usb 6-1: 0:2 : does not exist [ 299.916193][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 299.916469][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 299.960099][ T31] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 299.960131][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.960151][ T31] usb 2-1: Product: syz [ 299.960166][ T31] usb 2-1: Manufacturer: syz [ 299.960182][ T31] usb 2-1: SerialNumber: syz [ 300.058288][ T31] usb 2-1: config 0 descriptor?? [ 300.060012][ T9822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 300.062750][ T9822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 300.297014][ T9822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 300.297145][ T9822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 300.625147][ T5706] usb 6-1: USB disconnect, device number 4 [ 300.707783][ T11] playstation 0003:054C:0DF2.0004: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 300.836734][ T9829] binder: 9828:9829 ioctl c018620c 200000000200 returned -22 [ 300.890458][ T11] usb 3-1: USB disconnect, device number 4 [ 301.195339][ T31] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 301.408426][ T8866] udevd[8866]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.723381][ T31] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 22:18:ee:d8:a7:ef [ 301.807587][ T31] usb 2-1: USB disconnect, device number 3 [ 301.910959][ T31] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 302.002963][ T9840] syzkaller1: entered promiscuous mode [ 302.002983][ T9840] syzkaller1: entered allmulticast mode [ 303.330945][ T11] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 303.494924][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32314, setting to 64 [ 303.494976][ T11] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 303.495001][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.582272][ T31] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 303.606758][ T11] usb 3-1: config 0 descriptor?? [ 303.608786][ T9835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.736234][ T31] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.736270][ T31] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 303.736298][ T31] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 303.736323][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 303.736354][ T31] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 303.736374][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.944259][ T31] usb 4-1: config 0 descriptor?? [ 303.945439][ T9870] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.026481][ T11] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 304.028240][ T11] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 304.028274][ T11] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 304.028303][ T11] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 304.028331][ T11] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 304.097414][ T11] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 304.276296][ T11] usb 3-1: USB disconnect, device number 5 [ 304.382180][ T31] sony 0003:054C:0268.0006: unknown main item tag 0x0 [ 304.382220][ T31] sony 0003:054C:0268.0006: unknown main item tag 0x0 [ 304.382249][ T31] sony 0003:054C:0268.0006: unknown main item tag 0x0 [ 304.382277][ T31] sony 0003:054C:0268.0006: unknown main item tag 0x0 [ 304.382304][ T31] sony 0003:054C:0268.0006: unknown main item tag 0x0 [ 304.590877][ T197] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 304.679893][ T31] sony 0003:054C:0268.0006: hiddev0,hidraw0: USB HID v80.02 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 304.679930][ T31] sony 0003:054C:0268.0006: failed to claim input [ 304.810863][ T197] usb 1-1: Using ep0 maxpacket: 8 [ 304.813124][ T197] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.813156][ T197] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.813181][ T197] usb 1-1: config 0 interface 0 has no altsetting 0 [ 304.813213][ T197] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 304.813236][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.969065][ T197] usb 1-1: config 0 descriptor?? [ 305.363651][ T31] usb 4-1: USB disconnect, device number 3 [ 305.408565][ T9895] tipc: Started in network mode [ 305.408589][ T9895] tipc: Node identity 2007ff, cluster identity 4711 [ 305.408602][ T9895] tipc: Node number set to 2099199 [ 305.458146][ T197] hid (null): report_id 3688329021 is invalid [ 305.458171][ T197] hid (null): unknown global tag 0xc [ 305.458198][ T197] hid (null): nested delimiters [ 305.507610][ T197] magicmouse 0003:05AC:0269.0007: report_id 3688329021 is invalid [ 305.507636][ T197] magicmouse 0003:05AC:0269.0007: item 0 4 1 8 parsing failed [ 305.508437][ T197] magicmouse 0003:05AC:0269.0007: magicmouse hid parse failed [ 305.508557][ T197] magicmouse 0003:05AC:0269.0007: probe with driver magicmouse failed with error -22 [ 305.729517][ T820] usb 1-1: USB disconnect, device number 3 [ 307.070926][ T5720] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 307.254722][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.254762][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 307.254782][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 307.254820][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.254862][ T5720] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.254886][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.377533][ T5720] usb 2-1: config 0 descriptor?? [ 307.379256][ T9925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.536242][ T9936] syzkaller0: entered promiscuous mode [ 307.536269][ T9936] syzkaller0: entered allmulticast mode [ 307.934471][ T5720] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 308.163589][ T9944] macvtap1: entered promiscuous mode [ 308.163610][ T9944] vlan0: entered promiscuous mode [ 308.358604][ T820] usb 2-1: USB disconnect, device number 4 [ 308.430571][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 308.972652][ T5720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 309.122776][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.122812][ T5720] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.122829][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.190457][ T5720] usb 3-1: config 0 descriptor?? [ 309.446392][ T5720] usbhid 3-1:0.0: can't add hid device: -71 [ 309.446522][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.467357][ T5720] usb 3-1: USB disconnect, device number 6 [ 309.889499][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 309.919523][ T9985] macvtap1: entered promiscuous mode [ 309.919540][ T9985] vlan0: entered promiscuous mode [ 310.053063][ T5720] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 310.080946][ T5329] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 310.216072][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.216121][ T5720] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 310.216145][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.254858][ T5329] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.254891][ T5329] usb 6-1: config 0 interface 0 has no altsetting 0 [ 310.254925][ T5329] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 310.254948][ T5329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.266585][ T5720] usb 3-1: config 0 descriptor?? [ 310.313197][ T5329] usb 6-1: config 0 descriptor?? [ 310.640900][ T820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 310.787917][ T5329] uclogic 0003:5543:0004.0009: unexpected long global item [ 310.788692][ T5329] uclogic 0003:5543:0004.0009: parse failed [ 310.788804][ T5329] uclogic 0003:5543:0004.0009: probe with driver uclogic failed with error -22 [ 310.855301][ T820] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.855330][ T820] usb 2-1: config 0 has no interface number 0 [ 310.855380][ T820] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.855399][ T820] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.855414][ T820] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.855444][ T820] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 310.855460][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.861688][ T820] usb 2-1: config 0 descriptor?? [ 310.986368][ T5329] usb 6-1: USB disconnect, device number 5 [ 311.216268][ T5720] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 311.330058][ T820] usbhid 2-1:0.1: can't add hid device: -71 [ 311.330188][ T820] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 311.433665][ T820] usb 2-1: USB disconnect, device number 5 [ 311.483771][ T5720] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 311.721053][ T5721] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 311.922292][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 311.930347][ T5721] usb 4-1: config 0 interface 0 has no altsetting 0 [ 311.930450][ T5721] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 311.930474][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.314571][ T5329] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.372012][ T820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 312.517455][ T5329] usb 2-1: Using ep0 maxpacket: 16 [ 312.531524][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 312.600787][ T5329] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 312.600815][ T5329] usb 2-1: config 0 has no interface number 0 [ 312.600858][ T5329] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 312.600884][ T5329] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 312.669389][ T5329] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 312.669421][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.669441][ T5329] usb 2-1: Product: syz [ 312.669456][ T5329] usb 2-1: Manufacturer: syz [ 312.669471][ T5329] usb 2-1: SerialNumber: syz [ 312.746183][ T820] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 312.746305][ T820] usb 1-1: config 2 has no interface number 0 [ 312.746349][ T820] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 312.746376][ T820] usb 1-1: config 2 interface 88 has no altsetting 0 [ 313.109446][ T820] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 313.109605][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 313.109627][ T820] usb 1-1: Product: syz [ 313.109641][ T820] usb 1-1: Manufacturer: syz [ 313.109655][ T820] usb 1-1: SerialNumber: syz [ 313.154713][ T5721] usb 4-1: config 0 descriptor?? [ 313.156115][ T5329] usb 2-1: config 0 descriptor?? [ 313.157849][T10010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.158236][T10010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.633006][T10010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.633243][T10010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 313.854028][ T5329] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 313.963815][T10004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 314.495778][ T5721] hid_parser_main: 17 callbacks suppressed [ 314.500131][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.500316][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.500346][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.500518][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.500548][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.500714][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.509575][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.511370][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.511401][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.511568][ T5721] wacom 0003:056A:002A.000A: unknown main item tag 0x0 [ 314.590659][T10004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 315.029042][ T820] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 315.029686][ T820] asix 1-1:2.88: probe with driver asix failed with error -71 [ 315.090856][ T5720] usb 3-1: USB disconnect, device number 7 [ 315.090945][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 315.413646][ T820] usb 1-1: USB disconnect, device number 4 [ 315.420918][ T5721] usb 4-1: USB disconnect, device number 4 [ 316.623887][ T5329] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 316.623919][ T5329] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 316.624214][ T5329] asix 2-1:0.34: probe with driver asix failed with error -71 [ 316.804880][ T5329] usb 2-1: USB disconnect, device number 6 [ 317.375110][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.375183][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.760923][ T5721] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 318.863596][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 318.924112][ T5721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 318.924162][ T5721] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 318.958379][ T5721] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 318.958423][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.958444][ T5721] usb 3-1: Product: syz [ 318.958459][ T5721] usb 3-1: Manufacturer: syz [ 318.958474][ T5721] usb 3-1: SerialNumber: syz [ 319.418407][ T5721] usb 3-1: unit 5 not found! [ 319.898432][T10090] lo speed is unknown, defaulting to 1000 [ 320.100455][ T5721] usb 3-1: USB disconnect, device number 8 [ 321.238330][ T9819] udevd[9819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.872548][T10129] process 'syz.1.1542' launched './file0' with NULL argv: empty string added [ 322.720930][ T820] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 322.880926][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 322.883489][ T820] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 322.883515][ T820] usb 6-1: config 0 has no interface number 0 [ 322.883562][ T820] usb 6-1: config 0 interface 184 has no altsetting 0 [ 322.889693][ T820] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.889723][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.889744][ T820] usb 6-1: Product: syz [ 322.889759][ T820] usb 6-1: Manufacturer: syz [ 322.889773][ T820] usb 6-1: SerialNumber: syz [ 322.972537][ T820] usb 6-1: config 0 descriptor?? [ 323.633591][ T820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 323.633623][ T820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 325.240149][T10183] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 327.096886][ T820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000003c: -71 [ 327.096919][ T820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read BULK_IN_DLY: -71 [ 327.096940][ T820] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 327.097239][ T820] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 327.121680][ T820] usb 6-1: USB disconnect, device number 6 [ 331.232053][ T5721] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 331.381110][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 331.387539][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.413326][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.413354][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.413376][ T5721] usb 1-1: config 1 has no interface number 0 [ 331.423184][ T5721] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 331.423251][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.423321][ T5721] usb 1-1: Product: syz [ 331.423363][ T5721] usb 1-1: Manufacturer: syz [ 331.423427][ T5721] usb 1-1: SerialNumber: syz [ 332.772989][ T5721] usb 1-1: USB disconnect, device number 5 [ 332.817668][ T8866] udevd[8866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.827765][ T5720] hid_parser_main: 30 callbacks suppressed [ 332.827829][ T5720] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 332.827931][ T5720] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 333.153320][ T5721] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 333.336872][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.336900][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.338865][ T5721] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.338895][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.338916][ T5721] usb 1-1: SerialNumber: syz [ 333.522851][ T5720] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 333.708233][ T5835] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 334.060395][ T5835] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 334.097878][ T5721] usb 1-1: 0:2 : does not exist [ 334.255974][ T5721] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 334.312024][ T5721] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 335.155323][ T5721] usb 1-1: USB disconnect, device number 6 [ 335.877172][ T8866] udevd[8866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.900929][ T5329] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 336.134909][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 336.140678][ T5329] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 336.158490][ T5329] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 336.158526][ T5329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 336.158562][ T5329] usb 4-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 336.158585][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.249757][ T5329] usb 4-1: config 0 descriptor?? [ 336.781801][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.781841][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.781870][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.781908][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.781937][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.781964][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.781990][ T5329] wacom 0003:056A:0015.000D: unknown main item tag 0x0 [ 336.835676][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 336.893704][ T5329] usb 4-1: USB disconnect, device number 5 [ 337.020978][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 337.029762][ T5721] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 337.029793][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.029814][ T5721] usb 1-1: Product: syz [ 337.029828][ T5721] usb 1-1: Manufacturer: syz [ 337.029843][ T5721] usb 1-1: SerialNumber: syz [ 337.298411][ T5721] r8152-cfgselector 1-1: Unknown version 0x0000 [ 337.298438][ T5721] r8152-cfgselector 1-1: config 0 descriptor?? [ 337.751540][ T5329] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 339.753821][ T2342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.769552][T10383] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 340.781357][T10383] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 340.910104][ T2342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.235153][T10391] macvtap1: entered promiscuous mode [ 341.235176][T10391] vlan0: entered promiscuous mode [ 341.282129][ T5720] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 341.440814][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 341.443737][ T5720] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 341.443763][ T5720] usb 2-1: config 0 has no interface number 0 [ 341.447516][ T5720] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 341.447554][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.447575][ T5720] usb 2-1: Product: syz [ 341.447590][ T5720] usb 2-1: Manufacturer: syz [ 341.447605][ T5720] usb 2-1: SerialNumber: syz [ 341.507434][ T5706] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 341.585817][ T5720] usb 2-1: config 0 descriptor?? [ 341.690998][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 341.730350][ T5706] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 341.730379][ T5706] usb 6-1: config 0 has no interface number 0 [ 341.730426][ T5706] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 341.730452][ T5706] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 341.772965][ T5706] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 341.772997][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.773018][ T5706] usb 6-1: Product: syz [ 341.773034][ T5706] usb 6-1: Manufacturer: syz [ 341.773049][ T5706] usb 6-1: SerialNumber: syz [ 341.823881][ T5706] usb 6-1: config 0 descriptor?? [ 341.835687][T10395] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 341.845213][T10395] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 342.057098][ T5721] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 342.134875][T10395] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 342.139574][T10395] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 342.220893][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 342.354682][ T5706] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 342.480306][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.618532][ T5720] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 342.618566][ T5720] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 342.824491][ T5721] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 342.853867][ T5721] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 342.853971][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.853995][ T5721] usb 4-1: Product: syz [ 342.854010][ T5721] usb 4-1: Manufacturer: syz [ 342.854025][ T5721] usb 4-1: SerialNumber: syz [ 343.476642][ T5720] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 343.476952][ T5720] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 343.523401][ T5720] usb 2-1: USB disconnect, device number 7 [ 343.561979][ T2342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.575878][ T5721] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 343.608499][ T5721] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 343.936559][ T5721] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 344.650869][ T5721] usb 4-1: USB disconnect, device number 6 [ 344.855731][ T5706] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 344.855763][ T5706] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 344.856031][ T5706] asix 6-1:0.34: probe with driver asix failed with error -71 [ 345.060192][ T5706] usb 6-1: USB disconnect, device number 7 [ 345.077489][T10422] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 345.077517][T10422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 345.211246][T10422] vhci_hcd vhci_hcd.0: Device attached [ 345.213048][T10425] vhci_hcd: connection closed [ 345.353304][ T822] vhci_hcd vhci_hcd.2: stop threads [ 345.354282][ T822] vhci_hcd vhci_hcd.2: release socket [ 345.494655][ T2342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.535946][ T822] vhci_hcd vhci_hcd.2: disconnect device [ 345.658283][ T5603] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 345.658327][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.658350][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.658363][ T5603] Workqueue: hci4 hci_rx_work [ 345.658561][ T5603] Call Trace: [ 345.658578][ T5603] [ 345.658648][ T5603] dump_stack_lvl+0xe8/0x150 [ 345.658767][ T5603] sysfs_create_dir_ns+0x271/0x2a0 [ 345.658882][ T5603] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 345.658949][ T5603] ? rt_spin_unlock+0x163/0x200 [ 345.659042][ T5603] kobject_add_internal+0x62c/0xce0 [ 345.659098][ T5603] kobject_add+0x163/0x240 [ 345.659116][ T5603] ? rt_spin_unlock+0x157/0x200 [ 345.659145][ T5603] ? __pfx_kobject_add+0x10/0x10 [ 345.659173][ T5603] ? get_device_parent+0x370/0x3a0 [ 345.659284][ T5603] device_add+0x3fa/0xb80 [ 345.659312][ T5603] hci_conn_add_sysfs+0xd5/0x210 [ 345.659369][ T5603] le_conn_complete_evt+0xfef/0x1580 [ 345.659423][ T5603] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 345.659446][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.659502][ T5603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.659553][ T5603] ? rt_mutex_slowunlock+0x219/0x460 [ 345.659577][ T5603] ? skb_pull_data+0xf0/0x200 [ 345.659715][ T5603] hci_le_conn_complete_evt+0x187/0x470 [ 345.659781][ T5603] hci_event_packet+0x67a/0xf10 [ 345.659821][ T5603] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 345.659854][ T5603] ? __pfx_hci_event_packet+0x10/0x10 [ 345.659885][ T5603] ? rt_spin_unlock+0x157/0x200 [ 345.659919][ T5603] ? hci_send_to_monitor+0xe2/0x590 [ 345.659945][ T5603] hci_rx_work+0x3ee/0x1020 [ 345.659985][ T5603] ? process_scheduled_works+0xa20/0x14e0 [ 345.660061][ T5603] process_scheduled_works+0xa8e/0x14e0 [ 345.660118][ T5603] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.660150][ T5603] ? assign_work+0x3cf/0x5d0 [ 345.660180][ T5603] worker_thread+0xa47/0xfb0 [ 345.660236][ T5603] kthread+0x388/0x470 [ 345.660295][ T5603] ? __pfx_worker_thread+0x10/0x10 [ 345.660319][ T5603] ? __pfx_kthread+0x10/0x10 [ 345.660353][ T5603] ret_from_fork+0x514/0xb70 [ 345.660443][ T5603] ? __pfx_ret_from_fork+0x10/0x10 [ 345.660478][ T5603] ? __switch_to+0xc89/0x1420 [ 345.660551][ T5603] ? __pfx_kthread+0x10/0x10 [ 345.660587][ T5603] ret_from_fork_asm+0x1a/0x30 [ 345.660636][ T5603] [ 345.660966][ T5603] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 345.661074][ T5603] Bluetooth: hci4: failed to register connection device [ 346.471890][ T8866] udevd[8866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.753958][T10445] syzkaller0: entered promiscuous mode [ 346.753986][T10445] syzkaller0: entered allmulticast mode [ 347.566076][T10465] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 347.566117][T10465] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 347.612561][T10465] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 347.995391][T10465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 348.645186][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 350.503485][T10501] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 350.674823][ T5329] lo speed is unknown, defaulting to 1000 [ 351.588085][ T2342] bridge_slave_1: left allmulticast mode [ 351.588351][ T2342] bridge_slave_1: left promiscuous mode [ 351.668423][ T2342] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.898646][T10535] loop7: detected capacity change from 0 to 7 [ 352.019988][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.032870][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.068152][ T2342] bridge_slave_0: left allmulticast mode [ 352.068189][ T2342] bridge_slave_0: left promiscuous mode [ 352.076152][ T2342] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.107127][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.107215][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.107923][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.108177][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.186303][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.194276][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.235667][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.235772][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.265361][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.265542][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.307927][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.308017][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.309535][T10535] ldm_validate_partition_table(): Disk read failed. [ 352.316304][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.317168][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.393409][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.393506][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.396111][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.396201][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.398913][T10535] Dev loop7: unable to read RDB block 0 [ 352.518630][T10535] loop7: unable to read partition table [ 352.518887][T10535] loop7: partition table beyond EOD, truncated [ 352.518925][T10535] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 355.531112][ T5706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 355.651786][ T2342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.684328][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.684481][ T5706] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 355.684506][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.697677][ T5706] usb 3-1: config 0 descriptor?? [ 355.782171][ T2342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.844583][ T2342] bond0 (unregistering): Released all slaves [ 355.867345][ T2342] bond1 (unregistering): Released all slaves [ 356.039327][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.055287][ T5706] usbhid 3-1:0.0: can't add hid device: -71 [ 356.055493][ T5706] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 356.080786][ T5706] usb 3-1: USB disconnect, device number 9 [ 356.104323][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.234355][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.234519][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.234863][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.234980][T10529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.275882][T10529] team0: Port device bridge0 added [ 356.373322][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.387704][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.713151][ T5706] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 356.976208][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.976261][ T5706] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 356.976287][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.026419][ T5706] usb 3-1: config 0 descriptor?? [ 357.861511][ T5706] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 357.902224][ T5706] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 358.409209][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 358.409272][ T5706] usb 3-1: USB disconnect, device number 10 [ 358.561286][ T5720] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 358.790842][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 358.794936][ T5720] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 358.794963][ T5720] usb 4-1: config 0 has no interface number 0 [ 358.795011][ T5720] usb 4-1: config 0 interface 184 has no altsetting 0 [ 358.835968][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 358.836002][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.836022][ T5720] usb 4-1: Product: syz [ 358.836037][ T5720] usb 4-1: Manufacturer: syz [ 358.836052][ T5720] usb 4-1: SerialNumber: syz [ 358.902585][ T5720] usb 4-1: config 0 descriptor?? [ 359.654138][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 359.654171][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 361.713867][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.047987][T10658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.622436][ T37] audit: type=1326 audit(1783063134.668:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa680de59 code=0x7ffc0000 [ 362.622498][ T37] audit: type=1326 audit(1783063134.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa680de59 code=0x7ffc0000 [ 362.622546][ T37] audit: type=1326 audit(1783063134.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8aa680de59 code=0x7ffc0000 [ 362.629314][ T37] audit: type=1326 audit(1783063134.788:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa680de59 code=0x7ffc0000 [ 362.718973][ T37] audit: type=1326 audit(1783063134.878:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8aa67ce68e code=0x7ffc0000 [ 362.734129][ T37] audit: type=1326 audit(1783063134.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8aa67ce68e code=0x7ffc0000 [ 362.750181][ T37] audit: type=1326 audit(1783063134.908:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8aa67ce68e code=0x7ffc0000 [ 362.775008][ T37] audit: type=1326 audit(1783063134.938:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8aa67ce68e code=0x7ffc0000 [ 362.784610][ T37] audit: type=1326 audit(1783063134.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8aa67ce68e code=0x7ffc0000 [ 362.805133][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -32 [ 362.805172][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read BURST_CAP: -32 [ 362.805193][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 362.805205][ T37] audit: type=1326 audit(1783063134.968:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.5.1693" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8aa67ce68e code=0x7ffc0000 [ 362.805504][ T5720] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 362.949052][ T5720] usb 4-1: USB disconnect, device number 7 [ 365.762731][T10726] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1708'. [ 366.550635][ T2342] hsr_slave_0: left promiscuous mode [ 366.594819][ T2342] hsr_slave_1: left promiscuous mode [ 366.599166][ T2342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.660579][ T2342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.796814][ T2342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.796839][ T2342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.246200][ T2342] veth1_macvtap: left promiscuous mode [ 367.246675][ T2342] veth0_macvtap: left promiscuous mode [ 367.247023][ T2342] veth1_vlan: left promiscuous mode [ 367.305689][ T2342] veth0_vlan: left promiscuous mode [ 367.382306][ T5713] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 367.635007][T10756] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1720'. [ 367.676055][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.676090][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.676114][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 367.676157][ T5713] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.676181][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.772966][ T5713] usb 1-1: config 0 descriptor?? [ 368.350393][ T59] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 369.098723][ T5835] IPVS: starting estimator thread 0... [ 369.257909][T10771] IPVS: using max 10 ests per chain, 24000 per kthread [ 370.513665][ T5713] usbhid 1-1:0.0: can't add hid device: -71 [ 370.513795][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 370.660048][ T5713] usb 1-1: USB disconnect, device number 8 [ 371.550059][T10798] siw: device registration error -23 [ 371.955659][T10805] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 371.955689][T10805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 371.983365][T10805] vhci_hcd vhci_hcd.0: Device attached [ 372.024533][T10805] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 372.024561][T10805] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 372.024666][T10805] vhci_hcd vhci_hcd.0: Device attached [ 372.073602][T10805] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 372.073631][T10805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.073696][T10805] vhci_hcd vhci_hcd.0: Device attached [ 372.076723][T10805] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 372.076750][T10805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.076840][T10805] vhci_hcd vhci_hcd.0: Device attached [ 372.132074][T10814] vhci_hcd: connection closed [ 372.138839][T10810] vhci_hcd: connection closed [ 372.139317][T10812] vhci_hcd: connection closed [ 372.140130][T10807] vhci_hcd: connection closed [ 372.147410][ T6204] vhci_hcd vhci_hcd.0: stop threads [ 372.147476][ T6204] vhci_hcd vhci_hcd.0: release socket [ 372.326612][ T6204] vhci_hcd vhci_hcd.0: disconnect device [ 372.337158][ T6204] vhci_hcd vhci_hcd.0: stop threads [ 372.337223][ T6204] vhci_hcd vhci_hcd.0: release socket [ 372.337432][ T6204] vhci_hcd vhci_hcd.0: disconnect device [ 372.353745][ T6204] vhci_hcd vhci_hcd.0: stop threads [ 372.353797][ T6204] vhci_hcd vhci_hcd.0: release socket [ 372.353990][ T6204] vhci_hcd vhci_hcd.0: disconnect device [ 372.356908][ T6204] vhci_hcd vhci_hcd.0: stop threads [ 372.356977][ T6204] vhci_hcd vhci_hcd.0: release socket [ 372.357049][ T6204] vhci_hcd vhci_hcd.0: disconnect device [ 372.460348][ T5835] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 373.757279][ T2342] team0 (unregistering): Port device team_slave_1 removed [ 373.922445][ T2342] team0 (unregistering): Port device team_slave_0 removed [ 374.010390][ T5713] usb usb34-port1: attempt power cycle [ 374.725781][ T5713] usb usb34-port1: unable to enumerate USB device [ 374.871180][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 374.929742][T10845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.317902][ T59] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 376.261112][T10873] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 376.303672][T10873] bond1: (slave lo): making interface the new active one [ 376.332895][T10873] bond1: (slave lo): Enslaving as an active interface with an up link [ 376.365026][T10873] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 378.060592][T10897] netlink: 'syz.5.1764': attribute type 1 has an invalid length. [ 378.890122][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.890182][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.165075][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 380.082553][T10938] fuse: Bad value for 'fd' [ 380.898433][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 381.226059][T10962] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 381.757832][T10980] fuse: Bad value for 'fd' [ 382.744570][T10999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.991591][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 384.419266][T11023] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 389.050503][T11072] capability: warning: `syz.5.1815' uses deprecated v2 capabilities in a way that may be insecure [ 391.806602][T11106] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 393.062219][ T5603] Bluetooth: hci3: unexpected event for opcode 0x6567 [ 396.479309][ T5603] Bluetooth: hci4: unexpected event for opcode 0x6567 [ 397.514996][T11207] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 399.742620][ T5603] Bluetooth: hci2: unexpected event for opcode 0x6567 [ 402.081338][ T5706] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 402.231321][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 402.239821][ T5706] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 402.239849][ T5706] usb 3-1: config 0 has no interface number 0 [ 402.239899][ T5706] usb 3-1: config 0 interface 184 has no altsetting 0 [ 402.246333][ T5706] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 402.246365][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.246384][ T5706] usb 3-1: Product: syz [ 402.246398][ T5706] usb 3-1: Manufacturer: syz [ 402.246413][ T5706] usb 3-1: SerialNumber: syz [ 402.330529][ T5706] usb 3-1: config 0 descriptor?? [ 402.789518][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1865'. [ 403.069439][ T5706] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 403.069471][ T5706] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 403.526085][ T5603] Bluetooth: hci0: unexpected event for opcode 0x6505 [ 405.336258][ T5706] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 405.336307][ T5706] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 405.336327][ T5706] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 405.398467][ T5706] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 406.273760][ T5706] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 406.420909][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 406.423309][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.423421][ T5706] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 406.423446][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.469469][ T5706] usb 4-1: config 0 descriptor?? [ 406.757026][ T197] usb 4-1: USB disconnect, device number 8 [ 406.785585][ T5706] usb 3-1: USB disconnect, device number 11 [ 408.001067][ T5603] Bluetooth: hci0: unexpected event for opcode 0x6505 [ 408.186790][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 408.343082][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.365005][ T11] usb 4-1: string descriptor 0 read error: -22 [ 408.365136][ T11] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= 0.f0 [ 408.365161][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.679332][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.679740][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.794742][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.795410][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.852351][ T11] gm12u320 4-1:9.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 408.854889][ T11] gm12u320 4-1:9.0: probe with driver gm12u320 failed with error -5 [ 408.897292][ T11] usb-storage 4-1:9.0: USB Mass Storage device detected [ 409.254700][ T11] usb-storage 4-1:9.0: device ignored [ 409.900855][ T11] usb 4-1: USB disconnect, device number 9 [ 410.595852][T11289] bridge_slave_0: left allmulticast mode [ 410.595891][T11289] bridge_slave_0: left promiscuous mode [ 410.598316][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.371874][T11289] bridge_slave_1: left allmulticast mode [ 411.371922][T11289] bridge_slave_1: left promiscuous mode [ 411.372171][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.601217][ T5603] Bluetooth: hci2: unexpected event for opcode 0x6505 [ 412.361700][T11289] bond0: (slave bond_slave_0): Releasing backup interface [ 412.759795][T11289] bond0: (slave bond_slave_1): Releasing backup interface [ 413.440206][T11289] team0: Port device team_slave_0 removed [ 414.056867][T11289] team0: Port device team_slave_1 removed [ 414.108292][T11289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.138111][T11289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.691079][T11289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.806460][T11289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.561226][T11289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.784469][T11375] lo speed is unknown, defaulting to 1000 [ 419.980912][ T5706] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 420.174415][ T5706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 420.178516][ T5706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.178540][ T5706] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.217811][ T5706] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 420.217842][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.217863][ T5706] usb 1-1: Product: syz [ 420.217877][ T5706] usb 1-1: Manufacturer: syz [ 420.217891][ T5706] usb 1-1: SerialNumber: syz [ 420.294531][ T5706] usb 1-1: selecting invalid altsetting 1 [ 420.295557][ T5706] usb 1-1: unit 6 not found! [ 422.292374][T11444] netlink: 'syz.5.1922': attribute type 1 has an invalid length. [ 422.871967][ T5706] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 422.952929][ T5706] usb 1-1: USB disconnect, device number 9 [ 423.334793][ T8866] udevd[8866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.318501][T11464] syzkaller1: entered promiscuous mode [ 425.318529][T11464] syzkaller1: entered allmulticast mode [ 425.612686][T11472] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1929'. [ 432.680595][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.847300][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.876314][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.940375][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.948687][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.225776][T11533] siw: device registration error -23 [ 434.042923][T11547] syzkaller1: entered promiscuous mode [ 434.042951][T11547] syzkaller1: entered allmulticast mode [ 435.131440][ T59] Bluetooth: hci1: command tx timeout [ 437.212467][ T5603] Bluetooth: hci1: command tx timeout [ 439.290828][ T5603] Bluetooth: hci1: command tx timeout [ 439.490616][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.554800][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.602528][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.670235][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.853276][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.256887][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256963][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.374840][ T5603] Bluetooth: hci1: command tx timeout [ 442.010863][ T5603] Bluetooth: hci6: command tx timeout [ 442.583398][ T5835] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 442.814324][ T5835] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 442.814357][ T5835] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.814381][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.814411][ T5835] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 442.814433][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.818870][ T5835] usb 6-1: config 0 descriptor?? [ 443.399539][ T5835] hid_parser_main: 33 callbacks suppressed [ 443.399628][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399658][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399683][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399708][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399732][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399757][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399782][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399807][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399833][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 443.399859][ T5835] saitek 0003:06A3:0CCB.000E: unknown main item tag 0x0 [ 444.081552][ T5835] saitek 0003:06A3:0CCB.000E: hidraw0: USB HID v9.0c Device [HID 06a3:0ccb] on usb-dummy_hcd.5-1/input0 [ 444.090898][ T5603] Bluetooth: hci6: command tx timeout [ 444.120305][ T5835] usb 6-1: USB disconnect, device number 8 [ 444.689326][T11578] siw: device registration error -23 [ 444.894504][T11574] fido_id[11574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 446.170890][ T59] Bluetooth: hci6: command tx timeout [ 448.059588][T11516] lo speed is unknown, defaulting to 1000 [ 448.250888][ T59] Bluetooth: hci6: command tx timeout [ 448.330848][ T5835] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 448.331118][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 448.806536][ T5835] usb 6-1: device descriptor read/64, error -32 [ 451.495112][ T5835] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 453.613028][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.668683][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.678914][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.680327][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.687403][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.850834][ T59] Bluetooth: hci0: command tx timeout [ 457.936280][ T59] Bluetooth: hci0: command tx timeout [ 458.740951][T11655] usb usb9: usbfs: process 11655 (syz.2.1969) did not claim interface 47 before use [ 459.627652][T11657] ======================================================= [ 459.627652][T11657] WARNING: The mand mount option has been deprecated and [ 459.627652][T11657] and is ignored by this kernel. Remove the mand [ 459.627652][T11657] option from the mount to silence this warning. [ 459.627652][T11657] ======================================================= [ 460.010989][ T59] Bluetooth: hci0: command tx timeout [ 460.929452][T11560] lo speed is unknown, defaulting to 1000 [ 462.097114][ T59] Bluetooth: hci0: command tx timeout [ 469.728225][ T6203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.718835][T11630] lo speed is unknown, defaulting to 1000 [ 471.234726][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.365141][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.406998][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.446292][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.568694][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.770891][ T5603] Bluetooth: hci2: command tx timeout [ 475.850821][ T5603] Bluetooth: hci2: command tx timeout [ 477.930862][ T5603] Bluetooth: hci2: command tx timeout [ 480.010848][ T5603] Bluetooth: hci2: command tx timeout [ 480.485411][ T6203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.167479][T11707] lo speed is unknown, defaulting to 1000 [ 485.630629][T11516] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.631026][T11516] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.631628][T11516] bridge_slave_0: entered allmulticast mode [ 485.643092][T11516] bridge_slave_0: entered promiscuous mode [ 486.375869][T11516] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.376001][T11516] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.376246][T11516] bridge_slave_1: entered allmulticast mode [ 486.381843][T11516] bridge_slave_1: entered promiscuous mode [ 488.671243][T11560] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.671369][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.671613][T11560] bridge_slave_0: entered allmulticast mode [ 488.674486][T11560] bridge_slave_0: entered promiscuous mode [ 490.689596][T11560] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.689739][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.689984][T11560] bridge_slave_1: entered allmulticast mode [ 490.743199][T11560] bridge_slave_1: entered promiscuous mode [ 495.447010][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 495.465603][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 495.468475][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 495.526202][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 495.548543][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 495.598866][ T6203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.275737][T11516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.690773][ T5603] Bluetooth: hci4: command tx timeout [ 499.770840][ T5603] Bluetooth: hci4: command tx timeout [ 501.658945][T11822] evm: overlay not supported [ 501.948168][ T5603] Bluetooth: hci4: command tx timeout [ 501.971785][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.971858][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.082719][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.184212][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.563608][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.212005][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.213512][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.010787][ T5604] Bluetooth: hci4: command tx timeout [ 504.276376][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.289848][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.290132][T11630] bridge_slave_0: entered allmulticast mode [ 504.594519][T11630] bridge_slave_0: entered promiscuous mode [ 504.658347][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.690826][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.728399][T11630] bridge_slave_1: entered allmulticast mode [ 505.019495][T11630] bridge_slave_1: entered promiscuous mode [ 505.347612][T11834] fuse: Bad value for 'fd' [ 505.377558][T11630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.589374][T11630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.092843][ T5604] Bluetooth: hci5: command tx timeout [ 508.254791][ T5604] Bluetooth: hci5: command tx timeout [ 510.330807][ T5604] Bluetooth: hci5: command tx timeout [ 512.410804][ T5604] Bluetooth: hci5: command tx timeout [ 513.673281][T11797] lo speed is unknown, defaulting to 1000 [ 514.096575][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.186629][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.202600][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.295311][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.321100][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.411142][ T5604] Bluetooth: hci1: command tx timeout [ 516.629781][ T6203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.500903][ T5604] Bluetooth: hci1: command tx timeout [ 520.570898][ T5604] Bluetooth: hci1: command tx timeout [ 522.663532][ T5604] Bluetooth: hci1: command tx timeout [ 523.818386][T11817] lo speed is unknown, defaulting to 1000 [ 533.060162][T11851] lo speed is unknown, defaulting to 1000 [ 534.577467][T11891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.623997][T11891] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.624133][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.693010][T11891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.716693][T11891] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.718730][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.723162][T11891] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.766419][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.785043][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.788660][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.987138][ T5603] Bluetooth: hci6: command tx timeout [ 536.990269][ T59] Bluetooth: hci0: command tx timeout [ 539.068703][ T59] Bluetooth: hci0: command tx timeout [ 539.426606][ T59] Bluetooth: hci6: command tx timeout [ 541.130793][ T59] Bluetooth: hci0: command tx timeout [ 541.450821][ T59] Bluetooth: hci6: command tx timeout [ 543.210876][ T59] Bluetooth: hci0: command tx timeout [ 543.531645][ T59] Bluetooth: hci6: command tx timeout [ 546.576334][T11797] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.576468][T11797] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.576743][T11797] bridge_slave_0: entered allmulticast mode [ 546.618132][T11797] bridge_slave_0: entered promiscuous mode [ 546.932754][T11797] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.932933][T11797] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.933213][T11797] bridge_slave_1: entered allmulticast mode [ 546.962291][T11797] bridge_slave_1: entered promiscuous mode [ 550.663300][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.870816][T11887] lo speed is unknown, defaulting to 1000 [ 550.923143][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.303789][T11888] lo speed is unknown, defaulting to 1000 [ 552.306951][T11817] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.307091][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.307361][T11817] bridge_slave_0: entered allmulticast mode [ 552.357135][T11817] bridge_slave_0: entered promiscuous mode [ 554.288700][T11817] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.288845][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.289099][T11817] bridge_slave_1: entered allmulticast mode [ 554.313684][T11817] bridge_slave_1: entered promiscuous mode [ 556.018683][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.065709][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.069141][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.128645][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.151202][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.251487][ T5603] Bluetooth: hci2: command tx timeout [ 558.822482][T11817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.477262][T11817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.331043][ T5603] Bluetooth: hci2: command tx timeout [ 562.475635][ T5603] Bluetooth: hci2: command tx timeout [ 563.072391][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.079935][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.094107][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.348896][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.366882][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.571031][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.100467][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.650758][ T5603] Bluetooth: hci2: command tx timeout [ 566.251105][ T5603] Bluetooth: hci4: command tx timeout [ 568.330877][ T5603] Bluetooth: hci4: command tx timeout [ 570.410788][ T5603] Bluetooth: hci4: command tx timeout [ 572.491942][ T5603] Bluetooth: hci4: command tx timeout [ 573.674867][T11851] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.675114][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.675411][T11851] bridge_slave_0: entered allmulticast mode [ 573.713187][T11851] bridge_slave_0: entered promiscuous mode [ 578.074116][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 578.121369][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 578.167926][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 578.186956][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 578.187880][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.413306][ T59] Bluetooth: hci3: command tx timeout [ 581.541571][ T1442] smbdirect: ib_dev[syz1] removed [ 582.491277][ T5603] Bluetooth: hci3: command tx timeout [ 584.570966][ T5603] Bluetooth: hci3: command tx timeout [ 586.660911][ T5603] Bluetooth: hci3: command tx timeout [ 588.124993][T11931] lo speed is unknown, defaulting to 1000 [ 592.602598][T11943] lo speed is unknown, defaulting to 1000 [ 594.161932][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.233198][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.251818][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.369748][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.391538][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.570174][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.723416][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.726488][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.752539][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.798395][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 596.490876][ T5604] Bluetooth: hci1: command tx timeout [ 597.130840][ T5604] Bluetooth: hci5: command tx timeout [ 597.291792][T11960] lo speed is unknown, defaulting to 1000 [ 598.570755][ T5604] Bluetooth: hci1: command tx timeout [ 599.230251][ T5604] Bluetooth: hci5: command tx timeout [ 600.650723][ T5604] Bluetooth: hci1: command tx timeout [ 601.041321][ T6203] bridge_slave_1: left allmulticast mode [ 601.041361][ T6203] bridge_slave_1: left promiscuous mode [ 601.041645][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.290790][ T5604] Bluetooth: hci5: command tx timeout [ 602.733109][ T5604] Bluetooth: hci1: command tx timeout [ 602.812492][ T6203] bridge_slave_0: left allmulticast mode [ 602.812531][ T6203] bridge_slave_0: left promiscuous mode [ 602.812808][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.380796][ T5604] Bluetooth: hci5: command tx timeout [ 617.516541][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.025839][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.029148][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.030469][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.033100][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.171289][ T5604] Bluetooth: hci0: command tx timeout [ 622.250774][ T5604] Bluetooth: hci0: command tx timeout [ 622.687186][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 622.783804][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 622.805090][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 622.808144][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 622.825459][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 622.840238][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.207565][ T6203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.332536][ T6203] bond0 (unregistering): Released all slaves [ 624.330786][ T59] Bluetooth: hci0: command tx timeout [ 624.573222][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.573295][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.056549][ T59] Bluetooth: hci6: command tx timeout [ 626.410812][ T59] Bluetooth: hci0: command tx timeout [ 627.130803][ T59] Bluetooth: hci6: command tx timeout [ 629.210734][ T5604] Bluetooth: hci6: command tx timeout [ 631.290895][ T5604] Bluetooth: hci6: command tx timeout [ 635.418210][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 635.451744][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 635.453773][T11891] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 635.458563][T11891] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 635.476745][T11891] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.851276][ T5604] Bluetooth: hci7: command tx timeout [ 638.484029][T11981] lo speed is unknown, defaulting to 1000 [ 638.810359][T11979] lo speed is unknown, defaulting to 1000 [ 639.931679][ T5604] Bluetooth: hci7: command tx timeout [ 640.324820][T11991] lo speed is unknown, defaulting to 1000 [ 642.010856][ T5604] Bluetooth: hci7: command tx timeout [ 643.501877][T11998] lo speed is unknown, defaulting to 1000 [ 644.090895][ T5604] Bluetooth: hci7: command tx timeout [ 648.284825][T12019] lo speed is unknown, defaulting to 1000 [ 648.668212][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 654.757939][T11891] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 654.811117][T11891] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 655.076548][T11891] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 655.094897][T11891] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 655.104614][T11891] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 657.210844][ T5604] Bluetooth: hci8: command tx timeout [ 657.836947][ T5604] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 657.895658][ T5604] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 657.927420][ T5604] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 657.953274][ T5604] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 658.241040][ T5604] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 659.290750][ T5604] Bluetooth: hci8: command tx timeout [ 661.083207][ T5604] Bluetooth: hci9: command tx timeout [ 661.370715][T11891] Bluetooth: hci8: command tx timeout [ 663.138825][T11891] Bluetooth: hci9: command tx timeout [ 663.450834][T11891] Bluetooth: hci8: command tx timeout [ 665.210847][T11891] Bluetooth: hci9: command tx timeout [ 667.330811][T11891] Bluetooth: hci9: command tx timeout [ 671.113603][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 671.698805][T12070] lo speed is unknown, defaulting to 1000 [ 673.894252][T11991] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.894431][T11991] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.894750][T11991] bridge_slave_0: entered allmulticast mode [ 673.906620][T11991] bridge_slave_0: entered promiscuous mode [ 674.252097][T12077] lo speed is unknown, defaulting to 1000 [ 674.960551][T11991] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.960704][T11991] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.960993][T11991] bridge_slave_1: entered allmulticast mode [ 675.002154][T11991] bridge_slave_1: entered promiscuous mode [ 677.526978][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.527110][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.528157][T11998] bridge_slave_0: entered allmulticast mode [ 677.575017][T11998] bridge_slave_0: entered promiscuous mode [ 677.770481][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.828370][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.832622][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.990466][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 678.000462][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 678.550030][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.550224][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.550477][T11998] bridge_slave_1: entered allmulticast mode [ 678.591162][T11998] bridge_slave_1: entered promiscuous mode [ 680.410758][T11891] Bluetooth: hci1: command tx timeout [ 682.560721][ T5604] Bluetooth: hci1: command tx timeout [ 682.971608][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 684.570745][T11891] Bluetooth: hci1: command tx timeout [ 686.022619][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.022684][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.180665][T11891] Bluetooth: hci1: command tx timeout [ 688.090820][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 688.741960][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 688.798162][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 688.841616][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 688.845168][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 688.879907][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.981811][ T5604] Bluetooth: hci0: command tx timeout [ 692.316701][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.319947][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.320308][T12019] bridge_slave_0: entered allmulticast mode [ 692.445954][T12019] bridge_slave_0: entered promiscuous mode [ 692.682983][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.683110][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.683440][T12019] bridge_slave_1: entered allmulticast mode [ 692.752709][T12019] bridge_slave_1: entered promiscuous mode [ 693.050851][ T5604] Bluetooth: hci0: command tx timeout [ 695.140770][ T5604] Bluetooth: hci0: command tx timeout [ 696.684509][ T68] kworker/u8:5 (68) used greatest stack depth: 17016 bytes left [ 697.220735][ T5604] Bluetooth: hci0: command tx timeout [ 697.577295][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 697.743048][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.745698][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.749340][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.791003][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.568445][T12126] lo speed is unknown, defaulting to 1000 [ 699.218607][T12137] lo speed is unknown, defaulting to 1000 [ 699.850907][ T5604] Bluetooth: hci5: command tx timeout [ 700.765781][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 701.979163][ T59] Bluetooth: hci5: command tx timeout [ 703.450704][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 704.146448][T11891] Bluetooth: hci5: command tx timeout [ 706.170697][ T5604] Bluetooth: hci5: command tx timeout [ 717.179499][T12171] lo speed is unknown, defaulting to 1000 [ 718.148126][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 718.201196][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 718.217824][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 718.227498][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 718.259776][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 719.625858][ T5604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 719.813075][ T5604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 719.815724][ T5604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 719.847015][ T5604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 719.897181][ T5604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 720.340752][ T59] Bluetooth: hci6: command tx timeout [ 722.090938][ T59] Bluetooth: hci7: command tx timeout [ 722.420832][ T59] Bluetooth: hci6: command tx timeout [ 724.188746][ T59] Bluetooth: hci7: command tx timeout [ 724.514095][ T59] Bluetooth: hci6: command tx timeout [ 724.620105][ T38] INFO: task syz.2.1997:11855 blocked for more than 143 seconds. [ 724.620149][ T38] Tainted: G L syzkaller #0 [ 724.620162][ T38] Blocked by coredump. [ 724.620168][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.620179][ T38] task:syz.2.1997 state:D stack:25752 pid:11855 tgid:11852 ppid:5599 task_flags:0x40054c flags:0x00080001 [ 724.620255][ T38] Call Trace: [ 724.620264][ T38] [ 724.620280][ T38] __schedule+0x16dc/0x5500 [ 724.620347][ T38] ? __pfx___schedule+0x10/0x10 [ 724.620391][ T38] rt_mutex_schedule+0x76/0xf0 [ 724.620517][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 724.694961][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 724.695006][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 724.695032][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 724.695068][ [ 724.695068][ T38] ? rcu_barrier+0x4c/0x530 [ 724.695318][ T38] ? rcu_barrier+0x4c/0x530 [ 724.695404][ T38] ? rcu_barrier+0x4c/0x530 [ 724.695482][ T38] mutex_lock_nested+0x168/0x1d0 [ 724.695538][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 724.695619][ T38] rcu_barrier+0x4c/0x530 [ 724.695727][ T38] netdev_run_todo+0x2ff/0x10d0 [ 724.695842][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 724.695962][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 724.696031][ T38] ? __pfx___free_frozen_pages+0x10/0x10 [ 724.696201][ T38] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 724.696339][ T38] ? netdev_state_change+0x1bc/0x210 [ 724.696452][ T38] tun_chr_close+0x13f/0x1c0 [ 724.696601][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 724.696678][ T38] __fput+0x42a/0xa80 [ 724.696798][ T38] task_work_run+0x1d9/0x270 [ 724.696898][ T38] ? __pfx_task_work_run+0x10/0x10 [ 724.696985][ T38] ? do_exit+0x735/0x2360 [ 724.697126][ T38] ? kmem_cache_free+0x187/0x6c0 [ 724.697205][ T38] ? put_net+0x191/0x260 [ 724.697298][ T38] ? do_exit+0x735/0x2360 [ 724.697434][ T38] do_exit+0x73a/0x2360 [ 724.697517][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.697598][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.697699][ T38] ? __pfx_do_exit+0x10/0x10 [ 724.697775][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 724.697838][ T38] ? rt_spin_lock+0x1e0/0x400 [ 724.697941][ T38] ? rt_spin_unlock+0x157/0x200 [ 724.698048][ T38] do_group_exit+0x22d/0x2f0 [ 724.698140][ T38] ? rt_spin_unlock+0x163/0x200 [ 724.698233][ T38] get_signal+0x121b/0x12c0 [ 724.698391][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 724.698489][ T38] ? __pfx_task_work_add+0x10/0x10 [ 724.698582][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 724.698654][ T38] ? __fput_deferred+0x253/0x3e0 [ 724.698700][ T38] exit_to_user_mode_loop+0x104/0x730 [ 724.698817][ T38] ? rcu_is_watching+0x15/0xb0 [ 724.698896][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.698994][ T38] do_syscall_64+0x353/0x580 [ 724.699100][ T38] ? trace_irq_disable+0x3b/0x140 [ 724.699255][ T38] ? clear_bhb_loop+0x40/0x90 [ 724.699338][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.699405][ T38] RIP: 0033:0x7fcaba2ede59 [ 724.699469][ T38] RSP: 002b:00007fcab8546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.699562][ T38] RAX: 0000000000000000 RBX: 00007fcaba575fa0 RCX: 00007fcaba2ede59 [ 724.699601][ T38] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 724.699641][ T38] RBP: 00007fcaba383e6f R08: 0000000000000000 R09: 0000000000000000 [ 724.699672][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.699710][ T38] R13: 00007fcaba576038 R14: 00007fcaba575fa0 R15: 00007ffc43389d78 [ 724.699776][ T38] [ 724.699937][ T38] [ 724.699937][ T38] Showing all locks held in the system: [ 724.699966][ T38] 4 locks held by pr/legacy/17: [ 724.700039][ T38] 4 locks held by rcuc/1/28: [ 724.700069][ T38] 4 locks held by ksoftirqd/1/30: [ 724.700108][ T38] 1 lock held by khungtaskd/38: [ 724.700120][ T38] #0: ffffffff8e1c2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 724.700341][ T38] 3 locks held by kworker/u8:8/1027: [ 724.700381][ T38] 9 locks held by kworker/u8:10/1181: [ 724.700410][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 724.710609][ T38] #1: ffffc9000654fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 724.710673][ T38] #2: ffff888025a6c310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 724.710884][ T38] #3: ffff88806024cd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 724.711033][ T38] #4: ffffffff8e1c2fc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 724.711168][ T38] #5: ffffffff8e1c2fc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 724.711371][ T38] #6: ffffffff8e1c2fc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 724.711523][ T38] #7: ffffffff8e1c2fc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 724.711750][ T38] #8: ffff88801e6a9b58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 724.711961][ T38] 2 locks held by getty/5350: [ 724.712005][ T38] #0: ffff888021b650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 724.712273][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 724.712463][ T38] 3 locks held by sshd-session/5582: [ 724.712496][ T38] 1 lock held by syz-executor/5583: [ 724.712555][ T38] 4 locks held by kworker/u8:15/6203: [ 724.712586][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 724.712737][ T38] #1: ffffc90006bdfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 724.712874][ T38] #2: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 724.713036][ T38] #3: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.713191][ T38] 7 locks held by kworker/u8:18/6206: [ 724.713240][ T38] 6 locks held by kworker/u8:20/10510: [ 724.713279][ T38] 7 locks held by kworker/u8:22/10512: [ 724.713332][ T38] 5 locks held by kworker/u8:40/11164: [ 724.713364][ T38] 7 locks held by kworker/u8:46/11173: [ 724.713395][ T38] 3 locks held by kworker/u8:51/11180: [ 724.713426][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 724.713570][ T38] #1: ffffc9000152fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 724.713714][ T38] #2: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 724.713900][ T38] 1 lock held by syz-executor/11817: [ 724.713933][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.714031][ T38] 1 lock held by syz-executor/11851: [ 724.714079][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.714247][ T38] 1 lock held by syz.2.1997/11855: [ 724.714279][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.714447][ T38] 1 lock held by syz-executor/11887: [ 724.714478][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.714640][ T38] 1 lock held by syz-executor/11888: [ 724.714671][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.714822][ T38] 2 locks held by syz-executor/11931: [ 724.714854][ T38] #0: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 724.715001][ T38] #1: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.715157][ T38] 2 locks held by syz-executor/11943: [ 724.715189][ T38] #0: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 724.715344][ T38] #1: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.715450][ T38] 2 locks held by syz-executor/11960: [ 724.715483][ T38] #0: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 724.719552][ T38] #1: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.719750][ T38] 1 lock held by syz-executor/11979: [ 724.719784][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.719933][ T38] 1 lock held by syz-executor/11981: [ 724.719966][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.720114][ T38] 1 lock held by syz-executor/11991: [ 724.720145][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.720315][ T38] 1 lock held by syz-executor/11998: [ 724.720347][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.720498][ T38] 1 lock held by syz-executor/12019: [ 724.720529][ T38] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 724.720874][ T38] 1 lock held by syz-executor/12070: [ 724.720905][ T38] #0: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 724.721061][ T38] 1 lock held by syz-executor/12077: [ 724.721095][ T38] #0: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 724.724701][ T38] 1 lock held by syz-executor/12126: [ 724.724716][ T38] #0: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 724.724853][ T38] 2 locks held by syz-executor/12137: [ 724.724867][ T38] #0: ffffffff8faf94f8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 724.724931][ T38] #1: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 724.724989][ T38] 2 locks held by syz-executor/12171: [ 724.725002][ T38] #0: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 724.725056][ T38] #1: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 724.725106][ T38] 1 lock held by syz-executor/12202: [ 724.725120][ T38] #0: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 724.725182][ T38] 1 lock held by syz-executor/12208: [ 724.725195][ T38] #0: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 724.725308][ T38] 4 locks held by sed/12225: [ 724.725323][ T38] [ 724.725328][ T38] ============================================= [ 724.725328][ T38] [ 724.725345][ T38] NMI backtrace for cpu 0 [ 724.725371][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 724.725400][ T38] Tainted: [L]=SOFTLOCKUP [ 724.725408][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.725421][ T38] Call Trace: [ 724.725430][ T38] [ 724.725438][ T38] dump_stack_lvl+0xe8/0x150 [ 724.725475][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 724.725532][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 724.725627][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 724.725656][ T38] sys_info+0x135/0x170 [ 724.725677][ T38] watchdog+0xfd7/0x1030 [ 724.725774][ T38] ? watchdog+0x1c7/0x1030 [ 724.725825][ T38] kthread+0x388/0x470 [ 724.725857][ T38] ? __pfx_watchdog+0x10/0x10 [ 724.725887][ T38] ? __pfx_kthread+0x10/0x10 [ 724.725919][ T38] ret_from_fork+0x514/0xb70 [ 724.725955][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 724.725988][ T38] ? __switch_to+0xc89/0x1420 [ 724.726017][ T38] ? __pfx_kthread+0x10/0x10 [ 724.726050][ T38] ret_from_fork_asm+0x1a/0x30 [ 724.726087][ T38] [ 724.726101][ T38] Sending NMI from CPU 0 to CPUs 1: [ 724.726132][ C1] NMI backtrace for cpu 1 [ 724.726154][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 724.726179][ C1] Tainted: [L]=SOFTLOCKUP [ 724.726185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.726196][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 724.726278][ C1] Code: af 8d 48 89 de e8 f0 c6 f8 fe 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 8f e5 ff ff 66 66 66 66 66 [ 724.726295][ C1] RSP: 0018:ffffc90000167bf8 EFLAGS: 00000246 [ 724.726310][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801cea5d00 [ 724.726322][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8faf72f0 [ 724.726333][ C1] RBP: ffffc90000167d10 R08: 0000000000000000 R09: 0000000000000000 [ 724.726344][ C1] R10: 0000000000008000 R11: ffffffff8e09ca78 R12: 0000000000000000 [ 724.726356][ C1] R13: 0000000000000016 R14: 1ffffffff1d57295 R15: ffffffff8eab9460 [ 724.726369][ C1] FS: 0000000000000000(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 724.726384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 724.726395][ C1] CR2: 00007f88312d7e20 CR3: 000000002932a000 CR4: 00000000003526f0 [ 724.726411][ C1] Call Trace: [ 724.726417][ C1] [ 724.726423][ C1] console_flush_one_record+0x36d/0xb50 [ 724.726499][ C1] ? console_flush_one_record+0xfa/0xb50 [ 724.726527][ C1] ? legacy_kthread_func+0x1a3/0x250 [ 724.726554][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 724.726584][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 724.726612][ C1] legacy_kthread_func+0x1b6/0x250 [ 724.726640][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 724.726667][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 724.726711][ C1] ? __kthread_parkme+0x71/0x1f0 [ 724.726740][ C1] ? __kthread_parkme+0x196/0x1f0 [ 724.726765][ C1] kthread+0x388/0x470 [ 724.726790][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 724.726816][ C1] ? __pfx_kthread+0x10/0x10 [ 724.726840][ C1] ret_from_fork+0x514/0xb70 [ 724.726868][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 724.726893][ C1] ? __switch_to+0xc89/0x1420 [ 724.726916][ C1] ? __pfx_kthread+0x10/0x10 [ 724.726942][ C1] ret_from_fork_asm+0x1a/0x30 [ 724.726969][ C1] [ 724.727148][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 724.727211][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 724.727289][ T38] Tainted: [L]=SOFTLOCKUP [ 724.727309][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.727343][ T38] Call Trace: [ 724.727364][ T38] [ 724.727385][ T38] vpanic+0x56c/0xa60 [ 724.727446][ T38] ? trace_irq_disable+0x3b/0x140 [ 724.727524][ T38] ? __pfx_vpanic+0x10/0x10 [ 724.727555][ T38] panic+0xc5/0xd0 [ 724.727574][ T38] ? __pfx_panic+0x10/0x10 [ 724.727597][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 724.727620][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 724.727650][ T38] watchdog+0x1030/0x1030 [ 724.727689][ T38] ? watchdog+0x1c7/0x1030 [ 724.727732][ T38] kthread+0x388/0x470 [ 724.727763][ T38] ? __pfx_watchdog+0x10/0x10 [ 724.727793][ T38] ? __pfx_kthread+0x10/0x10 [ 724.727826][ T38] ret_from_fork+0x514/0xb70 [ 724.727862][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 724.727895][ T38] ? __switch_to+0xc89/0x1420 [ 724.727926][ T38] ? __pfx_kthread+0x10/0x10 [ 724.727959][ T38] ret_from_fork_asm+0x1a/0x30 [ 724.727996][ T38] [ 724.728604][ T38] Kernel Offset: disabled