last executing test programs: 17.385706446s ago: executing program 3 (id=6053): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000002c0)) 17.236600985s ago: executing program 3 (id=6057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x1, 0x5, 0x5, 0x7}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 16.940361705s ago: executing program 3 (id=6062): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.795470942s ago: executing program 3 (id=6064): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0xda, 0x4) 16.673099602s ago: executing program 3 (id=6066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000001700)=[{&(0x7f0000001780)=""/90, 0x5a}], 0x1, 0x3, 0x3, 0x3b) 16.448474305s ago: executing program 3 (id=6068): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sync() 10.371456735s ago: executing program 0 (id=6180): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000000000000030000930100000003000000b70b0000ffffff7f04000000050001000500000004000000010000000101000000615f5f2e"], 0x0, 0x4e, 0x0, 0x1, 0x3}, 0x28) 10.288491698s ago: executing program 0 (id=6181): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7.533282989s ago: executing program 2 (id=6213): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) write$tcp_mem(r0, &(0x7f0000000080)={0x0, 0x2d, 0x8000, 0x2c, 0x9, 0x2c}, 0x48) 7.502410686s ago: executing program 4 (id=6214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='net/unix\x00') pread64(r0, &(0x7f0000000300)=""/227, 0xe3, 0x0) 7.36141846s ago: executing program 4 (id=6215): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.360977364s ago: executing program 2 (id=6216): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.232694258s ago: executing program 4 (id=6217): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x39, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb01e2217fa30186dd6002adf700303a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 7.232319371s ago: executing program 2 (id=6218): r0 = msgget$private(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf", 0xcb}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c000200000008000100010000d1"], 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000100)=""/95) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080003400000001208000140000000000900010073797a30"], 0xc4}}, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0xb5, 0x0, 0x200, 0x0, @remote, @private0, 0x20, 0x8000, 0x7}}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000680)={{0x2, 0x4e23, @loopback}, {0x306, @broadcast}, 0x42, {0x2, 0x4e22, @multicast2}, 'erspan0\x00'}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/164, 0xa4}], 0x2, 0x3, 0xe, 0x8) syz_usb_connect(0x4, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0xc6, 0xc1, 0xc5, 0x10, 0x1ae7, 0x2001, 0xcdad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa9, 0xd, 0x80, 0x8, "", [{{0x9, 0x4, 0xc9, 0xa, 0x0, 0xdd, 0x2e, 0x36, 0x2c}}]}}]}}, 0x0) read$char_usb(r8, &(0x7f00000001c0)=""/238, 0xee) syz_usb_ep_write(r6, 0x81, 0xd, &(0x7f00000002c0)="28d36689fb2134111f63db24e2") ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x2d, 0x7, 0xfff}]}) 7.232014643s ago: executing program 1 (id=6219): sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$packet(0x11, 0x2, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 7.09451143s ago: executing program 4 (id=6220): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6.107124966s ago: executing program 1 (id=6221): r0 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e00000"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000008c10b400000100009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 5.896287197s ago: executing program 4 (id=6222): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x81000e86) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000440)=0xffffff53) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000280)='./bus\x00', 0x8100040f) mkdirat(r5, &(0x7f0000000200)='./bus\x00', 0x41) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = gettid() r8 = syz_open_procfs(r7, 0x0) write$binfmt_format(r8, &(0x7f0000000180)='1\x00', 0x2) open_by_handle_at(r1, 0x0, 0xe068aa59e396af9a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e5a6185991eeae30e0100000fcffffff2500feff0000000085100000faffffff9700000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a959, 0x80, 0x2ef, 0x7ff, 0x100, 0x1, 0xfffffffb}) 4.525765568s ago: executing program 4 (id=6223): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x105d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x65, 0x10, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x6, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0x8, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xff, 0x8, {0x8, 0x25, 0x1, 0x82, 0x0, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x2, 0x1, {0x8, 0x25, 0x1, 0x2, 0x0, 0xd}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x1414, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8) 4.355593341s ago: executing program 1 (id=6224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x2, 0x8ec2, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x20, 0x3, 0x6, [{@rand_addr=0x64010102, 0x7}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x3, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf2f}]}, @noop, @cipso={0x86, 0x22, 0x1, [{0x2, 0x8, "09e9827f02c3"}, {0x5, 0xf, "51581cb1be76d19782873b2579"}, {0x5, 0x5, "26ed19"}]}, @cipso={0x86, 0x19, 0x1, [{0x5, 0x9, "4c8e4cc4c5b16c"}, {0x2, 0x7, "b46b123e4e"}, {0x7, 0x3, "81"}]}, @rr={0x7, 0x17, 0x15, [@loopback, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000480)={'tunl0\x00', r9, 0x1, 0x7, 0x8, 0x5, {{0xd, 0x4, 0x1, 0x3a, 0x34, 0x68, 0x0, 0xfd, 0x4, 0x0, @private=0xa010100, @multicast2, {[@generic={0x88, 0xc, "4c1dd6cf69ed7778b01b"}, @ra={0x94, 0x4, 0x1}, @generic={0xce, 0x10, "d3db41b18958f9301f8a20059933"}]}}}}}) socket$kcm(0xa, 0x3, 0x3a) 3.687741385s ago: executing program 2 (id=6225): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) ftruncate(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x80800) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0xfffffff0}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000000)={0x1, 0x6}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf5000905", @ANYRES64], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)=',\x00', 0x800, &(0x7f00000002c0)={@align, {0xc, 0x2, 0x101, 0x2}}, 0x8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x2}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000080)="4ac1f8ba6ee806d39e64c7ad529c79dd88ac8c46d6119545f347c99449e8f339991af887b6229a9ee9ae6ab478e139127b82f04f0c2f6b8e62d281a267153a31455544ecc76318a5d06e7346227fe52922aba0dd7bc0d4c86f301c2ebd5e6cb2e7edef2537c8f62ce178650220cf78c69e68290505052224014196c30ee23c6d4e64e81a4d8986b887937ad374242310d69984af5f1d179a84571021533d664dc77a0d934de0a7bf66f5e9823530392888bdd3f7fd6268b1d0471898427f8d0f4e045a6352eecdb7f7405fda13766b348074072cf670f53eb9aa5d9282e6872187873283656eeffbe02eb87d0fa3573cb7bb59be", &(0x7f0000000000)=""/48, &(0x7f0000000180), &(0x7f00000001c0)="4d5abd9cdf4ef61cb14592fd095dcdd724b4937375d567f6a4af5ddafe00252dcca37f7742cfda9dcb0ea29f4ccde2209f7f4b81aac16c9328c1fc25ed7ca24ac4d5fdf308337b978f7e9df921392ea66a36142b0484fae11d325a908e99513c87cae6a450e287621c83cf572e5fa2b3477fb8895a71b9ee2fa28690c2d479599f81f5eb173133b64dc3517c8ee142a0b9df5cbd00e714df7c8ec3dc07cc7585d8896066aa270a6e3b866c85708f9b71a253707e", 0x2, r5, 0x4}, 0x38) 3.350061504s ago: executing program 1 (id=6226): r0 = socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000013c0)={0x200f, {"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", 0x1000}}, 0x1006) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f00000001c0)=@generic={0x21, "a55af77ad69971d0a003fe4bbd194cc3b3b3560cef525960e62b0acf70b92c473e78a3e9cd91e02962f47e286706451bdef00303f2bc562faa3d3df10a690b7369651881922b88ea0bbdbcdc82c2ede3d13ac4d50b811598624e57f24e7ef41c234f5c58f4bcc4f19ef79dfc00ee6e874ecffcd8acec1d6eae34b6e02776"}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10b8}, 0x20000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @broadcast}], 0x10) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$proc_mixer(r7, 0x0, 0xbb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00'}) 2.600079355s ago: executing program 0 (id=6184): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x4, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000400}}]}}]}, 0x58}}, 0x44080) 2.355757097s ago: executing program 0 (id=6227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000001) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0xf00}) 1.792773191s ago: executing program 1 (id=6228): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x0, 0x2}, 0x18, 0x2) landlock_restrict_self(r0, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) move_mount(r1, 0x0, r1, 0x0, 0x245) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r6, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0xe, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xab851, r8, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r10, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r10, 0x0, 0x4, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fbdbdf250900020073797a300000000008004100737f770014003300767863616e31"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRES8=r4, @ANYRES32=r7], 0x0) 1.527216547s ago: executing program 2 (id=6229): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000040085000000a1c74e8a950000129d0000000400224ab096d0e0ebba5a556ae8f3285e9036aa05199b88ea1995c27909a90dd5bced5ff1b7ea3cdf0241cc68ca69d8387c51e2a761d6acdf3d0e504fc34e37f193734374fece9dc98914a1dd3c52a86ea7fc58152ad08fe4e0038cd1e9708f0661b2fb5380fee8c6d3308081b17beb44e42418bd26290e0d461146714d06ce4ad4a4e2850da712f4dd6c175a900d5dba58a346a788e367f81ce264b7cbff823557284bac5b52dc013985d294d4"], 0x0, 0x11, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000000), 0xffffff98) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r1, 0x9) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.121595637s ago: executing program 0 (id=6230): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x8c, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0xc801) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x3, r5}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0) 147.950899ms ago: executing program 0 (id=6231): syz_io_uring_setup(0x46, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x3, 0x4000001b}, &(0x7f0000000100), &(0x7f00000000c0)) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x88, 0xda, 0x40000003, 0x8, 0x57519beb}, 0x4f, 0x100) 119.852963ms ago: executing program 32 (id=6068): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sync() 19.837872ms ago: executing program 2 (id=6233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000980)=""/106, 0x6a}], 0x1}, 0x3}], 0x1, 0xc0032032, 0x0) sendmmsg$alg(r3, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="81", 0x1}, {&(0x7f00000033c0)="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", 0x1ea}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124}, {&(0x7f00000006c0)=""/128}, {&(0x7f0000000740)=""/105}, {&(0x7f00000007c0)=""/16}, {&(0x7f0000000800)=""/4}], 0x17f}, 0x102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=6234): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="55544f4661848c20dfdbd28891f4", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x16, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @ldst={0x3, 0x1, 0x6, 0x4, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x5, 0x6, 0xa, 0x40, 0xfffffffffffffff0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000280)='syzkaller\x00', 0x8000, 0x31, &(0x7f0000000340)=""/49, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x2, 0x3, 0x8}], 0x10, 0xfffffffd}, 0x94) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2031240000001818b968f9ea0c719e08fc379c87288e84026f39c8226a6bee733065adfd8b824ebe0085"], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 7271 comm="syz.4.5765" path="/527" dev="tmpfs" ino=2815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1829.072149][T27298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1829.368104][T17681] net_ratelimit: 59 callbacks suppressed [ 1829.368124][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1829.412758][T25100] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1829.413657][ T1150] bond1: (slave bridge2): failed to get link speed/duplex [ 1829.682091][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1829.712783][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 1829.824207][T17681] bond1: (slave bridge2): failed to get link speed/duplex [ 1829.825284][T25100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.862573][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1829.951705][T25100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1829.962885][T17681] bond1: (slave bridge2): failed to get link speed/duplex [ 1829.983545][ T1150] bond2: (slave bridge3): failed to get link speed/duplex [ 1829.990753][T25100] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1829.990780][T25100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.003789][T25100] usb 3-1: config 0 descriptor?? [ 1830.312779][T17681] bond1: (slave bridge2): failed to get link speed/duplex [ 1830.355139][T25100] usbhid 3-1:0.0: can't add hid device: -71 [ 1830.361122][T25100] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1830.389696][T25100] usb 3-1: USB disconnect, device number 20 [ 1830.402679][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1831.062525][T25100] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1832.017452][T25100] usb 3-1: Using ep0 maxpacket: 32 [ 1832.029017][T25100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.042794][T25100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1832.054221][T25100] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1832.064132][T25100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.091029][T25100] usb 3-1: config 0 descriptor?? [ 1832.099590][T25100] usb 3-1: can't set config #0, error -71 [ 1832.146711][T25100] usb 3-1: USB disconnect, device number 21 [ 1832.162450][T20045] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1832.281717][T27345] netlink: 'syz.2.5780': attribute type 1 has an invalid length. [ 1832.322838][T27345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1832.333365][T27345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1832.393885][T20045] usb 2-1: Using ep0 maxpacket: 8 [ 1832.400405][T20045] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1832.413379][T20045] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1832.425488][T20045] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1832.434404][T20045] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1832.448546][T20045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1832.461296][T20045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1832.475788][T27348] netlink: 'syz.0.5781': attribute type 1 has an invalid length. [ 1832.487285][T20045] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1832.497151][T20045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.505464][T20045] usb 2-1: Product: syz [ 1832.511878][T20045] usb 2-1: Manufacturer: syz [ 1832.521763][T20045] usb 2-1: SerialNumber: syz [ 1832.538388][T20045] usb 2-1: config 0 descriptor?? [ 1832.554900][T27331] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1832.562908][T27350] bond4: (slave geneve2): making interface the new active one [ 1832.570987][T20045] hub 2-1:0.0: bad descriptor, ignoring hub [ 1832.577778][T27350] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1832.586656][T20045] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1832.598095][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1832.607199][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1832.617963][T20045] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input84 [ 1832.639333][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1832.670894][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1832.843966][T20705] usb 2-1: USB disconnect, device number 45 [ 1833.655477][T27343] Bluetooth: hci4: command 0x0406 tx timeout [ 1833.864122][T19386] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1834.140259][T19386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.202840][T19386] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1834.236161][T19386] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1834.256315][T19386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.256727][T27374] FAULT_INJECTION: forcing a failure. [ 1834.256727][T27374] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.278637][T27374] CPU: 1 UID: 0 PID: 27374 Comm: syz.2.5788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1834.278667][T27374] Tainted: [L]=SOFTLOCKUP [ 1834.278672][T27374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1834.278681][T27374] Call Trace: [ 1834.278686][T27374] [ 1834.278693][T27374] dump_stack_lvl+0x100/0x190 [ 1834.278741][T27374] should_fail_ex.cold+0x5/0xa [ 1834.278764][T27374] ? vhost_dev_set_owner+0x190/0xa30 [ 1834.278786][T27374] should_failslab+0xc2/0x120 [ 1834.278804][T27374] __kmalloc_noprof+0xe0/0x850 [ 1834.278833][T27374] vhost_dev_set_owner+0x190/0xa30 [ 1834.278865][T27374] vhost_dev_ioctl+0x521/0xe20 [ 1834.278889][T27374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1834.278918][T27374] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 1834.278946][T27374] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1834.278983][T27374] vhost_vsock_dev_ioctl+0x320/0xb60 [ 1834.279009][T27374] ? hook_file_ioctl_common+0x146/0x410 [ 1834.279038][T27374] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1834.279069][T27374] ? selinux_file_ioctl+0xb4/0x290 [ 1834.279095][T27374] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1834.279130][T27374] __x64_sys_ioctl+0x18e/0x210 [ 1834.279157][T27374] do_syscall_64+0x106/0xf80 [ 1834.279176][T27374] ? clear_bhb_loop+0x40/0x90 [ 1834.279198][T27374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.279216][T27374] RIP: 0033:0x7f5da0b9c799 [ 1834.279232][T27374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.279250][T27374] RSP: 002b:00007f5da19ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.279268][T27374] RAX: ffffffffffffffda RBX: 00007f5da0e15fa0 RCX: 00007f5da0b9c799 [ 1834.279288][T27374] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 1834.279299][T27374] RBP: 00007f5da19ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.279309][T27374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1834.279320][T27374] R13: 00007f5da0e16038 R14: 00007f5da0e15fa0 R15: 00007ffd50d53988 [ 1834.279345][T27374] [ 1834.290794][T19386] usb 5-1: config 0 descriptor?? [ 1834.294824][T11411] Bluetooth: hci1: command 0x0406 tx timeout [ 1834.504414][T13402] net_ratelimit: 52 callbacks suppressed [ 1834.504426][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1834.683288][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1834.857056][T27356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.203806][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1835.223570][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.234562][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1835.259666][T27356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.270208][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.284436][T27356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.308085][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.328800][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1835.469759][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1835.539938][T27393] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1835.561785][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.579516][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1835.862441][T20045] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1835.881060][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.892707][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1835.900423][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.919614][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.945486][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.961664][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.975985][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1835.992504][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1836.001495][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1836.008499][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1836.027134][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1836.046138][T19386] kye 0003:0458:0138.001F: unknown main item tag 0x0 [ 1836.066521][T20045] usb 2-1: Using ep0 maxpacket: 8 [ 1836.208494][T19386] kye 0003:0458:0138.001F: reserved main item tag 0xd [ 1836.210224][T20045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1836.232080][T20045] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1836.266500][T20045] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1836.282436][T19386] kye 0003:0458:0138.001F: unexpected long global item [ 1836.282576][T20045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.302528][T20045] usb 2-1: Product: syz [ 1836.307926][T20045] usb 2-1: Manufacturer: syz [ 1836.308297][T19386] kye 0003:0458:0138.001F: parse failed [ 1836.312911][T20045] usb 2-1: SerialNumber: syz [ 1836.359855][T19386] kye 0003:0458:0138.001F: probe with driver kye failed with error -22 [ 1836.400617][T20045] usb 2-1: config 0 descriptor?? [ 1836.438328][T19386] usb 5-1: USB disconnect, device number 43 [ 1836.708276][T27388] netlink: 'syz.1.5792': attribute type 1 has an invalid length. [ 1836.824866][T20045] usb 2-1: USB disconnect, device number 46 [ 1837.084180][T26713] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1837.522474][T26713] usb 5-1: Using ep0 maxpacket: 16 [ 1837.541762][T26713] usb 5-1: config 253 has an invalid interface number: 184 but max is 0 [ 1837.554409][T26713] usb 5-1: config 253 has no interface number 0 [ 1837.568924][T26713] usb 5-1: config 253 interface 184 has no altsetting 0 [ 1837.587783][T26713] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1837.598005][T26713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.606203][T26713] usb 5-1: Product: syz [ 1837.610529][T26713] usb 5-1: Manufacturer: syz [ 1837.615421][T26713] usb 5-1: SerialNumber: syz [ 1837.630873][T26713] go7007 5-1:253.184: probe with driver go7007 failed with error -12 [ 1838.082716][T27431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1838.690028][T27439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1839.021228][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.030454][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.039590][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.057232][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.074106][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.095256][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.127931][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.175339][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.177737][ T24] usb 5-1: USB disconnect, device number 44 [ 1839.216712][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.243303][T27453] FAULT_INJECTION: forcing a failure. [ 1839.243303][T27453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.372743][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1839.390866][T27453] CPU: 1 UID: 0 PID: 27453 Comm: syz.3.5811 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.390895][T27453] Tainted: [L]=SOFTLOCKUP [ 1839.390901][T27453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1839.390912][T27453] Call Trace: [ 1839.390919][T27453] [ 1839.390926][T27453] dump_stack_lvl+0x100/0x190 [ 1839.390960][T27453] should_fail_ex.cold+0x5/0xa [ 1839.390983][T27453] _copy_from_iter+0x1f4/0x1690 [ 1839.391006][T27453] ? __asan_memset+0x23/0x50 [ 1839.391031][T27453] ? __pfx__copy_from_iter+0x10/0x10 [ 1839.391049][T27453] ? __pfx___alloc_skb+0x10/0x10 [ 1839.391080][T27453] netlink_sendmsg+0x808/0xda0 [ 1839.391111][T27453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.391134][T27453] ? __might_fault+0xc0/0x140 [ 1839.391168][T27453] ____sys_sendmsg+0x9e1/0xb70 [ 1839.391194][T27453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.391220][T27453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1839.391259][T27453] ___sys_sendmsg+0x190/0x1e0 [ 1839.391288][T27453] ? __pfx____sys_sendmsg+0x10/0x10 [ 1839.391346][T27453] __sys_sendmsg+0x170/0x220 [ 1839.391368][T27453] ? __pfx___sys_sendmsg+0x10/0x10 [ 1839.391407][T27453] do_syscall_64+0x106/0xf80 [ 1839.391428][T27453] ? clear_bhb_loop+0x40/0x90 [ 1839.391450][T27453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.391468][T27453] RIP: 0033:0x7fb086f9c799 [ 1839.391484][T27453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.391501][T27453] RSP: 002b:00007fb087da5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.391518][T27453] RAX: ffffffffffffffda RBX: 00007fb087215fa0 RCX: 00007fb086f9c799 [ 1839.391530][T27453] RDX: 0000000000020000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1839.391541][T27453] RBP: 00007fb087da5090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.391552][T27453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.391562][T27453] R13: 00007fb087216038 R14: 00007fb087215fa0 R15: 00007ffdb22c4238 [ 1839.391586][T27453] [ 1840.061191][T13398] net_ratelimit: 37 callbacks suppressed [ 1840.061210][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1840.093037][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1840.189202][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1840.210583][T25100] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1840.218202][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 1840.285439][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1840.307466][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1840.349648][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1840.360446][T25100] usb 1-1: device descriptor read/64, error -71 [ 1840.424599][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1840.445576][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1840.452278][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1840.463116][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1840.477711][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1840.493071][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1840.504983][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.518200][ T24] usb 2-1: Product: syz [ 1840.523456][ T24] usb 2-1: Manufacturer: syz [ 1840.528192][ T24] usb 2-1: SerialNumber: syz [ 1840.535744][ T24] usb 2-1: config 0 descriptor?? [ 1840.638220][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1840.670351][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1840.702720][T25100] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1841.209626][T27461] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 1841.236578][ T24] usb 2-1: USB disconnect, device number 47 [ 1841.354204][T25100] usb 1-1: device descriptor read/64, error -71 [ 1841.652558][T25100] usb usb1-port1: attempt power cycle [ 1842.404557][ T29] audit: type=1400 audit(2000002715.970:1327): avc: denied { setattr } for pid=27478 comm="syz.2.5820" name="SCTPv6" dev="sockfs" ino=93625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1842.446862][T27486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1842.594497][T25100] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1842.675045][T25100] usb 1-1: device descriptor read/8, error -71 [ 1842.929867][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.565389][T27495] netlink: 'syz.2.5825': attribute type 11 has an invalid length. [ 1844.420136][T27510] __nla_validate_parse: 45 callbacks suppressed [ 1844.420168][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.436269][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.447220][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.488812][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.527225][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.542738][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.553934][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.570372][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.592209][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1844.605310][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5827'. [ 1845.597499][T13384] net_ratelimit: 44 callbacks suppressed [ 1845.597519][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1845.661064][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1845.756789][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1845.789898][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1845.849307][T27527] netlink: 'syz.3.5832': attribute type 1 has an invalid length. [ 1845.894726][T27527] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1845.912950][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1845.970713][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1846.113341][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1846.152028][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 1846.238020][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1846.278480][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1846.675621][T26713] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1846.835808][T26713] usb 5-1: Using ep0 maxpacket: 32 [ 1846.908161][T26713] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1846.916331][T26713] usb 5-1: config 0 has no interface number 0 [ 1846.930924][T26713] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1846.964380][T26713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.976180][T24649] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1847.026225][T26713] usb 5-1: Product: syz [ 1847.062947][T26713] usb 5-1: Manufacturer: syz [ 1847.093151][T26713] usb 5-1: SerialNumber: syz [ 1847.181606][T26713] usb 5-1: config 0 descriptor?? [ 1847.239779][T27549] nbd: socks must be embedded in a SOCK_ITEM attr [ 1847.248441][T26713] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1847.395539][T26713] usb 5-1: selecting invalid altsetting 1 [ 1847.490091][T26713] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1847.845668][T26713] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1848.057899][T26713] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1848.208305][T26713] usb 5-1: media controller created [ 1848.815921][T26713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1848.900510][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 210 seconds [ 1848.912377][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 210 seconds [ 1848.924800][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 210 seconds [ 1848.993478][T22044] udevd[22044]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1849.009312][T22193] udevd[22193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1849.021965][ T29] audit: type=1400 audit(2000002722.596:1328): avc: denied { map } for pid=27566 comm="syz.1.5842" path="socket:[93719]" dev="sockfs" ino=93719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1849.049156][T27567] binder: 27566:27567 ioctl c0306201 200000000080 returned -22 [ 1849.058538][T13398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1849.066457][T13398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1849.411684][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 210 seconds [ 1850.095740][T26713] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1850.108751][T26713] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1850.244931][T26713] usb 5-1: USB disconnect, device number 45 [ 1850.255657][T20045] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1850.502938][T20045] usb 2-1: Using ep0 maxpacket: 16 [ 1850.864870][T20045] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 1850.887748][T20045] usb 2-1: config 253 has no interface number 0 [ 1850.897148][T20045] usb 2-1: config 253 interface 184 has no altsetting 0 [ 1850.911871][T27584] __nla_validate_parse: 93 callbacks suppressed [ 1850.911881][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1850.932399][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1850.943668][T20045] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1850.953016][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1850.962604][T20045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.970809][T20045] usb 2-1: Product: syz [ 1850.975277][T20045] usb 2-1: Manufacturer: syz [ 1851.061611][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.071216][T20045] usb 2-1: SerialNumber: syz [ 1851.083619][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.099085][T20045] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 1851.174718][T27588] FAULT_INJECTION: forcing a failure. [ 1851.174718][T27588] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.189162][T27588] CPU: 1 UID: 0 PID: 27588 Comm: syz.2.5848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1851.189191][T27588] Tainted: [L]=SOFTLOCKUP [ 1851.189198][T27588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1851.189209][T27588] Call Trace: [ 1851.189215][T27588] [ 1851.189222][T27588] dump_stack_lvl+0x100/0x190 [ 1851.189257][T27588] should_fail_ex.cold+0x5/0xa [ 1851.189281][T27588] should_failslab+0xc2/0x120 [ 1851.189301][T27588] __kvmalloc_node_noprof+0xfa/0xa00 [ 1851.189326][T27588] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 1851.189351][T27588] ? lock_acquire+0x5e/0x380 [ 1851.189384][T27588] __nf_hook_entries_try_shrink+0x164/0x400 [ 1851.189415][T27588] __nf_unregister_net_hook+0x1d2/0x6a0 [ 1851.189443][T27588] nf_unregister_net_hooks+0x11b/0x170 [ 1851.189467][T27588] ? __pfx_connlimit_mt_destroy+0x10/0x10 [ 1851.189493][T27588] nf_ct_netns_do_put+0x168/0x2f0 [ 1851.189519][T27588] ? __pfx_connlimit_mt_destroy+0x10/0x10 [ 1851.189549][T27588] nf_ct_netns_put+0x39/0x90 [ 1851.189572][T27588] ? __pfx_xt_nat_destroy+0x10/0x10 [ 1851.189593][T27588] cleanup_entry+0x29c/0x3b0 [ 1851.189623][T27588] ? __pfx_cleanup_entry+0x10/0x10 [ 1851.189651][T27588] ? lockdep_hardirqs_on+0x78/0x100 [ 1851.189677][T27588] ? translate_table+0xb53/0x16c0 [ 1851.189701][T27588] ? kfree+0x1f6/0x6b0 [ 1851.189727][T27588] translate_table+0xcc8/0x16c0 [ 1851.189764][T27588] ? __pfx_translate_table+0x10/0x10 [ 1851.189798][T27588] do_ip6t_set_ctl+0x57c/0xba0 [ 1851.189823][T27588] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1851.189854][T27588] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1851.189883][T27588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1851.189922][T27588] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1851.189951][T27588] nf_setsockopt+0x8d/0xf0 [ 1851.189979][T27588] ipv6_setsockopt+0x135/0x170 [ 1851.190008][T27588] udpv6_setsockopt+0x7d/0xd0 [ 1851.190027][T27588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1851.190055][T27588] do_sock_setsockopt+0xf3/0x1d0 [ 1851.190083][T27588] __sys_setsockopt+0x195/0x220 [ 1851.190109][T27588] __x64_sys_setsockopt+0xbd/0x160 [ 1851.190128][T27588] ? do_syscall_64+0x95/0xf80 [ 1851.190150][T27588] ? lockdep_hardirqs_on+0x78/0x100 [ 1851.190172][T27588] do_syscall_64+0x106/0xf80 [ 1851.190193][T27588] ? clear_bhb_loop+0x40/0x90 [ 1851.190215][T27588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.190234][T27588] RIP: 0033:0x7f5da0b9c799 [ 1851.190250][T27588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.190267][T27588] RSP: 002b:00007f5da19ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1851.190286][T27588] RAX: ffffffffffffffda RBX: 00007f5da0e16180 RCX: 00007f5da0b9c799 [ 1851.190298][T27588] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 1851.190308][T27588] RBP: 00007f5da19ac090 R08: 0000000000000510 R09: 0000000000000000 [ 1851.190319][T27588] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000002 [ 1851.190330][T27588] R13: 00007f5da0e16218 R14: 00007f5da0e16180 R15: 00007ffd50d53988 [ 1851.190356][T27588] [ 1851.525089][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.545888][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.555861][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.577634][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.586783][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1851.602071][T13402] net_ratelimit: 66 callbacks suppressed [ 1851.602084][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1851.659127][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1851.736108][T20045] usb 2-1: USB disconnect, device number 48 [ 1851.775285][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1851.841607][T27599] netlink: 'syz.0.5850': attribute type 1 has an invalid length. [ 1851.939752][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1851.946547][ T5178] buffer_io_error: 5 callbacks suppressed [ 1851.946558][ T5178] Buffer I/O error on dev loop9, logical block 1, async page read [ 1851.950064][ C0] blk_print_req_error: 5 callbacks suppressed [ 1851.950078][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1851.977077][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1851.993704][ T5178] Buffer I/O error on dev loop9, logical block 1, async page read [ 1852.038899][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1852.049559][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1852.168864][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1852.177693][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1852.215335][ T5178] Buffer I/O error on dev loop9, logical block 1, async page read [ 1852.223281][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1852.223300][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1852.247419][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1852.258035][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1852.269060][ T5178] Buffer I/O error on dev loop9, logical block 1, async page read [ 1852.289403][ T5178] Buffer I/O error on dev loop9, logical block 1, async page read [ 1852.289452][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1852.307891][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1852.386656][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1852.417692][T27602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1853.395224][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1853.411785][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1853.422582][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1853.444657][ T5178] ldm_validate_partition_table(): Disk read failed. [ 1853.477504][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1853.489487][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1853.501630][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1853.510112][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1853.526378][ T5178] Dev loop9: unable to read RDB block 0 [ 1853.589528][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1853.600899][ T5178] loop9: unable to read partition table [ 1853.921409][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.927745][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.943603][ T5178] loop9: partition table beyond EOD, truncated [ 1854.305454][T20045] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1854.547172][T20045] usb 5-1: Using ep0 maxpacket: 8 [ 1854.559324][T20045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1854.575715][T20045] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1854.605055][T20045] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1854.783065][T20045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.944094][T20045] usb 5-1: Product: syz [ 1854.954877][T20045] usb 5-1: Manufacturer: syz [ 1854.971101][T20045] usb 5-1: SerialNumber: syz [ 1854.988180][T20045] usb 5-1: config 0 descriptor?? [ 1855.235271][T27623] netlink: 'syz.4.5858': attribute type 1 has an invalid length. [ 1855.722402][T25100] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1855.763547][T20045] usb 5-1: USB disconnect, device number 46 [ 1855.832229][T27641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=27641 comm=syz.1.5864 [ 1855.886929][T25100] usb 1-1: Using ep0 maxpacket: 16 [ 1855.899198][T25100] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.919012][T25100] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1855.940619][T25100] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1855.956209][T25100] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1855.975844][T25100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.124468][T25100] usb 1-1: config 0 descriptor?? [ 1856.528135][ T5887] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1856.549465][T20045] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1856.550144][T27650] binder: 27649:27650 ioctl c0306201 200000000040 returned -22 [ 1856.632188][T27652] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1856.654281][T27652] cramfs: wrong magic [ 1856.692169][T27652] __nla_validate_parse: 96 callbacks suppressed [ 1856.692202][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1856.817233][T27653] binder: 27649:27653 ioctl 5441 7fffffff returned -22 [ 1856.998328][T20045] usb 4-1: Using ep0 maxpacket: 16 [ 1857.018769][T20045] usb 4-1: config 253 has an invalid interface number: 184 but max is 0 [ 1857.071303][T25134] net_ratelimit: 41 callbacks suppressed [ 1857.071322][T25134] bond1: (slave bridge2): failed to get link speed/duplex [ 1857.086458][T20045] usb 4-1: config 253 has no interface number 0 [ 1857.092956][T20045] usb 4-1: config 253 interface 184 has no altsetting 0 [ 1857.102712][T20045] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1857.138695][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.159060][ T5887] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1857.179109][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.187277][T25134] bond2: (slave bridge3): failed to get link speed/duplex [ 1857.197680][T20045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.207488][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1857.215359][T20045] usb 4-1: Product: syz [ 1857.219677][T20045] usb 4-1: Manufacturer: syz [ 1857.224311][ T5887] usb 3-1: config 0 descriptor?? [ 1857.224682][T20045] usb 4-1: SerialNumber: syz [ 1857.247841][T20045] go7007 4-1:253.184: probe with driver go7007 failed with error -12 [ 1857.319959][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1857.340235][T25134] bond1: (slave bridge2): failed to get link speed/duplex [ 1857.453481][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1857.467900][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1857.474080][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1857.489891][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1857.499594][T20045] usb 4-1: USB disconnect, device number 41 [ 1857.499808][ T5887] usb 3-1: USB disconnect, device number 22 [ 1857.586629][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 1857.630411][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 1857.784518][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1858.112364][T20045] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1859.041901][T25100] usbhid 1-1:0.0: can't add hid device: -71 [ 1859.188993][T20045] usb 5-1: Using ep0 maxpacket: 8 [ 1859.391961][T25100] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1859.424250][T25100] usb 1-1: USB disconnect, device number 85 [ 1859.441360][T20045] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1859.488273][T20045] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1859.496377][T20045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1859.542184][T20045] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1859.578347][T20045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1859.606087][T20045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1859.628609][T27669] FAULT_INJECTION: forcing a failure. [ 1859.628609][T27669] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.671371][T20045] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1859.680757][T20045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.689946][T20045] usb 5-1: Product: syz [ 1859.699146][T20045] usb 5-1: Manufacturer: syz [ 1859.704539][T20045] usb 5-1: SerialNumber: syz [ 1859.709613][T27669] CPU: 1 UID: 0 PID: 27669 Comm: syz.0.5873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.709639][T27669] Tainted: [L]=SOFTLOCKUP [ 1859.709645][T27669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1859.709655][T27669] Call Trace: [ 1859.709661][T27669] [ 1859.709668][T27669] dump_stack_lvl+0x100/0x190 [ 1859.709701][T27669] should_fail_ex.cold+0x5/0xa [ 1859.709724][T27669] should_failslab+0xc2/0x120 [ 1859.709741][T27669] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1859.709763][T27669] ? alloc_fs_context+0x57/0xf40 [ 1859.709791][T27669] alloc_fs_context+0x57/0xf40 [ 1859.709817][T27669] path_mount+0xdbd/0x23d0 [ 1859.709847][T27669] ? __pfx_path_mount+0x10/0x10 [ 1859.709867][T27669] ? lockdep_hardirqs_on+0x78/0x100 [ 1859.709894][T27669] ? putname+0xb1/0x110 [ 1859.709912][T27669] ? kmem_cache_free+0x124/0x6a0 [ 1859.709942][T27669] ? __x64_sys_mount+0x293/0x310 [ 1859.709963][T27669] __x64_sys_mount+0x293/0x310 [ 1859.709985][T27669] ? __pfx___x64_sys_mount+0x10/0x10 [ 1859.710016][T27669] do_syscall_64+0x106/0xf80 [ 1859.710037][T27669] ? clear_bhb_loop+0x40/0x90 [ 1859.710060][T27669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.710078][T27669] RIP: 0033:0x7f47b3d9c799 [ 1859.710093][T27669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.710110][T27669] RSP: 002b:00007f47b4d33028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1859.710127][T27669] RAX: ffffffffffffffda RBX: 00007f47b4015fa0 RCX: 00007f47b3d9c799 [ 1859.710139][T27669] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 0000000000000000 [ 1859.710151][T27669] RBP: 00007f47b4d33090 R08: 0000200000000380 R09: 0000000000000000 [ 1859.710162][T27669] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 1859.710172][T27669] R13: 00007f47b4016038 R14: 00007f47b4015fa0 R15: 00007ffe248dfa18 [ 1859.710198][T27669] [ 1859.914367][T20045] usb 5-1: config 0 descriptor?? [ 1859.925874][T27656] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1859.934192][T20045] hub 5-1:0.0: bad descriptor, ignoring hub [ 1859.940178][T20045] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1859.950132][T20045] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85 [ 1860.201412][T15413] usb 5-1: USB disconnect, device number 47 [ 1860.883106][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1862.065901][T27702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1862.072947][T27688] nbd: socks must be embedded in a SOCK_ITEM attr [ 1862.458832][ T5926] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1862.513166][T13402] net_ratelimit: 56 callbacks suppressed [ 1862.513180][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1862.555003][T17681] bond1: (slave bridge2): failed to get link speed/duplex [ 1862.642080][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.653117][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 1862.660691][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1862.688869][ T5926] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1862.704803][T17681] bond1: (slave bridge2): failed to get link speed/duplex [ 1862.763383][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.779791][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1862.796180][ T5926] usb 4-1: config 0 descriptor?? [ 1862.833352][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1862.843552][ T5887] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1862.897551][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1862.950624][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1863.004021][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 1863.015180][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1863.067983][T17681] bond1: (slave bridge2): failed to get link speed/duplex [ 1863.105406][ T5887] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1863.131690][T15413] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1863.131806][ T5887] usb 5-1: config 0 has no interface number 0 [ 1863.149931][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 1863.156273][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1863.178707][ T5926] usb 4-1: USB disconnect, device number 42 [ 1863.191539][ T5887] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1863.222079][ T5887] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1863.242867][ T5887] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1863.253666][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.264829][ T5887] usb 5-1: Product: syz [ 1863.272881][ T5887] usb 5-1: Manufacturer: syz [ 1863.277625][ T5887] usb 5-1: SerialNumber: syz [ 1863.288278][ T5887] usb 5-1: config 0 descriptor?? [ 1863.300674][ T5887] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1863.310544][ T5887] em28xx 5-1:0.89: Video interface 89 found: [ 1863.347220][T15413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.363159][T11411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1863.367119][T15413] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1863.387185][T11411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1863.395630][T11411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1863.399166][T15413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.414496][T11411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1863.422793][T11411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1863.423355][T15413] usb 1-1: config 0 descriptor?? [ 1863.647431][ T5926] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1863.682618][T27720] chnl_net:caif_netlink_parms(): no params data found [ 1863.715428][T15413] usbhid 1-1:0.0: can't add hid device: -71 [ 1863.739774][T15413] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1863.756351][T15413] usb 1-1: USB disconnect, device number 86 [ 1863.808912][T27720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.816087][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 1863.821549][T27720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.830372][T27720] bridge_slave_0: entered allmulticast mode [ 1863.836559][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.848575][T27720] bridge_slave_0: entered promiscuous mode [ 1863.854999][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1863.867929][T27720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.875210][T27720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.882392][ T5926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1863.892139][T27720] bridge_slave_1: entered allmulticast mode [ 1863.898065][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.907909][T27720] bridge_slave_1: entered promiscuous mode [ 1863.916346][ T5926] usb 4-1: config 0 descriptor?? [ 1863.944444][ T5926] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1863.966215][ T5926] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1864.000966][T13384] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.024539][T27720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.036119][T27720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.061365][T27720] team0: Port device team_slave_0 added [ 1864.070824][T27720] team0: Port device team_slave_1 added [ 1864.076661][ T5887] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1864.084373][T13384] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.114206][T27720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.122149][T27720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.148461][T27720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.165738][T13384] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.180549][T27720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.187520][T27720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.215216][T27720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1864.248093][T13384] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.283734][T27720] hsr_slave_0: entered promiscuous mode [ 1864.298718][T27720] hsr_slave_1: entered promiscuous mode [ 1864.304976][T27720] debugfs: 'hsr0' already exists in 'hsr' [ 1864.311094][T27720] Cannot create hsr debugfs directory [ 1864.448153][ T5926] usb 4-1: USB disconnect, device number 43 [ 1864.464207][ T5926] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1864.542437][T13384] bridge_slave_1: left allmulticast mode [ 1864.557207][T13384] bridge_slave_1: left promiscuous mode [ 1864.574307][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.606423][T13384] bridge_slave_0: left allmulticast mode [ 1864.612384][T13384] bridge_slave_0: left promiscuous mode [ 1864.623785][T13384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.807662][ T5887] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1864.883830][ T5887] em28xx 5-1:0.89: board has no eeprom [ 1864.970126][ T5887] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1864.978619][ T5887] em28xx 5-1:0.89: analog set to bulk mode. [ 1864.985935][T14309] em28xx 5-1:0.89: Registering V4L2 extension [ 1865.007323][ T5887] usb 5-1: USB disconnect, device number 48 [ 1865.024565][ T5887] em28xx 5-1:0.89: Disconnecting em28xx [ 1865.054284][T14309] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1865.061646][T14309] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1865.070466][T14309] em28xx 5-1:0.89: No AC97 audio processor [ 1865.092969][T14309] usb 5-1: Decoder not found [ 1865.097746][T14309] em28xx 5-1:0.89: failed to create media graph [ 1865.104419][T14309] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1865.112827][T14309] em28xx 5-1:0.89: Registering snapshot button... [ 1865.121125][T14309] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input86 [ 1865.135623][T14309] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1865.157631][ T5887] em28xx 5-1:0.89: Closing input extension [ 1865.164100][ T5887] em28xx 5-1:0.89: Deregistering snapshot button [ 1865.182254][ T5887] em28xx 5-1:0.89: Freeing device [ 1865.186544][T26713] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1865.212829][T13384] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 1865.237833][T13384] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1865.297724][T13384] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1865.307116][ T29] audit: type=1326 audit(2000002737.849:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1865.334967][T27744] sctp: [Deprecated]: syz.3.5892 (pid 27744) Use of int in max_burst socket option deprecated. [ 1865.334967][T27744] Use struct sctp_assoc_value instead [ 1865.353779][ T29] audit: type=1326 audit(2000002737.868:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1865.365653][T26713] usb 3-1: Using ep0 maxpacket: 8 [ 1865.377841][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (96) [ 1865.411155][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (121) [ 1865.411918][T26713] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1865.430676][T26713] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1865.514386][T26713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1865.523438][T26713] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1865.535549][T26713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1865.546884][ T29] audit: type=1326 audit(2000002737.868:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1865.546930][ T29] audit: type=1326 audit(2000002737.868:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1865.626982][ T29] audit: type=1326 audit(2000002737.868:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1865.652501][ T29] audit: type=1326 audit(2000002737.868:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1865.664748][T24649] Bluetooth: hci5: command tx timeout [ 1865.732126][T26713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1865.746300][T26713] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1865.755384][T26713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.764183][T26713] usb 3-1: Product: syz [ 1865.768370][T26713] usb 3-1: Manufacturer: syz [ 1865.774389][T26713] usb 3-1: SerialNumber: syz [ 1865.779526][T13384] bond5 (unregistering): (slave bridge3): Removing an active aggregator [ 1865.796346][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (94) [ 1865.954776][T13384] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1865.964072][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (120) [ 1865.982093][T26713] usb 3-1: config 0 descriptor?? [ 1865.987337][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (123) [ 1865.998003][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (113) [ 1866.000139][T27735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1866.014597][T14309] SELinux: failure in sel_netif_sid_slow(), invalid network interface (117) [ 1866.015110][T26713] hub 3-1:0.0: bad descriptor, ignoring hub [ 1866.135270][T26713] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1866.192183][T26713] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input87 [ 1866.201831][ T29] audit: type=1326 audit(2000002737.868:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1866.225955][ T29] audit: type=1326 audit(2000002737.868:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1866.260366][ T29] audit: type=1326 audit(2000002737.878:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1866.387533][T26713] usb 3-1: USB disconnect, device number 23 [ 1866.387586][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 1866.424420][T13384] bond6 (unregistering): (slave bridge4): Removing an active aggregator [ 1866.438975][ T29] audit: type=1326 audit(2000002737.878:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27740 comm="syz.3.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb086f9c799 code=0x7ffc0000 [ 1866.443153][T13384] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1866.933358][T27757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5895'. [ 1867.120708][T13384] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 1867.128909][T13384] bridge5 (unregistering): left promiscuous mode [ 1867.135232][T13384] bridge5 (unregistering): left allmulticast mode [ 1867.617743][T13384] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 1867.682465][T13384] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 1867.752278][T13384] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 1867.849375][T13384] bond11 (unregistering): (slave bridge9): Releasing backup interface [ 1867.876699][T24649] Bluetooth: hci5: command tx timeout [ 1868.234971][T13384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1868.246827][T13384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1868.256958][T13384] bond0 (unregistering): Released all slaves [ 1868.281461][T13384] bond1 (unregistering): Released all slaves [ 1868.308107][T13384] bond2 (unregistering): Released all slaves [ 1868.331782][T13384] bond3 (unregistering): Released all slaves [ 1868.359765][T13384] bond4 (unregistering): Released all slaves [ 1868.383018][T13384] bond5 (unregistering): Released all slaves [ 1868.412448][T13384] bond6 (unregistering): Released all slaves [ 1868.446198][T13384] bond7 (unregistering): Released all slaves [ 1868.474567][T13384] bond8 (unregistering): Released all slaves [ 1868.493597][T13384] bond9 (unregistering): Released all slaves [ 1868.521708][T13384] bond10 (unregistering): Released all slaves [ 1868.543130][T13384] bond11 (unregistering): Released all slaves [ 1868.569676][T13384] bond12 (unregistering): Released all slaves [ 1868.680280][T27762] IPv6: sit1: Disabled Multicast RS [ 1868.843096][T27779] netlink: 'syz.3.5900': attribute type 10 has an invalid length. [ 1868.850988][T27779] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1869.236733][T13384] tipc: Left network mode [ 1869.255750][ T13] net_ratelimit: 13 callbacks suppressed [ 1869.255768][ T13] bond2: (slave bridge3): failed to get link speed/duplex [ 1869.427002][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1869.600813][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 1869.996451][T13384] hsr_slave_0: left promiscuous mode [ 1870.019269][T13384] hsr_slave_1: left promiscuous mode [ 1870.049709][T13384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.070275][T13384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.089467][T13384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1870.102017][T19386] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1870.104116][T13384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.109728][T24649] Bluetooth: hci5: command tx timeout [ 1870.150836][T13384] veth1_macvtap: left promiscuous mode [ 1870.177154][T13384] veth0_macvtap: left promiscuous mode [ 1870.240087][T13384] veth1_vlan: left promiscuous mode [ 1870.304578][ T5887] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1870.509780][T13384] veth0_vlan: left promiscuous mode [ 1870.527025][T19386] usb 3-1: Using ep0 maxpacket: 8 [ 1870.549408][T19386] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1870.557780][T19386] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1870.575698][T19386] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1870.595682][T19386] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1870.642653][T19386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1870.676485][T19386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1870.688335][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 1870.701171][ T5887] usb 1-1: config 253 has an invalid interface number: 184 but max is 0 [ 1870.710443][ T5887] usb 1-1: config 253 has no interface number 0 [ 1870.716912][ T5887] usb 1-1: config 253 interface 184 has no altsetting 0 [ 1870.844687][T19386] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1870.855204][T27815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.864419][T27815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.878487][T19386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.893717][T27815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.917900][T27815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.339760][ T5887] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1871.348997][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.358057][T19386] usb 3-1: Product: syz [ 1871.362324][T19386] usb 3-1: Manufacturer: syz [ 1871.366933][T19386] usb 3-1: SerialNumber: syz [ 1871.371612][ T5887] usb 1-1: Product: syz [ 1871.375780][ T5887] usb 1-1: Manufacturer: syz [ 1871.383504][ T5887] usb 1-1: SerialNumber: syz [ 1871.391393][T19386] usb 3-1: config 0 descriptor?? [ 1871.397060][T25100] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1871.412038][T27801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1871.429938][T19386] hub 3-1:0.0: bad descriptor, ignoring hub [ 1871.437160][ T5887] go7007 1-1:253.184: probe with driver go7007 failed with error -12 [ 1871.446257][T19386] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1871.456905][T19386] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 1871.544742][T25100] usb 5-1: device descriptor read/64, error -71 [ 1871.626213][T13384] team0 (unregistering): Port device team_slave_1 removed [ 1871.664856][T19386] usb 3-1: USB disconnect, device number 24 [ 1871.675581][T13384] team0 (unregistering): Port device team_slave_0 removed [ 1871.704614][T20045] usb 1-1: USB disconnect, device number 87 [ 1871.809257][T25100] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1871.817931][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1871.827988][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1871.981152][T25100] usb 5-1: device descriptor read/64, error -71 [ 1871.991205][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1872.035517][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1872.055165][T27720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1872.067911][T27720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1872.091922][T27720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1872.109184][T25100] usb usb5-port1: attempt power cycle [ 1872.124812][T27720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1872.162275][ T5926] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1872.226335][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1872.274960][T27720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1872.302552][T13384] IPVS: stop unused estimator thread 0... [ 1872.310129][T27720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1872.329765][T13398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.336917][T13398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.345983][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 1872.351181][T24649] Bluetooth: hci5: command tx timeout [ 1872.367283][ T5926] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1872.383065][ T5926] usb 4-1: config 179 has no interface number 0 [ 1872.392692][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1872.404329][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1872.413340][T13398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.417041][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1872.422832][T13398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.436588][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1872.493193][T25100] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1872.509026][ T5926] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1872.522799][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1872.544500][T25100] usb 5-1: device descriptor read/8, error -71 [ 1872.548777][T27720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1872.567592][ T5926] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1872.572249][T27720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1872.578476][ T5926] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1872.612579][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1872.620250][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.693664][ T5926] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input89 [ 1873.345289][T25100] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1873.370008][T25100] usb 5-1: device descriptor read/8, error -71 [ 1873.458429][T27720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1873.497880][T25100] usb usb5-port1: unable to enumerate USB device [ 1873.684897][T27720] veth0_vlan: entered promiscuous mode [ 1873.731074][T27720] veth1_vlan: entered promiscuous mode [ 1873.765906][T25100] usb 4-1: USB disconnect, device number 44 [ 1873.771873][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1874.195334][T27720] veth0_macvtap: entered promiscuous mode [ 1874.226621][T27720] veth1_macvtap: entered promiscuous mode [ 1874.338356][T27720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1874.368961][T27720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1874.407375][T20918] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.416220][T20918] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.444827][T20918] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.458701][T20918] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.576363][T13398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.584730][T13398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.666004][T13398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.675288][T13398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.685943][T13402] net_ratelimit: 21 callbacks suppressed [ 1874.685959][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1874.727737][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1874.811157][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1874.811173][ T29] audit: type=1400 audit(2000002746.730:1364): avc: denied { accept } for pid=27882 comm="syz.0.5919" path="socket:[96112]" dev="sockfs" ino=96112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1874.845345][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1874.876017][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1875.149750][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1875.218015][T20918] bond1: (slave bridge2): failed to get link speed/duplex [ 1875.317660][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1875.335853][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1875.418409][T27899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1876.434571][T25134] bond1: (slave bridge2): failed to get link speed/duplex [ 1876.446429][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1876.501504][ T5926] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1876.716975][T25100] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1876.851107][T27907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1876.971454][T25100] usb 4-1: Using ep0 maxpacket: 16 [ 1876.976677][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 1876.994109][ T5926] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1877.002399][ T5926] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1877.020229][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1877.030060][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1877.042394][T25100] usb 4-1: config 253 has an invalid interface number: 184 but max is 0 [ 1877.052390][T25100] usb 4-1: config 253 has no interface number 0 [ 1877.062738][T25100] usb 4-1: config 253 interface 184 has no altsetting 0 [ 1877.098726][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1877.120414][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1877.132376][ T29] audit: type=1400 audit(2000002748.901:1365): avc: denied { create } for pid=27910 comm="syz.1.5930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1877.163103][T25100] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1877.177806][T25100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.177942][ T5926] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1877.198349][T25100] usb 4-1: Product: syz [ 1877.202525][T25100] usb 4-1: Manufacturer: syz [ 1877.215291][ T29] audit: type=1326 audit(2000002748.901:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27910 comm="syz.1.5930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f234699c799 code=0x0 [ 1877.241613][T25100] usb 4-1: SerialNumber: syz [ 1877.257924][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.276345][ T5926] usb 5-1: Product: syz [ 1877.281399][T25100] go7007 4-1:253.184: probe with driver go7007 failed with error -12 [ 1877.314659][ T5926] usb 5-1: Manufacturer: syz [ 1877.319256][ T5926] usb 5-1: SerialNumber: syz [ 1877.331948][ T5926] usb 5-1: config 0 descriptor?? [ 1877.366309][T27888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1877.374936][ T5926] hub 5-1:0.0: bad descriptor, ignoring hub [ 1877.391260][ T5926] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1877.411603][ T5926] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input90 [ 1877.771297][T20045] usb 5-1: USB disconnect, device number 53 [ 1878.308957][T15413] usb 4-1: USB disconnect, device number 45 [ 1879.209964][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1879.225420][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1879.310745][T25100] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1879.417001][T27949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1879.439507][ T5926] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1879.471028][T25100] usb 5-1: Using ep0 maxpacket: 16 [ 1879.485858][T25100] usb 5-1: config 253 has an invalid interface number: 184 but max is 0 [ 1879.507036][T25100] usb 5-1: config 253 has no interface number 0 [ 1879.521494][T25100] usb 5-1: config 253 interface 184 has no altsetting 0 [ 1879.543379][T25100] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1879.565687][T25100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.634872][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 1879.645564][T25100] usb 5-1: Product: syz [ 1879.651486][T25100] usb 5-1: Manufacturer: syz [ 1879.656281][ T5926] usb 1-1: config 253 has an invalid interface number: 184 but max is 0 [ 1879.666441][T25100] usb 5-1: SerialNumber: syz [ 1879.671256][ T5926] usb 1-1: config 253 has no interface number 0 [ 1879.813366][T15413] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1879.977131][T25100] go7007 5-1:253.184: probe with driver go7007 failed with error -12 [ 1879.986174][ T5926] usb 1-1: config 253 interface 184 has no altsetting 0 [ 1880.011585][ T5926] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1880.028559][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.044026][ T5926] usb 1-1: Product: syz [ 1880.048986][ T5926] usb 1-1: Manufacturer: syz [ 1880.059604][T17681] net_ratelimit: 38 callbacks suppressed [ 1880.059615][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1880.102395][T25134] bond1: (slave bridge2): failed to get link speed/duplex [ 1880.105453][ T5926] usb 1-1: SerialNumber: syz [ 1880.154904][T15413] usb 2-1: Using ep0 maxpacket: 32 [ 1880.156955][ T5926] go7007 1-1:253.184: probe with driver go7007 failed with error -12 [ 1880.174803][T15413] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1880.183332][T15413] usb 2-1: config 0 has no interface number 0 [ 1880.190186][T25134] bond2: (slave bridge3): failed to get link speed/duplex [ 1880.218320][T15413] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1880.228437][T15413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.237927][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1880.270041][T15413] usb 2-1: Product: syz [ 1880.285210][T15413] usb 2-1: Manufacturer: syz [ 1880.300291][T15413] usb 2-1: SerialNumber: syz [ 1880.315298][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1880.331494][T15413] usb 2-1: config 0 descriptor?? [ 1880.340313][T15413] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1880.354009][T15413] usb 2-1: selecting invalid altsetting 1 [ 1880.381154][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1880.381930][T15413] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1880.461293][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1880.471210][ T5926] usb 5-1: USB disconnect, device number 54 [ 1880.483114][T15413] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1880.524143][T15413] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1880.540560][T15413] usb 2-1: media controller created [ 1880.670912][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1880.676714][T15413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1880.678138][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1880.813377][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1881.008854][ T5926] usb 1-1: USB disconnect, device number 88 [ 1881.047385][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 240 seconds [ 1881.058797][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 240 seconds [ 1881.069955][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 240 seconds [ 1881.215771][T27972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27972 comm=syz.2.5944 [ 1881.240269][T27972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5944'. [ 1881.504548][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 240 seconds [ 1881.587062][T20045] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1881.747163][T20045] usb 4-1: Using ep0 maxpacket: 8 [ 1881.758374][T20045] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1881.776698][T20045] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1881.789343][T20045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1881.800104][T20045] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1881.826332][T20045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1881.905323][T15413] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1881.922539][T20045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1881.937487][T15413] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1881.972197][T20045] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1882.035647][ T5926] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1882.093511][T20045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.121409][T20045] usb 4-1: Product: syz [ 1882.132413][T20045] usb 4-1: Manufacturer: syz [ 1882.155191][T27988] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 1882.175300][T27984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5946'. [ 1882.195093][T20045] usb 4-1: SerialNumber: syz [ 1882.210593][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1882.231356][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1882.239242][T20045] usb 4-1: config 0 descriptor?? [ 1882.266630][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1882.369757][ T5926] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1882.379500][T27976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1882.408639][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.437482][ T5926] usb 3-1: Product: syz [ 1882.448271][ T5926] usb 3-1: Manufacturer: syz [ 1882.462959][ T5926] usb 3-1: SerialNumber: syz [ 1882.486196][ T5926] usb 3-1: config 0 descriptor?? [ 1882.540232][T20045] hub 4-1:0.0: bad descriptor, ignoring hub [ 1882.547052][T20045] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1882.557659][T20045] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input92 [ 1882.599593][T27990] 9p: Bad value for 'rfdno' [ 1882.753286][T27983] netlink: 'syz.2.5947': attribute type 1 has an invalid length. [ 1882.769105][T20045] usb 4-1: USB disconnect, device number 46 [ 1882.769172][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 1882.829732][T15413] usb 2-1: USB disconnect, device number 49 [ 1883.002460][ T5926] usb 3-1: USB disconnect, device number 25 [ 1883.394634][T20045] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1883.627869][T20045] usb 1-1: Using ep0 maxpacket: 16 [ 1883.799743][T20045] usb 1-1: config 253 has an invalid interface number: 184 but max is 0 [ 1883.829001][T20045] usb 1-1: config 253 has no interface number 0 [ 1883.858503][T20045] usb 1-1: config 253 interface 184 has no altsetting 0 [ 1883.881247][T20045] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1883.902238][T20045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.912911][T20045] usb 1-1: Product: syz [ 1883.918035][T20045] usb 1-1: Manufacturer: syz [ 1883.922721][T20045] usb 1-1: SerialNumber: syz [ 1884.057409][T20045] go7007 1-1:253.184: probe with driver go7007 failed with error -12 [ 1884.328278][T20045] usb 1-1: USB disconnect, device number 89 [ 1884.397295][ T5926] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1884.558200][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1884.559550][ T5926] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1884.559573][ T5926] usb 5-1: config 0 has no interface number 0 [ 1884.561361][ T5926] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1884.561382][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.561393][ T5926] usb 5-1: Product: syz [ 1884.561402][ T5926] usb 5-1: Manufacturer: syz [ 1884.561411][ T5926] usb 5-1: SerialNumber: syz [ 1884.563152][ T5926] usb 5-1: config 0 descriptor?? [ 1884.566923][ T5926] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1884.566938][ T5926] usb 5-1: selecting invalid altsetting 1 [ 1884.566947][ T5926] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1884.574386][ T5926] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1884.574519][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1884.574540][ T5926] usb 5-1: media controller created [ 1884.585224][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1885.252172][T15413] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1885.252778][T28033] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1885.444507][T15413] usb 1-1: Using ep0 maxpacket: 16 [ 1885.707227][T25330] net_ratelimit: 65 callbacks suppressed [ 1885.707251][T25330] bond1: (slave bridge2): failed to get link speed/duplex [ 1885.744732][ T5926] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1885.779303][T15413] usb 1-1: config 253 has an invalid interface number: 184 but max is 0 [ 1885.783252][ T5926] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1885.819006][T25330] bond2: (slave bridge3): failed to get link speed/duplex [ 1885.925733][T25330] bond1: (slave bridge2): failed to get link speed/duplex [ 1885.989736][T25330] bond2: (slave bridge3): failed to get link speed/duplex [ 1886.053773][T25330] bond1: (slave bridge2): failed to get link speed/duplex [ 1886.117908][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1886.140359][T15413] usb 1-1: config 253 has no interface number 0 [ 1886.147458][T15413] usb 1-1: config 253 interface 184 has no altsetting 0 [ 1886.157370][T15413] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1886.166664][T15413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.174803][T15413] usb 1-1: Product: syz [ 1886.178960][T15413] usb 1-1: Manufacturer: syz [ 1886.183585][T15413] usb 1-1: SerialNumber: syz [ 1886.194155][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1886.204630][T15413] go7007 1-1:253.184: probe with driver go7007 failed with error -12 [ 1886.246389][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1886.502655][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1886.740882][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1887.026603][T19386] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1887.378765][T15413] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1887.412221][T19386] usb 3-1: device descriptor read/64, error -71 [ 1887.439539][T20045] usb 1-1: USB disconnect, device number 90 [ 1887.569937][ T5926] usb 5-1: USB disconnect, device number 55 [ 1887.691592][T15413] usb 2-1: Using ep0 maxpacket: 8 [ 1887.743178][T28055] kAFS: No cell specified [ 1888.084639][T19386] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1888.118852][T15413] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1888.136888][T15413] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1888.145395][T15413] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1888.154630][T15413] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1888.166674][T15413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1888.180998][T15413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1888.194710][T15413] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1888.203924][T15413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.212035][T15413] usb 2-1: Product: syz [ 1888.216375][T15413] usb 2-1: Manufacturer: syz [ 1888.221014][T15413] usb 2-1: SerialNumber: syz [ 1888.228926][T15413] usb 2-1: config 0 descriptor?? [ 1888.234543][T28049] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1888.244288][T19386] usb 3-1: device descriptor read/64, error -71 [ 1888.245023][T15413] hub 2-1:0.0: bad descriptor, ignoring hub [ 1888.257053][T15413] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1888.267646][T15413] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input93 [ 1888.403322][T19386] usb usb3-port1: attempt power cycle [ 1888.569475][T15413] usb 2-1: USB disconnect, device number 50 [ 1889.665661][T19386] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1889.766452][T28069] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1889.954486][T19386] usb 3-1: device not accepting address 28, error -71 [ 1890.403233][T19386] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1890.424646][T19386] usb 3-1: Using ep0 maxpacket: 16 [ 1890.448861][T19386] usb 3-1: config 253 has an invalid interface number: 184 but max is 0 [ 1890.466315][T19386] usb 3-1: config 253 has no interface number 0 [ 1890.479497][T19386] usb 3-1: config 253 interface 184 has no altsetting 0 [ 1890.492843][T19386] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1890.516112][T19386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.525283][T19386] usb 3-1: Product: syz [ 1890.529536][T19386] usb 3-1: Manufacturer: syz [ 1890.540811][T19386] usb 3-1: SerialNumber: syz [ 1890.558203][T19386] go7007 3-1:253.184: probe with driver go7007 failed with error -12 [ 1891.104994][T13402] net_ratelimit: 47 callbacks suppressed [ 1891.105015][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1891.118161][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1891.176207][T19386] usb 3-1: USB disconnect, device number 29 [ 1891.245642][T13384] bond2: (slave bridge3): failed to get link speed/duplex [ 1891.257945][T25100] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1891.268458][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1891.346195][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5979'. [ 1891.367256][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1891.386019][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1891.407322][ T5926] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1891.419422][T25100] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1891.430707][T25100] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1891.441337][T25100] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1891.454801][T14309] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1891.465591][T25100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1891.474502][T25100] usb 2-1: SerialNumber: syz [ 1891.484010][T25100] usb 2-1: bad CDC descriptors [ 1891.487069][T13402] bond2: (slave bridge3): failed to get link speed/duplex [ 1891.493765][T25100] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1891.518210][T25100] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1891.527267][T25100] scsi host1: usb-storage 2-1:1.0 [ 1891.535807][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1891.568006][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 1891.574292][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1891.584455][ T5926] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1891.596547][ T5926] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1891.605656][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.613776][T19386] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1891.621667][ T5926] usb 4-1: Product: syz [ 1891.625943][ T5926] usb 4-1: Manufacturer: syz [ 1891.630556][ T5926] usb 4-1: SerialNumber: syz [ 1891.637118][ T5926] usb 4-1: config 0 descriptor?? [ 1891.642455][T14309] usb 5-1: Using ep0 maxpacket: 32 [ 1891.647596][ T1150] bond2: (slave bridge3): failed to get link speed/duplex [ 1891.657276][T14309] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1891.663806][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1891.665569][T14309] usb 5-1: config 0 has no interface number 0 [ 1891.678803][T14309] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1891.687661][T14309] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1891.697403][T14309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.705427][T14309] usb 5-1: Product: syz [ 1891.710233][T14309] usb 5-1: Manufacturer: syz [ 1891.714852][T14309] usb 5-1: SerialNumber: syz [ 1891.722469][T14309] usb 5-1: config 0 descriptor?? [ 1891.748544][T20045] usb 2-1: USB disconnect, device number 51 [ 1891.794094][T19386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.806667][T19386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1891.819328][T19386] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1891.828895][T19386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.843418][T19386] usb 1-1: config 0 descriptor?? [ 1891.897229][T28084] netlink: 'syz.3.5978': attribute type 1 has an invalid length. [ 1891.904060][T28096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1891.921817][ T5926] usb 4-1: USB disconnect, device number 47 [ 1892.068455][T19386] usbhid 1-1:0.0: can't add hid device: -71 [ 1892.075075][T19386] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1892.085382][T19386] usb 1-1: USB disconnect, device number 91 [ 1892.177023][ T5887] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1892.337094][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1892.345996][ T5887] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.362466][ T5887] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1892.376357][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1892.423219][ T5887] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1892.439661][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.502742][T19386] IPVS: starting estimator thread 0... [ 1892.661385][T20045] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1892.765171][T28100] IPVS: using max 47 ests per chain, 112800 per kthread [ 1892.789341][T14309] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1892.802125][ T5887] usb 3-1: config 0 descriptor?? [ 1892.816620][T14309] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1892.940477][T26713] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1892.967516][T20045] usb 1-1: Using ep0 maxpacket: 32 [ 1892.988831][T20045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.633085][T20045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1893.727801][T26713] usb 2-1: device descriptor read/64, error -71 [ 1893.737954][T20045] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1893.747000][T20045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.764920][T20045] usb 1-1: config 0 descriptor?? [ 1893.776842][T20045] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1893.794527][T20045] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1894.207373][T28109] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1894.215079][T28109] cramfs: wrong magic [ 1894.439301][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1894.634002][T26713] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1895.211195][T26713] usb 2-1: device descriptor read/64, error -71 [ 1895.271499][T20045] usb 1-1: USB disconnect, device number 92 [ 1895.280036][T20045] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1895.307222][T14309] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1895.325662][T14309] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1895.336297][T14309] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1895.349624][T14309] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1895.359976][T14309] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1895.378171][T14309] usb 5-1: USB disconnect, device number 56 [ 1895.393585][T26713] usb usb2-port1: attempt power cycle [ 1895.595933][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1895.607212][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1895.623286][ T5887] usb 3-1: USB disconnect, device number 30 [ 1897.063274][T13402] net_ratelimit: 47 callbacks suppressed [ 1897.063290][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1897.226803][T28135] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1897.263295][T17681] bond2: (slave bridge3): failed to get link speed/duplex [ 1897.319588][ T1150] bond1: (slave bridge2): failed to get link speed/duplex [ 1897.347393][T24649] Bluetooth: hci4: unexpected event for opcode 0x040e [ 1897.409687][T28143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5985'. [ 1897.427108][T28143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1897.526923][T13384] bond1: (slave bridge2): failed to get link speed/duplex [ 1897.872412][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1897.947374][T13402] bond1: (slave bridge2): link status up again after 0 ms [ 1897.989989][T13398] bond2: (slave bridge3): link status up again after 0 ms [ 1897.992000][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1898.021981][T14309] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1898.040406][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1898.140914][T13402] bond1: (slave bridge2): failed to get link speed/duplex [ 1898.350549][T28158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5992'. [ 1898.430613][T28159] input: syz0 as /devices/virtual/input/input94 [ 1898.953960][T14309] usb 3-1: Using ep0 maxpacket: 32 [ 1899.435372][T14309] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1899.444754][T14309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.452819][T14309] usb 3-1: Product: syz [ 1899.458540][T14309] usb 3-1: Manufacturer: syz [ 1899.463188][T14309] usb 3-1: SerialNumber: syz [ 1899.471655][T14309] usb 3-1: config 0 descriptor?? [ 1899.571682][T28158] nbd: socks must be embedded in a SOCK_ITEM attr [ 1899.610736][T22193] block nbd64: NBD_DISCONNECT [ 1899.675710][T28167] overlayfs: conflicting lowerdir path [ 1899.694073][T28139] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1899.800446][T22193] udevd[22193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1900.099324][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1900.121421][T28194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.130466][T28194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.285945][T28206] netlink: 'syz.0.6009': attribute type 1 has an invalid length. [ 1900.321140][T28206] bond6: entered promiscuous mode [ 1900.326704][T28206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1900.407447][T28214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6012'. [ 1900.619598][T14309] airspy 3-1:0.0: usb_control_msg() failed -110 request 09 [ 1900.626852][T14309] airspy 3-1:0.0: Could not detect board [ 1900.647539][T14309] airspy 3-1:0.0: probe with driver airspy failed with error -110 [ 1901.035943][T15413] usb 3-1: USB disconnect, device number 31 [ 1901.256834][T28256] serio: Serial port ptm1 [ 1901.502547][ T29] audit: type=1400 audit(2000002771.716:1367): avc: denied { map } for pid=28264 comm="syz.2.6034" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1901.687549][T28267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.101924][T28267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1902.140080][T28267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1902.264463][ T1150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.273567][ T1150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.299608][ T1150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.320380][ T1150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.489178][T20918] net_ratelimit: 48 callbacks suppressed [ 1902.489196][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1902.521141][T20918] bond1: (slave bridge2): failed to get link speed/duplex [ 1902.630223][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1902.649273][T20918] bond1: (slave bridge2): failed to get link speed/duplex [ 1902.788465][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1902.809904][T20918] bond1: (slave bridge2): failed to get link speed/duplex [ 1902.930170][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1902.960720][T20918] bond1: (slave bridge2): failed to get link speed/duplex [ 1903.067021][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1903.098096][T20918] bond1: (slave bridge2): failed to get link speed/duplex [ 1903.129166][T28315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6054'. [ 1903.616615][T28334] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1903.618044][ T29] audit: type=1400 audit(2000002773.691:1368): avc: denied { mounton } for pid=28333 comm="syz.0.6065" path="/585/file0/bus" dev="ramfs" ino=99336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1903.659948][T28334] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1903.694592][T28334] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1903.761175][ T29] audit: type=1400 audit(2000002773.812:1369): avc: denied { unmount } for pid=17613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1904.533473][T28361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28361 comm=syz.4.6076 [ 1904.818788][T28370] mmap: syz.1.6081 (28370) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1905.041324][ T29] audit: type=1400 audit(2000002775.019:1370): avc: denied { write } for pid=28375 comm="syz.1.6084" name="file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1906.263987][ T29] audit: type=1400 audit(2000002776.170:1371): avc: denied { watch } for pid=28425 comm="syz.4.6107" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1906.433709][T24649] Bluetooth: hci2: command 0x0406 tx timeout [ 1906.617784][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'. [ 1906.647063][T28445] team0: Port device team_slave_0 removed [ 1907.248734][T28394] 9pnet_virtio: no channels available for device syz [ 1907.651824][ T29] audit: type=1400 audit(2000002777.462:1372): avc: denied { read write } for pid=28480 comm="syz.2.6133" name="file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1907.677260][T28487] block device autoloading is deprecated and will be removed. [ 1907.682400][T28484] block device autoloading is deprecated and will be removed. [ 1907.715110][ T29] audit: type=1400 audit(2000002777.462:1373): avc: denied { read write } for pid=28480 comm="syz.2.6133" name="file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1907.760627][ T29] audit: type=1400 audit(2000002777.462:1374): avc: denied { open } for pid=28480 comm="syz.2.6133" path="/138/file0/file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1907.853870][ T1150] net_ratelimit: 77 callbacks suppressed [ 1907.853892][ T1150] bond1: (slave bridge2): failed to get link speed/duplex [ 1907.895921][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1907.992060][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1908.014697][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1908.109926][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1908.131289][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1908.233783][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1908.248533][T13398] bond2: (slave bridge3): failed to get link speed/duplex [ 1908.356140][T13398] bond1: (slave bridge2): failed to get link speed/duplex [ 1908.366100][T20918] bond2: (slave bridge3): failed to get link speed/duplex [ 1908.512699][ T29] audit: type=1326 audit(2000002778.276:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28510 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234699c799 code=0x7ffc0000 [ 1908.586956][ T29] audit: type=1326 audit(2000002778.304:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28510 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234699c799 code=0x7ffc0000 [ 1908.668235][ T29] audit: type=1326 audit(2000002778.313:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28510 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f234699c799 code=0x7ffc0000 [ 1908.733567][ T29] audit: type=1326 audit(2000002778.313:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28510 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234699c799 code=0x7ffc0000 [ 1909.897115][T28588] kvm: kvm [28587]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 1910.265454][T24649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1910.279159][T24649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1910.290555][T24649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1910.298868][T24649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1910.306864][T24649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1910.593867][T28609] chnl_net:caif_netlink_parms(): no params data found [ 1910.625473][T28626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1910.781349][T28634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1910.800595][ T29] audit: type=1326 audit(2000002780.410:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28635 comm="syz.1.6194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f234699c799 code=0x0 [ 1910.836542][T28609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.843820][T28609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.851205][T28609] bridge_slave_0: entered allmulticast mode [ 1910.858755][T28609] bridge_slave_0: entered promiscuous mode [ 1910.871229][T28609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.878881][T28609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.886039][T28609] bridge_slave_1: entered allmulticast mode [ 1910.894383][T28609] bridge_slave_1: entered promiscuous mode [ 1910.922900][T28609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.934721][T28609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.968111][T28609] team0: Port device team_slave_0 added [ 1910.976633][T28609] team0: Port device team_slave_1 added [ 1911.002693][T28609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1911.012717][T28609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1911.039002][T28609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1911.066016][T28609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1911.073170][T28609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1911.100306][T28609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1911.146654][T13402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.163483][T13402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1911.209085][T28609] hsr_slave_0: entered promiscuous mode [ 1911.215173][T28609] hsr_slave_1: entered promiscuous mode [ 1911.222705][T28609] debugfs: 'hsr0' already exists in 'hsr' [ 1911.228538][T28609] Cannot create hsr debugfs directory [ 1911.247438][T13402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.257888][T13402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1911.334004][T13402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.344581][T13402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1911.403602][T13402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.414104][T13402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1911.592853][T13402] bridge_slave_1: left allmulticast mode [ 1911.599739][T13402] bridge_slave_1: left promiscuous mode [ 1911.605868][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.654032][T13402] bridge_slave_0: left allmulticast mode [ 1911.662096][T13402] bridge_slave_0: left promiscuous mode [ 1911.667878][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.732601][T13402] bond_slave_0: left promiscuous mode [ 1911.738603][T13402] bond_slave_1: left promiscuous mode [ 1911.914778][T13402] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1911.999484][ T5887] SELinux: failure in sel_netif_sid_slow(), invalid network interface (90) [ 1912.013627][T13402] bond1 (unregistering): (slave bridge2): Removing an active aggregator [ 1912.022325][T13402] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1912.055996][T13402] bond2 (unregistering): (slave bridge3): Removing an active aggregator [ 1912.064711][T13402] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1912.120799][T13402] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1912.206812][T28665] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1912.216169][T28665] netlink: 440 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1912.225707][T13402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1912.238950][T13402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.248942][T13402] bond0 (unregistering): Released all slaves [ 1912.257766][T13402] bond1 (unregistering): Released all slaves [ 1912.269432][T13402] bond2 (unregistering): Released all slaves [ 1912.280265][T13402] bond3 (unregistering): Released all slaves [ 1912.292465][T13402] bond4 (unregistering): Released all slaves [ 1912.308507][T13402] bond5 (unregistering): Released all slaves [ 1912.319603][T13402] bond6 (unregistering): Released all slaves [ 1912.491474][T28673] tmpfs: Bad value for 'mpol' [ 1912.501611][T24649] Bluetooth: hci0: command tx timeout [ 1912.529990][ T29] audit: type=1400 audit(2000002782.038:1380): avc: denied { watch watch_reads } for pid=28668 comm="syz.4.6208" path="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1912.974333][T13402] hsr_slave_0: left promiscuous mode [ 1912.994231][T13402] hsr_slave_1: left promiscuous mode [ 1913.051937][T13402] veth1_macvtap: left promiscuous mode [ 1913.076729][T13402] veth0_macvtap: left promiscuous mode [ 1913.083783][T13402] veth1_vlan: left promiscuous mode [ 1913.096393][T13402] veth0_vlan: left promiscuous mode [ 1913.194647][T28706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1913.221344][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 270 seconds [ 1913.235089][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 270 seconds [ 1913.237846][T28709] netlink: 'syz.4.6220': attribute type 1 has an invalid length. [ 1913.246209][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 270 seconds [ 1914.032840][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 270 seconds [ 1914.054655][T13402] team0 (unregistering): Port device team_slave_1 removed [ 1914.062269][T19386] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1914.137969][T28709] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1914.167217][T28712] vlan3: entered allmulticast mode [ 1914.185365][T28712] syz_tun: entered allmulticast mode [ 1914.278373][T19386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.307658][T19386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1914.339967][T19386] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1914.349425][T19386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.368275][T28609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1914.400187][T28609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1914.429525][T19386] usb 3-1: config 0 descriptor?? [ 1915.201326][T28609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1915.209014][T24649] Bluetooth: hci0: command tx timeout [ 1915.221483][T28609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1915.326342][T19386] usbhid 3-1:0.0: can't add hid device: -71 [ 1915.332951][T19386] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1915.353211][T19386] usb 3-1: USB disconnect, device number 32 [ 1915.553012][T13402] IPVS: stop unused estimator thread 0... [ 1915.657894][T28609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1915.783830][T28609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1915.809171][T13398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.816317][T13398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.871933][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.879110][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.889362][T19386] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1916.074506][T19386] usb 3-1: Using ep0 maxpacket: 32 [ 1916.094302][T19386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.112417][T19386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16392, setting to 1024 [ 1916.156806][T19386] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1916.165901][T19386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.509645][T19386] usb 3-1: config 0 descriptor?? [ 1916.517303][T19386] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1916.563410][T19386] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1916.600271][T20045] usb 3-1: USB disconnect, device number 33 [ 1916.623927][T20045] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1916.998345][T28609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1917.072779][T28609] veth0_vlan: entered promiscuous mode [ 1917.098273][T28609] veth1_vlan: entered promiscuous mode [ 1917.202092][T28609] veth0_macvtap: entered promiscuous mode [ 1917.224905][T20045] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1917.226783][T28609] veth1_macvtap: entered promiscuous mode [ 1917.272255][T28609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1917.291869][T28609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1917.311066][T13398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.331241][T13398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.342310][T13398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.351216][T13398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.374400][T24649] Bluetooth: hci0: command tx timeout [ 1917.428586][T20045] usb 3-1: Using ep0 maxpacket: 8 [ 1917.435274][T20045] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1917.443818][T20045] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1917.453050][T20045] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1917.504279][T13398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.518281][T17681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.526987][T15413] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1917.534714][T13398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.550082][T20045] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1917.562584][T17681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.575850][T20045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1917.588809][T20045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1917.637568][T20045] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1917.646814][T20045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.655954][T20045] usb 3-1: Product: syz [ 1917.663217][T20045] usb 3-1: Manufacturer: syz [ 1917.667940][T20045] usb 3-1: SerialNumber: syz [ 1917.675783][T20045] usb 3-1: config 0 descriptor?? [ 1917.684993][T28753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1917.716688][T15413] usb 5-1: Using ep0 maxpacket: 8 [ 1917.726228][T15413] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1917.739261][T15413] usb 5-1: string descriptor 0 read error: -22 [ 1917.745756][T15413] usb 5-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice= 0.40 [ 1917.756245][T20045] hub 3-1:0.0: bad descriptor, ignoring hub [ 1917.762780][T15413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.772912][T20045] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1917.788632][T15413] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1917.808603][T20045] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input95 [ 1917.808697][T28761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1917.818601][T15413] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1917.881718][T15413] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1917.903895][T28754] ALSA: mixer_oss: invalid OSS volume '' [ 1917.914857][T15413] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1917.943785][T15413] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1918.148059][T19386] usb 3-1: USB disconnect, device number 34 [ 1918.154031][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 1918.303064][T15413] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1919.252127][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6229'. [ 1920.143999][T24649] Bluetooth: hci0: command tx timeout [ 1920.150447][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.156793][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.157334][T19386] IPVS: starting estimator thread 0... [ 1920.363041][T28776] IPVS: using max 53 ests per chain, 127200 per kthread [ 1920.512658][T11411] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1920.523448][T11411] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1920.542407][T11411] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1920.558697][T11411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1920.570202][T11411] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1920.612454][T20045] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1920.645390][T15413] usb 5-1: USB disconnect, device number 57 [ 1920.816412][T20045] usb 2-1: Using ep0 maxpacket: 8 [ 1920.828722][T20045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1920.850546][T28784] chnl_net:caif_netlink_parms(): no params data found [ 1920.876415][T20045] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1920.895615][T20045] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1920.914547][T20045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.923147][T20045] usb 2-1: Product: syz [ 1920.927329][T20045] usb 2-1: Manufacturer: syz [ 1920.931912][T20045] usb 2-1: SerialNumber: syz [ 1920.947545][T20045] usb 2-1: config 0 descriptor?? [ 1920.969587][T28784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.976877][T28784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.984055][T28784] bridge_slave_0: entered allmulticast mode [ 1920.991506][T28784] bridge_slave_0: entered promiscuous mode [ 1920.999474][T28784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.006621][T28784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.013991][T28784] bridge_slave_1: entered allmulticast mode [ 1921.022066][T28784] bridge_slave_1: entered promiscuous mode [ 1921.051891][T28784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.064351][T28784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.091964][T28784] team0: Port device team_slave_0 added [ 1921.099656][T28784] team0: Port device team_slave_1 added [ 1921.121280][T28784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1921.128237][T28784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1921.154859][T28784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1921.166799][T28784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1921.173920][T28784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1921.177769][T15413] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1921.200333][T28784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1921.210784][T28781] netlink: 'syz.1.6234': attribute type 1 has an invalid length. [ 1921.284212][T28784] hsr_slave_0: entered promiscuous mode [ 1921.293697][T28784] hsr_slave_1: entered promiscuous mode [ 1921.326087][T28784] debugfs: 'hsr0' already exists in 'hsr' [ 1921.332811][T28784] Cannot create hsr debugfs directory [ 1921.413813][T15413] usb 1-1: Using ep0 maxpacket: 8 [ 1921.420467][T15413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1921.435339][T15413] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1921.451577][ T42] usb 2-1: USB disconnect, device number 55 [ 1921.623488][T28784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1921.631575][T15413] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1921.642659][T15413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.651309][T15413] usb 1-1: Product: syz [ 1921.655465][T15413] usb 1-1: Manufacturer: syz [ 1921.663245][T15413] usb 1-1: SerialNumber: syz [ 1921.673813][T28784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1921.679177][T15413] usb 1-1: config 0 descriptor?? [ 1921.698103][T28784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1921.710786][T28784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1921.782881][T28806] afs: Unknown parameter '' [ 1922.159303][T28795] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 1922.317179][T28784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1922.335903][T28784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1922.441203][ T29] audit: type=1400 audit(2000002791.227:1381): avc: denied { mounton } for pid=28816 comm="syz.1.6238" path="/73/file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1922.513247][T28784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1922.539055][ T5887] usb 1-1: USB disconnect, device number 93 [ 1922.575569][T15413] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1923.457400][T28819] net_ratelimit: 41 callbacks suppressed [ 1923.457414][T28819] Set syz1 is full, maxelem 65536 reached [ 1923.498031][T24649] Bluetooth: hci4: command tx timeout [ 1923.521686][T28784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1923.736886][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.744008][T13402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.752811][T15413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.764598][T15413] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1923.774392][T15413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.809100][T15413] usb 5-1: config 0 descriptor?? [ 1923.992438][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.999710][T13402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1925.256603][T28826] tipc: Started in network mode [ 1925.324603][T28826] tipc: Node identity ac07140f, cluster identity 4711 [ 1925.349065][T28826] tipc: Enabling of bearer rejected, failed to enable media [ 1925.364229][T15413] usbhid 5-1:0.0: can't add hid device: -71 [ 1925.370882][T15413] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1925.419889][T28836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28836 comm=syz.4.6243 [ 1925.581083][T15413] usb 5-1: USB disconnect, device number 58 [ 1925.668167][T24649] Bluetooth: hci4: command tx timeout [ 1925.857016][T28784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1926.175029][T28784] veth0_vlan: entered promiscuous mode [ 1926.189616][T28784] veth1_vlan: entered promiscuous mode [ 1926.222337][T28784] veth0_macvtap: entered promiscuous mode [ 1926.230332][T28784] veth1_macvtap: entered promiscuous mode [ 1926.242574][T28784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1926.255536][T28784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.267567][T13384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.279476][T13384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.289215][T13384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.299426][T13384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.349844][T13402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.366546][T13402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.390223][T13384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.399030][T13384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.890085][T24649] Bluetooth: hci4: command tx timeout [ 1930.112198][T24649] Bluetooth: hci4: command tx timeout [ 1930.620967][ T5178] udevd[5178]: worker [22142] /devices/virtual/block/nbd0 timeout; kill it [ 1930.631994][ T5178] udevd[5178]: seq 27367 '/devices/virtual/block/nbd0' killed [ 1945.332400][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 300 seconds [ 1945.343240][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 300 seconds [ 1945.354495][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 300 seconds [ 1946.184306][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 300 seconds [ 1977.477325][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 330 seconds [ 1977.488351][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 330 seconds [ 1977.499866][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 330 seconds [ 1978.327741][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 330 seconds [ 1984.998630][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.004943][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1998.160900][T11411] Bluetooth: hci5: command 0x0406 tx timeout [ 2009.616977][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 360 seconds [ 2009.627733][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 360 seconds [ 2009.638745][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 360 seconds [ 2010.492617][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 360 seconds [ 2041.761934][ T2773] block nbd0: Possible stuck request ffff888028578000: control (read@0,1024B). Runtime 390 seconds [ 2041.772746][ T2773] block nbd0: Possible stuck request ffff888028578200: control (read@1024,1024B). Runtime 390 seconds [ 2041.784014][ T2773] block nbd0: Possible stuck request ffff888028578400: control (read@2048,1024B). Runtime 390 seconds [ 2041.931430][T11411] Bluetooth: hci0: command 0x0406 tx timeout [ 2042.615146][ T2773] block nbd0: Possible stuck request ffff888028578600: control (read@3072,1024B). Runtime 390 seconds [ 2050.656962][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2050.663647][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2052.873651][T24649] Bluetooth: hci4: command 0x0406 tx timeout [ 2057.500639][ T30] INFO: task syz.3.6068:28340 blocked for more than 143 seconds. [ 2057.508421][ T30] Tainted: G L syzkaller #0 [ 2057.515145][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2057.523891][ T30] task:syz.3.6068 state:D stack:28136 pid:28340 tgid:28339 ppid:16992 task_flags:0x400040 flags:0x00080002 [ 2057.535908][ T30] Call Trace: [ 2057.539179][ T30] [ 2057.542101][ T30] __schedule+0xfee/0x6120 [ 2057.546675][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2057.551634][ T30] ? __pfx___schedule+0x10/0x10 [ 2057.556566][ T30] ? find_held_lock+0x2b/0x80 [ 2057.561237][ T30] ? schedule+0x2bf/0x390 [ 2057.565671][ T30] schedule+0xdd/0x390 [ 2057.569733][ T30] schedule_preempt_disabled+0x13/0x30 [ 2057.575330][ T30] __mutex_lock+0xc9a/0x1b90 [ 2057.580063][ T30] ? sync_bdevs+0x153/0x480 [ 2057.584971][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2057.590128][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2057.595760][ T30] ? iput.part.0+0x1a0/0xf50 [ 2057.600410][ T30] ? sync_bdevs+0x153/0x480 [ 2057.604902][ T30] sync_bdevs+0x153/0x480 [ 2057.609304][ T30] ksys_sync+0xb0/0xf0 [ 2057.613368][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2057.618215][ T30] ? do_syscall_64+0x95/0xf80 [ 2057.622904][ T30] __do_sys_sync+0xe/0x20 [ 2057.627207][ T30] do_syscall_64+0x106/0xf80 [ 2057.632008][ T30] ? clear_bhb_loop+0x40/0x90 [ 2057.636678][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2057.642610][ T30] RIP: 0033:0x7fb086f9c799 [ 2057.647014][ T30] RSP: 002b:00007fb087da5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2057.655547][ T30] RAX: ffffffffffffffda RBX: 00007fb087215fa0 RCX: 00007fb086f9c799 [ 2057.663679][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.671738][ T30] RBP: 00007fb087215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2057.679714][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2057.687847][ T30] R13: 00007fb087216038 R14: 00007fb087215fa0 R15: 00007ffdb22c4238 [ 2057.696630][ T30] [ 2057.699694][ T30] [ 2057.699694][ T30] Showing all locks held in the system: [ 2057.707478][ T30] 1 lock held by khungtaskd/30: [ 2057.712317][ T30] #0: ffffffff8e7e75a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2057.722302][ T30] 4 locks held by klogd/5167: [ 2057.727013][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 2057.737007][ T30] #1: ffff8880282e2e58 (&ei->socket.wq.wait){..-.}-{3:3}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 2057.747764][ T30] #2: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 2057.756443][ T30] #3: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 2057.766423][ T30] 2 locks held by getty/5565: [ 2057.771106][ T30] #0: ffff888033d8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2057.780894][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2057.791040][ T30] 1 lock held by udevd/22142: [ 2057.795696][ T30] #0: ffff8880284aa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2057.805581][ T30] 3 locks held by kworker/u8:7/25330: [ 2057.811023][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 2057.821048][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 2057.829753][ T30] #2: ffffffff8e67ee10 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 2057.839572][ T30] 1 lock held by syz.3.6068/28340: [ 2057.844795][ T30] #0: ffff8880284aa358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2057.854280][ T30] [ 2057.856590][ T30] ============================================= [ 2057.856590][ T30] [ 2057.865170][ T30] NMI backtrace for cpu 1 [ 2057.865186][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2057.865210][ T30] Tainted: [L]=SOFTLOCKUP [ 2057.865217][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2057.865228][ T30] Call Trace: [ 2057.865234][ T30] [ 2057.865241][ T30] dump_stack_lvl+0x100/0x190 [ 2057.865272][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2057.865293][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2057.865324][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2057.865356][ T30] sys_info+0x141/0x190 [ 2057.865380][ T30] watchdog+0xd25/0x1050 [ 2057.865417][ T30] ? __pfx_watchdog+0x10/0x10 [ 2057.865443][ T30] ? __kthread_parkme+0x18c/0x230 [ 2057.865472][ T30] ? kthread+0x13a/0x450 [ 2057.865488][ T30] ? __pfx_watchdog+0x10/0x10 [ 2057.865510][ T30] kthread+0x370/0x450 [ 2057.865526][ T30] ? __pfx_kthread+0x10/0x10 [ 2057.865545][ T30] ret_from_fork+0x754/0xd80 [ 2057.865565][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2057.865585][ T30] ? __switch_to+0x7b4/0x1120 [ 2057.865608][ T30] ? __pfx_kthread+0x10/0x10 [ 2057.865625][ T30] ret_from_fork_asm+0x1a/0x30 [ 2057.865659][ T30] [ 2057.865667][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2057.991187][ C0] NMI backtrace for cpu 0 [ 2057.991203][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2057.991223][ C0] Tainted: [L]=SOFTLOCKUP [ 2057.991231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2057.991240][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2057.991263][ C0] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 91 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2057.991277][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 2057.991289][ C0] RAX: 000000000bcf3569 RBX: ffffffff8e4975c0 RCX: ffffffff8b8ffc75 [ 2057.991300][ C0] RDX: 0000000000000000 RSI: ffffffff8de763fd RDI: ffffffff8c1b05a0 [ 2057.991309][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 2057.991318][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 2057.991327][ C0] R13: 0000000000000000 R14: ffffffff90d98f10 R15: 0000000000000000 [ 2057.991336][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 2057.991351][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2057.991361][ C0] CR2: 000056116822b660 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2057.991371][ C0] Call Trace: [ 2057.991376][ C0] [ 2057.991381][ C0] default_idle+0x9/0x10 [ 2057.991399][ C0] default_idle_call+0x6c/0xb0 [ 2057.991418][ C0] do_idle+0x43a/0x550 [ 2057.991437][ C0] ? __pfx_do_idle+0x10/0x10 [ 2057.991456][ C0] cpu_startup_entry+0x4f/0x60 [ 2057.991472][ C0] rest_init+0x251/0x260 [ 2057.991490][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2057.991507][ C0] start_kernel+0x47f/0x480 [ 2057.991529][ C0] x86_64_start_reservations+0x24/0x30 [ 2057.991543][ C0] x86_64_start_kernel+0x12b/0x130 [ 2057.991557][ C0] common_startup_64+0x13e/0x148 [ 2057.991579][ C0] [ 2057.992247][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2057.992261][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2057.992283][ T30] Tainted: [L]=SOFTLOCKUP [ 2057.992289][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2057.992298][ T30] Call Trace: [ 2057.992304][ T30] [ 2057.992311][ T30] dump_stack_lvl+0x100/0x190 [ 2057.992339][ T30] vpanic+0x552/0x970 [ 2057.992355][ T30] ? __pfx_vpanic+0x10/0x10 [ 2057.992372][ T30] ? rcu_is_watching+0x12/0xc0 [ 2057.992396][ T30] panic+0xd1/0xe0 [ 2057.992416][ T30] ? __pfx_panic+0x10/0x10 [ 2057.992435][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2057.992460][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2057.992484][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2057.992508][ T30] ? watchdog.cold+0x198/0x1ca [ 2057.992525][ T30] ? watchdog+0xd35/0x1050 [ 2057.992547][ T30] watchdog.cold+0x1a9/0x1ca [ 2057.992571][ T30] ? __pfx_watchdog+0x10/0x10 [ 2057.992593][ T30] ? __kthread_parkme+0x18c/0x230 [ 2057.992618][ T30] ? kthread+0x13a/0x450 [ 2057.992632][ T30] ? __pfx_watchdog+0x10/0x10 [ 2057.992651][ T30] kthread+0x370/0x450 [ 2057.992665][ T30] ? __pfx_kthread+0x10/0x10 [ 2057.992682][ T30] ret_from_fork+0x754/0xd80 [ 2057.992699][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2057.992717][ T30] ? __switch_to+0x7b4/0x1120 [ 2057.992737][ T30] ? __pfx_kthread+0x10/0x10 [ 2057.992754][ T30] ret_from_fork_asm+0x1a/0x30 [ 2057.992783][ T30] [ 2058.325792][ T30] Kernel Offset: disabled [ 2058.330086][ T30] Rebooting in 86400 seconds..