last executing test programs: 4m53.933519455s ago: executing program 3 (id=1282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 4m53.752661258s ago: executing program 3 (id=1285): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netpci0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10, '\x00'/16}}) 4m53.367766284s ago: executing program 3 (id=1288): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) 4m47.774491056s ago: executing program 3 (id=1320): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 4m47.218274438s ago: executing program 3 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2834d, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x8840) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r8, @ANYBLOB="8f70120b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4m45.629542078s ago: executing program 3 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000001}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000001}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000002}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000002}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002e0)=@dellink={0x10, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000001}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000001}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000002}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000002}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000500)=@in={0x2, 0x1f90, @private=0xa0000001}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000520)=@in={0x2, 0x0, @private=0xa0000002}, 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x1f90, @private=0xa0000001}, 0x10) accept(r2, 0x0, 0x0) 4m30.531604748s ago: executing program 32 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000001}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000001}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000002}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000002}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002e0)=@dellink={0x10, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000001}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000001}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa0000002}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0000002}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000500)=@in={0x2, 0x1f90, @private=0xa0000001}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000520)=@in={0x2, 0x0, @private=0xa0000002}, 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x1f90, @private=0xa0000001}, 0x10) accept(r2, 0x0, 0x0) 2m35.916235546s ago: executing program 2 (id=1991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 2m34.062878711s ago: executing program 2 (id=1994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2m33.126894789s ago: executing program 2 (id=1997): io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2004, 0x56eb, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m31.298829129s ago: executing program 2 (id=2005): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 2m27.172788714s ago: executing program 2 (id=2010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'veth1\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@null, 0x0, 'veth1\x00'}) bind$x25(r2, &(0x7f0000000500), 0x12) connect$x25(r2, &(0x7f0000000600), 0x12) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 2m25.306293023s ago: executing program 2 (id=2013): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 2m9.852343007s ago: executing program 33 (id=2013): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 7.314502807s ago: executing program 0 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) accept(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) 6.862537523s ago: executing program 0 (id=2326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) 6.463800692s ago: executing program 0 (id=2329): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 5.588621672s ago: executing program 6 (id=2331): socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 5.468384432s ago: executing program 4 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newnexthop={0x3c, 0x35, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newnexthop={0x3c, 0x35, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010202}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x34, 0x35, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x501, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x3}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x2c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa010100}, @generic={0x63, 0xa, 0x2, 0xffd4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x41}, @generic={0x95}], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x1, 0x64, &(0x7f0000000800)='\x00', &(0x7f0000000900)=""/100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.767785025s ago: executing program 0 (id=2333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x129800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x7, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x400000000000002], 0x10000, 0x392}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.762162478s ago: executing program 6 (id=2334): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000040)=@in={0x2, 0x1f40, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x1f40, @loopback}, 0x10) accept(r1, 0x0, 0x0) 4.605072301s ago: executing program 4 (id=2335): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xa94, 0x1008, 0x80000003, 0x8, 0x0, 0x3, 0xf1, 0x80008, 0x80ffa, 0x4000002, 0x0, 0x7, 0xfffffffe, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x5, 0x7, 0x20000010, 0x55, 0x10008, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1f, 0xd, 0x200, &(0x7f00000001c0)="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"}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) execve(0x0, 0x0, 0x0) 3.513292354s ago: executing program 1 (id=2337): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"]) 3.256313055s ago: executing program 6 (id=2338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 3.198860414s ago: executing program 4 (id=2339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) 3.194548535s ago: executing program 1 (id=2340): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0xb, 0x6, 0x0, 0x1, 0x3, 0x5, 0x6}, {0x80000008, 0x6, 0x4, 0x2, 0x3, 0x40, 0x549}, {0x80000007, 0x3, 0x2, 0x7, 0x1, 0x77, 0x100}, {0x40000006, 0xbc, 0x6, 0x101, 0x6, 0x6c, 0x4}, {0x4, 0xffff194c, 0x4, 0x400, 0x1, 0x7ff, 0x6}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.123758359s ago: executing program 5 (id=2341): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x20e7, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x20e7, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000500)='hello world', 0xb, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1}, 0x0) 2.871323842s ago: executing program 4 (id=2342): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x20004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readv(0xffffffffffffffff, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r4 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) io_cancel(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 2.828410343s ago: executing program 6 (id=2343): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01000000", 0x4) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="00001000003300004000000000000000", 0x10) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 2.678630082s ago: executing program 5 (id=2344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0xbb06, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000020)={0x2, 0xbb06, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200)="009c00011a2b3c4d0002000001000100000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="00a800011a2b3c4d0007000012340001000000010000000100010001000100000000", 0x22, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="002000011a2b3c4d00080000567812340100"/32, 0x20, 0x0, 0x0, 0x0) 2.481946291s ago: executing program 5 (id=2345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\n', 0x2) close(r3) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000000400)="00004e211234567800000000a10000140000000000a1000800010000", 0x1c, 0x0, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) 2.293574022s ago: executing program 5 (id=2346): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001010101", 0x13) read(r2, &(0x7f000000031c), 0x13) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 2.159024155s ago: executing program 0 (id=2347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1ffffffffffffff, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2.07388335s ago: executing program 1 (id=2348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x1, 0x1}, @assoc={0x18, 0x117, 0x11, 0x18}], 0x50}, 0x0) 1.823525247s ago: executing program 1 (id=2349): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xa94, 0x1008, 0x80000003, 0x8, 0x0, 0x3, 0xf1, 0x80008, 0x80ffa, 0x4000002, 0x0, 0x7, 0xfffffffe, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x5, 0x7, 0x20000010, 0x55, 0x10008, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1f, 0xd, 0x200, &(0x7f00000001c0)="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"}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) execve(0x0, 0x0, 0x0) 1.657723044s ago: executing program 4 (id=2350): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000"]) 790.522337ms ago: executing program 6 (id=2351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) 790.173518ms ago: executing program 5 (id=2352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x0, 0x0, 0x0, {0x2}, [@NFCTH_NAME={0x0, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0xbb06, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000220)={0x2, 0xbb06, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="009c00011a2b3c4d0001000001000000000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000400)="009c00011a2b3c4d0002000001000100000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000500)="00a800011a2b3c4d0007000012340001000000010000000100010001000100000000", 0x22, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000600)="002000011a2b3c4d00080000567812340100"/32, 0x20, 0x0, 0x0, 0x0) 685.936394ms ago: executing program 1 (id=2353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0) 536.766139ms ago: executing program 5 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 399.843462ms ago: executing program 0 (id=2355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@local, 0x1234, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'sha1\x00'}, 0xa0, 0x60, "0123456789012345678901234567890123456789"}}]}, 0x150}}, 0x0) 330.279389ms ago: executing program 4 (id=2356): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp\x00') (async) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) recvfrom$inet(r0, &(0x7f0000000600)=""/28, 0x4, 0x0, &(0x7f0000000700)={0x2, 0x0, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000600), 0x1c, 0x0, &(0x7f0000000700), 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 90.606654ms ago: executing program 6 (id=2357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x9, 0x1, 0x45, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x129800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x7, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x400000000000002], 0x10000, 0x392}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 1 (id=2358): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0xb, 0x6, 0x0, 0x1, 0x3, 0x5, 0x6}, {0x80000008, 0x6, 0x4, 0x2, 0x3, 0x40, 0x549}, {0x80000007, 0x3, 0x2, 0x7, 0x1, 0x77, 0x100}, {0x40000006, 0xbc, 0x6, 0x101, 0x6, 0x6c, 0x4}, {0x4, 0xffff194c, 0x4, 0x400, 0x1, 0x7ff, 0x6}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): or: . [ 339.367408][ T9199] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 339.389141][ T5584] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 340.217074][ T6124] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 340.239755][ T5584] usb 3-1: Using ep0 maxpacket: 32 [ 340.242457][ T5584] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 340.242483][ T5584] usb 3-1: config 0 has no interface number 0 [ 340.242529][ T5584] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.242557][ T5584] usb 3-1: config 0 interface 85 has no altsetting 0 [ 340.246088][ T5584] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 340.246118][ T5584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.246139][ T5584] usb 3-1: Product: syz [ 340.246154][ T5584] usb 3-1: Manufacturer: syz [ 340.246170][ T5584] usb 3-1: SerialNumber: syz [ 340.347102][ T6124] usb 2-1: device descriptor read/64, error -71 [ 340.359910][ T5584] usb 3-1: config 0 descriptor?? [ 340.549873][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 340.550358][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 340.550729][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 340.551270][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 340.551605][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 340.551919][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 340.607044][ T6124] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 340.737042][ T6124] usb 2-1: device descriptor read/64, error -71 [ 340.754867][ T9210] rdma_rxe: Failed to create IPv4 UDP tunnel [ 340.849011][ T6124] usb usb2-port1: attempt power cycle [ 341.005811][ T5584] appletouch 3-1:0.85: Geyser mode initialized. [ 341.022561][ T5584] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input13 [ 341.227738][ T6124] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 341.258704][ T6124] usb 2-1: device descriptor read/8, error -71 [ 341.278889][ T5714] usb 3-1: USB disconnect, device number 12 [ 341.526153][ T5714] appletouch 3-1:0.85: input: appletouch disconnected [ 341.845901][ T6124] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 341.938341][ T6124] usb 2-1: device descriptor read/8, error -71 [ 342.048744][ T9229] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 342.048883][ T9229] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 342.048959][ T9229] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 342.164388][ T6124] usb usb2-port1: unable to enumerate USB device [ 342.520367][ T9230] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 346.895318][ T9208] infiniband syz0: set active [ 346.895343][ T9208] infiniband syz0: added veth0 [ 347.106995][ T5584] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 347.260400][ T9279] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 347.260522][ T9279] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 347.260646][ T9279] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 347.275743][ T5584] usb 3-1: device descriptor read/64, error -71 [ 347.641744][ T5584] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 347.949156][ T5584] usb 3-1: device descriptor read/64, error -71 [ 348.066691][ T5584] usb usb3-port1: attempt power cycle [ 348.118372][ T9208] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 348.118402][ T9208] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 348.118437][ T9208] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 348.407164][ T5584] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 348.430147][ T5584] usb 3-1: device descriptor read/8, error -71 [ 348.605352][ T9208] RDS/IB: syz0: added [ 348.606299][ T9208] smc: adding ib device syz0 with port count 1 [ 348.606576][ T9208] smc: ib device syz0 port 1 has no pnetid [ 348.687059][ T5584] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 348.719589][ T5584] usb 3-1: device descriptor read/8, error -71 [ 348.827360][ T5584] usb usb3-port1: unable to enumerate USB device [ 353.128295][ T5584] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 353.256991][ T5584] usb 3-1: device descriptor read/64, error -71 [ 353.507938][ T5584] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 353.647052][ T5584] usb 3-1: device descriptor read/64, error -71 [ 353.757806][ T5584] usb usb3-port1: attempt power cycle [ 354.107080][ T5584] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 354.128262][ T5584] usb 3-1: device descriptor read/8, error -71 [ 354.435442][ T5584] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 354.567137][ T5584] usb 3-1: device descriptor read/8, error -71 [ 354.714292][ T5584] usb usb3-port1: unable to enumerate USB device [ 355.154459][ T9396] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 355.154582][ T9396] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 355.154654][ T9396] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 356.434729][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.481807][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.485183][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.516583][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.533558][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.501537][ T9446] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 357.501626][ T9446] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 357.501701][ T9446] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 357.677160][ T5584] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 358.077053][ T5584] usb 3-1: Using ep0 maxpacket: 32 [ 358.082984][ T5584] usb 3-1: no configurations [ 358.083062][ T5584] usb 3-1: can't read configurations, error -22 [ 358.467081][ T5584] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 358.627034][ T5584] usb 3-1: Using ep0 maxpacket: 32 [ 358.627958][ T5584] usb 3-1: no configurations [ 358.627976][ T5584] usb 3-1: can't read configurations, error -22 [ 358.631612][ T5584] usb usb3-port1: attempt power cycle [ 358.817097][ T5605] Bluetooth: hci5: command tx timeout [ 359.027117][ T5584] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 359.063899][ T5584] usb 3-1: Using ep0 maxpacket: 32 [ 359.066331][ T5584] usb 3-1: no configurations [ 359.066349][ T5584] usb 3-1: can't read configurations, error -22 [ 359.237136][ T5584] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 359.271151][ T5584] usb 3-1: Using ep0 maxpacket: 32 [ 359.272319][ T5584] usb 3-1: no configurations [ 359.272335][ T5584] usb 3-1: can't read configurations, error -22 [ 359.272703][ T5584] usb usb3-port1: unable to enumerate USB device [ 361.174441][ T5605] Bluetooth: hci5: command tx timeout [ 361.587166][ T9416] NFSD: Unable to initialize client recovery tracking! (-110) [ 361.587187][ T9416] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 361.587199][ T9416] NFSD: starting 90-second grace period (net f0000548) [ 361.693878][ T9486] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 361.693908][ T9486] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 361.693922][ T9486] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 363.285021][ T5605] Bluetooth: hci5: command tx timeout [ 364.606289][ T5861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.376289][ T5605] Bluetooth: hci5: command tx timeout [ 365.883645][ T5861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.585445][ T9578] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 367.585733][ T9578] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 367.586016][ T9578] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 368.362496][ T5861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.002788][ T5861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.661541][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.664235][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.664866][ T9419] bridge_slave_0: entered allmulticast mode [ 370.699412][ T9419] bridge_slave_0: entered promiscuous mode [ 370.715239][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.716716][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.731929][ T9419] bridge_slave_1: entered allmulticast mode [ 370.746020][ T9419] bridge_slave_1: entered promiscuous mode [ 370.935138][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.956246][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.114287][ T9419] team0: Port device team_slave_0 added [ 371.123517][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 371.163128][ T9419] team0: Port device team_slave_1 added [ 371.462354][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.462372][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.462398][ T9419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.527962][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.527980][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.528008][ T9419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.245690][ T9419] hsr_slave_0: entered promiscuous mode [ 372.250730][ T9419] hsr_slave_1: entered promiscuous mode [ 372.254998][ T9419] debugfs: 'hsr0' already exists in 'hsr' [ 372.255026][ T9419] Cannot create hsr debugfs directory [ 375.379900][ T9708] NFSD: Failed to start, no listeners configured. [ 376.642399][ T5861] bond0 (unregistering): Released all slaves [ 376.776030][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 378.733046][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.733116][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.513064][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 380.120319][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 381.430158][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 383.087249][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 383.173203][ T9419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.271091][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.274349][ T9419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.401436][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.404623][ T9419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.825934][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.137335][ T9419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.265131][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.487092][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 385.714032][ T5902] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 385.808520][ T5861] hsr_slave_0: left promiscuous mode [ 385.836987][ T5902] usb 3-1: device descriptor read/64, error -71 [ 385.867312][ T5861] hsr_slave_1: left promiscuous mode [ 386.020578][ T5861] veth1_macvtap: left promiscuous mode [ 386.020925][ T5861] veth0_macvtap: left promiscuous mode [ 386.078733][ T5902] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 386.202391][ T5861] veth1_vlan: left promiscuous mode [ 386.274621][ T5902] usb 3-1: device descriptor read/64, error -71 [ 386.295803][ T5861] veth0_vlan: left promiscuous mode [ 386.874940][ T5902] usb usb3-port1: attempt power cycle [ 387.207025][ T5902] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 387.231769][ T5902] usb 3-1: device descriptor read/8, error -71 [ 387.477050][ T5902] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 387.512039][ T5902] usb 3-1: device descriptor read/8, error -71 [ 387.638264][ T5902] usb usb3-port1: unable to enumerate USB device [ 389.355983][ T5873] smc: removing ib device syz0 [ 389.627378][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 389.717926][ T6124] syz0: Port: 1 Link DOWN [ 390.675986][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.688353][ T5902] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 390.883100][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 390.934625][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.934654][ T5902] usb 5-1: config 0 has no interfaces? [ 391.003632][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.023606][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 391.023635][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.023654][ T5902] usb 5-1: Product: syz [ 391.023669][ T5902] usb 5-1: Manufacturer: syz [ 391.023688][ T5902] usb 5-1: SerialNumber: syz [ 391.111367][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.111621][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.158607][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.158755][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.243410][ T5902] usb 5-1: config 0 descriptor?? [ 391.743553][ T5873] smbdirect: ib_dev[syz0] removed [ 393.069568][T10145] ceph: No mds server is up or the cluster is laggy [ 393.359945][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 393.414447][ T31] usb 5-1: USB disconnect, device number 23 [ 394.550695][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 394.654546][T10164] svc: failed to register lockdv1 RPC service (errno 111). [ 394.655252][T10164] lockd_up: makesock failed, error=-111 [ 394.697265][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 394.699297][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.699321][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.703655][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 394.703684][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.703705][ T10] usb 3-1: Product: syz [ 394.703721][ T10] usb 3-1: Manufacturer: syz [ 394.703736][ T10] usb 3-1: SerialNumber: syz [ 394.825459][ T10] usb 3-1: config 0 descriptor?? [ 395.073403][ T9] usb 3-1: USB disconnect, device number 29 [ 395.247851][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.323152][T10164] svc: failed to register nfsdv3 RPC service (errno 512). [ 396.323351][T10164] svc: failed to register nfsaclv3 RPC service (errno 512). [ 396.323365][T10164] failed to unregister tcp with rpcbind [ 396.459299][T10164] svc: failed to register nfsdv3 RPC service (errno 97). [ 396.459326][T10164] svc: failed to register nfsaclv3 RPC service (errno 97). [ 396.459341][T10164] failed to unregister tcp with rpcbind [ 396.694691][ T9419] veth0_vlan: entered promiscuous mode [ 396.721906][ T9419] veth1_vlan: entered promiscuous mode [ 396.908085][ T9419] veth0_macvtap: entered promiscuous mode [ 396.925925][ T9419] veth1_macvtap: entered promiscuous mode [ 397.137084][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 397.158700][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.296977][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 397.326121][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.326150][ T9] usb 5-1: config 0 has no interfaces? [ 397.346294][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 397.346327][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.346348][ T9] usb 5-1: Product: syz [ 397.346364][ T9] usb 5-1: Manufacturer: syz [ 397.346379][ T9] usb 5-1: SerialNumber: syz [ 397.392474][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.521064][ T5808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.521846][ T5808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.523240][ T5808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.523419][ T5808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.638500][ T9] usb 5-1: config 0 descriptor?? [ 398.198658][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 398.385697][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 398.406094][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.406124][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.513522][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 398.513552][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.513573][ T9] usb 3-1: Product: syz [ 398.513588][ T9] usb 3-1: Manufacturer: syz [ 398.513602][ T9] usb 3-1: SerialNumber: syz [ 399.135696][ T9] usb 3-1: config 0 descriptor?? [ 400.494187][ T6124] usb 3-1: USB disconnect, device number 30 [ 400.670639][ T5326] usb 5-1: USB disconnect, device number 24 [ 401.257010][ T5326] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 401.276070][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.276091][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.427009][ T5326] usb 5-1: Using ep0 maxpacket: 32 [ 401.461265][ T5326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.461294][ T5326] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.463674][ T5326] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 401.463704][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.463725][ T5326] usb 5-1: Product: syz [ 401.463752][ T5326] usb 5-1: Manufacturer: syz [ 401.463763][ T5326] usb 5-1: SerialNumber: syz [ 401.727483][ T5326] usb 5-1: config 0 descriptor?? [ 402.035548][ T5732] usb 5-1: USB disconnect, device number 25 [ 403.101693][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.101716][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.289751][T10294] smc: net device veth0 applied user defined pnetid SYZ0 [ 403.708028][ T5732] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 403.887155][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 403.913718][ T5732] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 403.913741][ T5732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.913755][ T5732] usb 5-1: config 0 has no interface number 0 [ 403.913786][ T5732] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.913805][ T5732] usb 5-1: config 0 interface 85 has no altsetting 0 [ 403.916619][ T5732] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 403.916650][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.916672][ T5732] usb 5-1: Product: syz [ 403.916687][ T5732] usb 5-1: Manufacturer: syz [ 403.929470][ T5732] usb 5-1: SerialNumber: syz [ 404.160470][ T5732] usb 5-1: config 0 descriptor?? [ 406.030026][ T5326] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 406.177027][ T5326] usb 3-1: Using ep0 maxpacket: 32 [ 406.180372][ T5326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.180400][ T5326] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.185502][ T5326] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 406.185535][ T5326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.185556][ T5326] usb 3-1: Product: syz [ 406.185572][ T5326] usb 3-1: Manufacturer: syz [ 406.185588][ T5326] usb 3-1: SerialNumber: syz [ 406.601430][ T31] usb 5-1: USB disconnect, device number 26 [ 406.641046][ T5326] usb 3-1: config 0 descriptor?? [ 406.750748][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.794621][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.814680][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.826004][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.842910][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.992806][ T1765] usb 3-1: USB disconnect, device number 31 [ 408.055195][ T9721] bridge_slave_1: left allmulticast mode [ 408.055231][ T9721] bridge_slave_1: left promiscuous mode [ 408.077690][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.250633][ T9721] bridge_slave_0: left allmulticast mode [ 408.250666][ T9721] bridge_slave_0: left promiscuous mode [ 408.276342][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.588126][T10305] NFSD: Failed to start, no listeners configured. [ 408.967287][ T5605] Bluetooth: hci4: command tx timeout [ 409.110028][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.144729][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.155389][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.168557][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.170474][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.617369][ T6124] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 410.787100][ T6124] usb 3-1: Using ep0 maxpacket: 32 [ 410.788984][ T6124] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 410.789011][ T6124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.789030][ T6124] usb 3-1: config 0 has no interface number 0 [ 410.789078][ T6124] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.789098][ T6124] usb 3-1: config 0 interface 85 has no altsetting 0 [ 410.791458][ T6124] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 410.791487][ T6124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.791507][ T6124] usb 3-1: Product: syz [ 410.791528][ T6124] usb 3-1: Manufacturer: syz [ 410.791539][ T6124] usb 3-1: SerialNumber: syz [ 410.800331][ T6124] usb 3-1: config 0 descriptor?? [ 411.057208][ T5605] Bluetooth: hci4: command tx timeout [ 411.078541][ T9721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.167169][ T9721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.201042][ T9721] bond0 (unregistering): Released all slaves [ 411.447033][ T5605] Bluetooth: hci1: command tx timeout [ 413.035563][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 413.127179][ T5605] Bluetooth: hci4: command tx timeout [ 413.348055][ T1765] usb 3-1: USB disconnect, device number 32 [ 413.527293][ T5605] Bluetooth: hci1: command tx timeout [ 415.208176][ T5605] Bluetooth: hci4: command tx timeout [ 415.321823][ T9721] hsr_slave_0: left promiscuous mode [ 415.390429][ T9721] hsr_slave_1: left promiscuous mode [ 415.391551][ T9721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.391729][ T9721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.462467][ T9721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.462496][ T9721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.610845][ T5605] Bluetooth: hci1: command tx timeout [ 415.664875][ T9721] veth1_macvtap: left promiscuous mode [ 415.668530][ T5732] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 415.683744][ T9721] veth0_macvtap: left promiscuous mode [ 415.684021][ T9721] veth1_vlan: left promiscuous mode [ 415.684246][ T9721] veth0_vlan: left promiscuous mode [ 415.817119][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 415.820779][ T5732] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 415.820809][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.820830][ T5732] usb 2-1: config 0 has no interface number 0 [ 415.820877][ T5732] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.820909][ T5732] usb 2-1: config 0 interface 85 has no altsetting 0 [ 415.824814][ T5732] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 415.824844][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.824865][ T5732] usb 2-1: Product: syz [ 415.824880][ T5732] usb 2-1: Manufacturer: syz [ 415.824896][ T5732] usb 2-1: SerialNumber: syz [ 415.997270][ T5732] usb 2-1: config 0 descriptor?? [ 417.700471][ T5605] Bluetooth: hci1: command tx timeout [ 418.380154][ T5326] usb 2-1: USB disconnect, device number 14 [ 422.341352][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 422.517052][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 422.520948][ T31] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 422.520976][ T31] usb 2-1: config 0 has no interface number 0 [ 422.521018][ T31] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.521046][ T31] usb 2-1: config 0 interface 85 has no altsetting 0 [ 422.523385][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 422.523415][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.523437][ T31] usb 2-1: Product: syz [ 422.523452][ T31] usb 2-1: Manufacturer: syz [ 422.523468][ T31] usb 2-1: SerialNumber: syz [ 422.589508][ T31] usb 2-1: config 0 descriptor?? [ 422.696321][ T31] appletouch 2-1:0.85: Could not find int-in endpoint [ 422.696354][ T31] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 422.716312][ T31] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 423.004610][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.005065][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.005253][T10329] bridge_slave_0: entered allmulticast mode [ 423.029272][T10329] bridge_slave_0: entered promiscuous mode [ 423.076684][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.076812][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.095288][T10329] bridge_slave_1: entered allmulticast mode [ 423.111923][T10329] bridge_slave_1: entered promiscuous mode [ 423.370461][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.420912][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.421124][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.425950][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.426316][T10359] bridge_slave_0: entered allmulticast mode [ 423.451884][T10359] bridge_slave_0: entered promiscuous mode [ 423.503789][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.503929][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.504133][T10359] bridge_slave_1: entered allmulticast mode [ 423.513975][T10359] bridge_slave_1: entered promiscuous mode [ 424.911735][ T9721] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.967899][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 425.053899][T10329] team0: Port device team_slave_0 added [ 425.136116][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 425.145763][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.145791][ T31] usb 5-1: config 0 has no interface number 0 [ 425.158455][ T5326] usb 2-1: USB disconnect, device number 15 [ 425.173171][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 425.173202][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.173223][ T31] usb 5-1: Product: syz [ 425.173238][ T31] usb 5-1: Manufacturer: syz [ 425.173254][ T31] usb 5-1: SerialNumber: syz [ 425.232299][ T31] usb 5-1: config 0 descriptor?? [ 425.262543][ T31] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 425.262572][ T31] usb 5-1: selecting invalid altsetting 1 [ 425.262589][ T31] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 425.310743][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.311181][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 425.311243][ T31] usb 5-1: media controller created [ 425.358894][T10329] team0: Port device team_slave_1 added [ 425.359158][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.397283][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.466379][ T31] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 425.466458][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 425.481828][ T31] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 425.541846][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.590909][ T31] usb 5-1: USB disconnect, device number 27 [ 425.899209][ T9721] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.149976][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.149994][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.150023][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.175143][T10359] team0: Port device team_slave_0 added [ 426.231196][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.231212][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.231232][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.314298][T10359] team0: Port device team_slave_1 added [ 426.592743][ T9721] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.770172][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.770188][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.770210][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.779534][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.779551][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.779581][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.264521][ T9721] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.356128][T10329] hsr_slave_0: entered promiscuous mode [ 428.364899][T10329] hsr_slave_1: entered promiscuous mode [ 428.467063][T10359] hsr_slave_0: entered promiscuous mode [ 428.468534][T10359] hsr_slave_1: entered promiscuous mode [ 428.469534][T10359] debugfs: 'hsr0' already exists in 'hsr' [ 428.469560][T10359] Cannot create hsr debugfs directory [ 428.732080][ T5595] svc: failed to register nfsdv3 RPC service (errno 111). [ 428.761819][ T5595] svc: failed to register nfsaclv3 RPC service (errno 111). [ 428.763015][ T5595] failed to unregister tcp with rpcbind [ 428.770835][ T5595] svc: failed to register nfsdv3 RPC service (errno 97). [ 428.770897][ T5595] svc: failed to register nfsaclv3 RPC service (errno 97). [ 428.770931][ T5595] failed to unregister tcp with rpcbind [ 430.316773][T10676] key id 000004d2 not found [ 430.837397][ T9721] bridge_slave_1: left allmulticast mode [ 430.837432][ T9721] bridge_slave_1: left promiscuous mode [ 430.848248][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.979022][ T9721] bridge_slave_0: left allmulticast mode [ 430.979058][ T9721] bridge_slave_0: left promiscuous mode [ 430.979519][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.447122][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 431.597147][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 431.600441][ T31] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 431.600469][ T31] usb 3-1: config 0 has no interface number 0 [ 431.600514][ T31] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.600543][ T31] usb 3-1: config 0 interface 85 has no altsetting 0 [ 431.603028][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 431.603057][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.603077][ T31] usb 3-1: Product: syz [ 431.603092][ T31] usb 3-1: Manufacturer: syz [ 431.603108][ T31] usb 3-1: SerialNumber: syz [ 431.694425][ T31] usb 3-1: config 0 descriptor?? [ 431.722918][ T31] appletouch 3-1:0.85: Could not find int-in endpoint [ 431.722956][ T31] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 431.724599][ T31] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 431.842372][T10702] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1854'. [ 432.238733][ T9721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.318479][ T9721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.339646][ T9721] bond0 (unregistering): Released all slaves [ 432.464064][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'. [ 433.388686][T10708] lo speed is unknown, defaulting to 1000 [ 433.774687][T10708] lo speed is unknown, defaulting to 1000 [ 433.815350][T10708] lo speed is unknown, defaulting to 1000 [ 434.127837][T10708] infiniband syz0: set active [ 434.127854][T10708] infiniband syz0: added lo [ 434.131352][T10708] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 434.148390][T10708] infiniband syz0: Couldn't open port 1 [ 434.151424][T10708] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 434.151453][T10708] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 434.151485][T10708] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 434.253138][ T5326] lo speed is unknown, defaulting to 1000 [ 434.300613][T10329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.345799][ T5326] usb 3-1: USB disconnect, device number 33 [ 434.510981][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.654393][T10708] RDS/IB: syz0: added [ 434.654491][T10708] smc: adding ib device syz0 with port count 1 [ 434.654518][T10708] smc: ib device syz0 port 1 has no pnetid [ 434.697553][T10329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.767022][T10717] NFSD: Unable to initialize client recovery tracking! (-110) [ 434.767043][T10717] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 434.767056][T10717] NFSD: starting 90-second grace period (net f00003c4) [ 434.942366][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.983170][T10329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.985266][ T9] lo speed is unknown, defaulting to 1000 [ 435.075358][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.088561][T10708] lo speed is unknown, defaulting to 1000 [ 435.092174][T10329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.191804][T10329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.487237][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 435.584462][T10708] lo speed is unknown, defaulting to 1000 [ 436.087935][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 436.220299][T10754] bridge0: port 3(veth0) entered blocking state [ 436.220439][T10754] bridge0: port 3(veth0) entered disabled state [ 436.220686][T10754] veth0: entered allmulticast mode [ 436.265823][T10754] veth0: entered promiscuous mode [ 436.306717][T10754] bridge0: port 3(veth0) entered blocking state [ 436.306995][T10754] bridge0: port 3(veth0) entered forwarding state [ 436.320332][T10759] bridge0: port 4(veth1) entered blocking state [ 436.320465][T10759] bridge0: port 4(veth1) entered disabled state [ 436.321058][T10759] veth1: entered allmulticast mode [ 436.351428][T10759] veth1: entered promiscuous mode [ 436.352246][T10759] bridge0: port 4(veth1) entered blocking state [ 436.352386][T10759] bridge0: port 4(veth1) entered forwarding state [ 436.473581][T10329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.699516][T10708] lo speed is unknown, defaulting to 1000 [ 436.932710][T10329] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.992991][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.994781][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.484440][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.484580][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.769630][T10708] lo speed is unknown, defaulting to 1000 [ 439.233560][T10708] lo speed is unknown, defaulting to 1000 [ 439.912607][ T5732] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 440.079388][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 440.082303][ T5732] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 440.082332][ T5732] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 440.082355][ T5732] usb 3-1: config 179 has no interface number 0 [ 440.082402][ T5732] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 440.082431][ T5732] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 440.082461][ T5732] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 440.082508][ T5732] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 440.082532][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.190134][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.190208][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.222261][T10825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.379920][T10708] lo speed is unknown, defaulting to 1000 [ 440.480533][ T5732] usb 3-1: USB disconnect, device number 34 [ 440.496486][T10329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.835571][T10359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 440.958836][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.981207][T10359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.146274][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.183179][T10359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.355860][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.374229][T10359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.476412][T10359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.881903][T10329] veth0_vlan: entered promiscuous mode [ 442.121264][ T5732] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 442.172691][T10329] veth1_vlan: entered promiscuous mode [ 442.235349][T10881] key id 00000000 not found [ 442.307048][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 442.309880][ T5732] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 442.309910][ T5732] usb 5-1: config 0 has no interface number 0 [ 442.309958][ T5732] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.309995][ T5732] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.310021][ T5732] usb 5-1: config 0 interface 85 has no altsetting 0 [ 442.312737][ T5732] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 442.312768][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.312791][ T5732] usb 5-1: Product: syz [ 442.312808][ T5732] usb 5-1: Manufacturer: syz [ 442.312824][ T5732] usb 5-1: SerialNumber: syz [ 442.604809][ T5732] usb 5-1: config 0 descriptor?? [ 442.828542][ T9721] hsr_slave_0: left promiscuous mode [ 442.875408][ T9721] hsr_slave_1: left promiscuous mode [ 442.876348][ T9721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.876372][ T9721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.940472][ T9721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.940501][ T9721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.014968][ T5732] appletouch 5-1:0.85: Geyser mode initialized. [ 443.025982][ T5732] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14 [ 443.078435][ T9721] veth1_macvtap: left promiscuous mode [ 443.099650][ T9721] veth0_macvtap: left promiscuous mode [ 443.099844][ T9721] veth1_vlan: left promiscuous mode [ 443.099970][ T9721] veth0_vlan: left promiscuous mode [ 443.267633][ T5707] usb 5-1: USB disconnect, device number 28 [ 443.489802][ T5707] appletouch 5-1:0.85: input: appletouch disconnected [ 444.478142][ T9721] team0 (unregistering): Port device team_slave_1 removed [ 444.541718][ T9721] team0 (unregistering): Port device team_slave_0 removed [ 444.994366][T10329] veth0_macvtap: entered promiscuous mode [ 445.045977][T10329] veth1_macvtap: entered promiscuous mode [ 445.133729][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.170252][T10329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.281379][T10329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.443203][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.445211][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.473714][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.499160][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.499465][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.584089][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.584227][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.738437][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.738629][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.787475][ T6124] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 446.227040][ T6124] usb 3-1: Using ep0 maxpacket: 32 [ 446.229414][ T6124] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 446.229442][ T6124] usb 3-1: config 0 has no interface number 0 [ 446.229489][ T6124] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.229518][ T6124] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.229542][ T6124] usb 3-1: config 0 interface 85 has no altsetting 0 [ 446.232531][ T6124] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 446.232561][ T6124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.232584][ T6124] usb 3-1: Product: syz [ 446.232599][ T6124] usb 3-1: Manufacturer: syz [ 446.232623][ T6124] usb 3-1: SerialNumber: syz [ 446.353759][ T6124] usb 3-1: config 0 descriptor?? [ 446.853743][ T6124] appletouch 3-1:0.85: Geyser mode initialized. [ 446.860940][ T6124] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input15 [ 447.298925][ T6124] usb 3-1: USB disconnect, device number 35 [ 447.474072][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.474096][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.905690][ T6124] appletouch 3-1:0.85: input: appletouch disconnected [ 447.952402][T10942] FAULT_INJECTION: forcing a failure. [ 447.952402][T10942] name fail_futex, interval 1, probability 0, space 0, times 1 [ 447.952451][T10942] CPU: 1 UID: 0 PID: 10942 Comm: syz.4.1911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.952481][T10942] Tainted: [L]=SOFTLOCKUP [ 447.952487][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.952506][T10942] Call Trace: [ 447.952513][T10942] [ 447.952520][T10942] dump_stack_lvl+0xe8/0x150 [ 447.952560][T10942] should_fail_ex+0x467/0x600 [ 447.952593][T10942] get_futex_key+0x1b3/0x1580 [ 447.952625][T10942] ? __pfx_get_futex_key+0x10/0x10 [ 447.952646][T10942] ? debug_object_free+0x29c/0x340 [ 447.952672][T10942] futex_wake+0x119/0x600 [ 447.952701][T10942] ? __pfx_futex_wait+0x10/0x10 [ 447.952733][T10942] ? __pfx_futex_wake+0x10/0x10 [ 447.952764][T10942] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 447.952801][T10942] ? ktime_get+0x45/0x220 [ 447.952825][T10942] do_futex+0x458/0x4e0 [ 447.952852][T10942] ? __pfx_do_futex+0x10/0x10 [ 447.952872][T10942] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.952893][T10942] ? ktime_get+0x45/0x220 [ 447.952914][T10942] __se_sys_futex+0x3a8/0x450 [ 447.952942][T10942] ? __pfx___se_sys_futex+0x10/0x10 [ 447.952965][T10942] ? rcu_is_watching+0x15/0xb0 [ 447.952993][T10942] ? __x64_sys_futex+0x21/0xf0 [ 447.953016][T10942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.953045][T10942] do_syscall_64+0x174/0x580 [ 447.953068][T10942] ? trace_irq_disable+0x3b/0x140 [ 447.953087][T10942] ? clear_bhb_loop+0x40/0x90 [ 447.953109][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.953135][T10942] RIP: 0033:0x7f3d1e87de99 [ 447.953158][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.953175][T10942] RSP: 002b:00007ffe41d653a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 447.953202][T10942] RAX: ffffffffffffffda RBX: 00007f3d1eb06090 RCX: 00007f3d1e87de99 [ 447.953216][T10942] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d1eb0609c [ 447.953228][T10942] RBP: 00007f3d1eb06090 R08: 0000000000000004 R09: 00007f3d1eb05fb0 [ 447.953240][T10942] R10: 00007f3d1eb05fa0 R11: 0000000000000246 R12: 0000000000000001 [ 447.953252][T10942] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f3d1eb05fa0 [ 447.953279][T10942] [ 448.027666][T10942] FAULT_INJECTION: forcing a failure. [ 448.027666][T10942] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 448.027766][T10942] CPU: 1 UID: 0 PID: 10942 Comm: syz.4.1911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.027850][T10942] Tainted: [L]=SOFTLOCKUP [ 448.027871][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.027903][T10942] Call Trace: [ 448.027925][T10942] [ 448.027955][T10942] dump_stack_lvl+0xe8/0x150 [ 448.028063][T10942] should_fail_ex+0x467/0x600 [ 448.028164][T10942] _copy_from_user+0x2d/0xb0 [ 448.028246][T10942] get_timespec64+0x96/0x1b0 [ 448.028318][T10942] ? __pfx_get_timespec64+0x10/0x10 [ 448.028394][T10942] ? ktime_get+0x45/0x220 [ 448.028468][T10942] __se_sys_futex+0x19a/0x450 [ 448.028559][T10942] ? __pfx___se_sys_futex+0x10/0x10 [ 448.028634][T10942] ? rcu_is_watching+0x15/0xb0 [ 448.028728][T10942] ? __x64_sys_futex+0x21/0xf0 [ 448.028804][T10942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.028876][T10942] do_syscall_64+0x174/0x580 [ 448.028970][T10942] ? trace_irq_disable+0x3b/0x140 [ 448.029039][T10942] ? clear_bhb_loop+0x40/0x90 [ 448.029115][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.029170][T10942] RIP: 0033:0x7f3d1e87de99 [ 448.029232][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.029284][T10942] RSP: 002b:00007ffe41d65428 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 448.029341][T10942] RAX: ffffffffffffffda RBX: 000000000006d452 RCX: 00007f3d1e87de99 [ 448.029384][T10942] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3d1eb0609c [ 448.029417][T10942] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 448.029459][T10942] R10: 00007ffe41d65530 R11: 0000000000000246 R12: 00007ffe41d65550 [ 448.029501][T10942] R13: 00007f3d1eb0609c R14: 000000000006d484 R15: 00007ffe41d65530 [ 448.029582][T10942] [ 448.333943][T10942] FAULT_INJECTION: forcing a failure. [ 448.333943][T10942] name failslab, interval 1, probability 0, space 0, times 1 [ 448.349327][T10942] CPU: 1 UID: 0 PID: 10942 Comm: syz.4.1911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.349441][T10942] Tainted: [L]=SOFTLOCKUP [ 448.349461][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.349494][T10942] Call Trace: [ 448.349515][T10942] [ 448.349543][T10942] dump_stack_lvl+0xe8/0x150 [ 448.349646][T10942] should_fail_ex+0x467/0x600 [ 448.349758][T10942] should_failslab+0xa8/0x100 [ 448.349831][T10942] kmem_cache_alloc_noprof+0xa4/0x650 [ 448.349885][T10942] ? mas_alloc_nodes+0x291/0x350 [ 448.349948][T10942] ? mas_alloc_nodes+0x291/0x350 [ 448.350039][T10942] mas_alloc_nodes+0x291/0x350 [ 448.350126][T10942] mas_preallocate+0x2cf/0x630 [ 448.350212][T10942] ? __pfx_mas_preallocate+0x10/0x10 [ 448.350308][T10942] ? anon_vma_name+0x61/0x210 [ 448.350391][T10942] ? __mas_set_range+0x11a/0x3a0 [ 448.350492][T10942] __split_vma+0x33d/0xa40 [ 448.350609][T10942] ? __pfx___split_vma+0x10/0x10 [ 448.350777][T10942] vma_modify+0x8b7/0x1ec0 [ 448.350894][T10942] vma_modify_flags+0x24b/0x330 [ 448.350978][T10942] ? __pfx_vma_modify_flags+0x10/0x10 [ 448.351087][T10942] ? rcu_is_watching+0x15/0xb0 [ 448.351155][T10942] ? percpu_counter_add_batch+0xec/0x1d0 [ 448.351257][T10942] ? __vm_enough_memory+0x11a/0x380 [ 448.351355][T10942] mprotect_fixup+0x624/0xb10 [ 448.351461][T10942] ? __pfx_mprotect_fixup+0x10/0x10 [ 448.351536][T10942] ? mas_next_slot+0xc94/0xd70 [ 448.351671][T10942] do_mprotect_pkey+0x9d3/0xcd0 [ 448.351754][T10942] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.351858][T10942] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 448.351978][T10942] ? vm_mmap_pgoff+0x35d/0x4e0 [ 448.352114][T10942] ? __pfx___se_sys_futex+0x10/0x10 [ 448.352201][T10942] ? rcu_is_watching+0x15/0xb0 [ 448.352289][T10942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.352353][T10942] __x64_sys_mprotect+0x80/0x90 [ 448.352438][T10942] do_syscall_64+0x174/0x580 [ 448.352510][T10942] ? trace_irq_disable+0x3b/0x140 [ 448.352573][T10942] ? clear_bhb_loop+0x40/0x90 [ 448.352647][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.352703][T10942] RIP: 0033:0x7f3d1e87dc97 [ 448.352762][T10942] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.352814][T10942] RSP: 002b:00007ffe41d65268 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 448.352864][T10942] RAX: ffffffffffffffda RBX: 00007f3d1c6716c0 RCX: 00007f3d1e87dc97 [ 448.352901][T10942] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f3d1c652000 [ 448.352946][T10942] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 448.352979][T10942] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe41d653c0 [ 448.353013][T10942] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 448.353101][T10942] [ 448.930240][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.930264][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.124309][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.786772][T10359] veth0_vlan: entered promiscuous mode [ 452.806068][T10359] veth1_vlan: entered promiscuous mode [ 453.808046][T10359] veth0_macvtap: entered promiscuous mode [ 453.845665][T10359] veth1_macvtap: entered promiscuous mode [ 453.995239][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.107460][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.182862][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.183545][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.183809][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.183851][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.740502][ T5727] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 457.111968][ T5727] usb 1-1: Using ep0 maxpacket: 32 [ 457.118265][ T5727] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 457.118296][ T5727] usb 1-1: config 0 has no interface number 0 [ 457.118334][ T5727] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.118360][ T5727] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 457.118383][ T5727] usb 1-1: config 0 interface 85 has no altsetting 0 [ 457.125836][ T5727] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 457.125858][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.125873][ T5727] usb 1-1: Product: syz [ 457.125883][ T5727] usb 1-1: Manufacturer: syz [ 457.125894][ T5727] usb 1-1: SerialNumber: syz [ 457.184498][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.184520][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.291483][ T5727] usb 1-1: config 0 descriptor?? [ 457.705843][ T5727] appletouch 1-1:0.85: Geyser mode initialized. [ 457.731285][ T5727] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input16 [ 457.886319][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.886342][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.974471][ T5707] usb 1-1: USB disconnect, device number 7 [ 458.332567][ T5707] appletouch 1-1:0.85: input: appletouch disconnected [ 462.537082][ T6124] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 462.687312][ T6124] usb 2-1: Using ep0 maxpacket: 32 [ 462.689594][ T6124] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 462.689623][ T6124] usb 2-1: config 0 has no interface number 0 [ 462.689671][ T6124] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.689698][ T6124] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 462.689722][ T6124] usb 2-1: config 0 interface 85 has no altsetting 0 [ 462.695851][ T6124] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 462.695886][ T6124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.695908][ T6124] usb 2-1: Product: syz [ 462.695924][ T6124] usb 2-1: Manufacturer: syz [ 462.695940][ T6124] usb 2-1: SerialNumber: syz [ 462.860922][ T6124] usb 2-1: config 0 descriptor?? [ 463.263770][T11116] syz_tun: entered promiscuous mode [ 463.277289][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 463.277339][T11116] syz_tun: left promiscuous mode [ 463.319672][ T6124] appletouch 2-1:0.85: Geyser mode initialized. [ 463.340919][ T6124] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input17 [ 463.536345][ T6124] usb 2-1: USB disconnect, device number 16 [ 464.151640][T11129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1965'. [ 464.156378][ T6124] appletouch 2-1:0.85: input: appletouch disconnected [ 465.040036][T11137] fuse: Bad value for 'fd' [ 467.083393][T11154] key id 00000000 not found [ 467.319944][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 468.490750][T11165] syz.4.1981 (11165) used greatest stack depth: 17936 bytes left [ 468.651141][T11169] netlink: 'syz.5.1980': attribute type 2 has an invalid length. [ 468.696970][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 468.847029][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 468.849585][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 468.849613][ T9] usb 1-1: config 0 has no interface number 0 [ 468.849669][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.849698][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 468.872836][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 468.872923][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.872987][ T9] usb 1-1: Product: syz [ 468.873029][ T9] usb 1-1: Manufacturer: syz [ 468.873071][ T9] usb 1-1: SerialNumber: syz [ 469.049366][ T9] usb 1-1: config 0 descriptor?? [ 469.267803][ T9] appletouch 1-1:0.85: Failed to read mode from device. [ 469.268118][ T9] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 469.347200][T11169] : entered promiscuous mode [ 469.565091][ T9] usb 1-1: USB disconnect, device number 8 [ 469.961384][T11189] key id 00000000 not found [ 469.989212][T11190] syz_tun: entered promiscuous mode [ 469.991569][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 469.992077][T11190] syz_tun: left promiscuous mode [ 473.940080][T11234] syz_tun: entered promiscuous mode [ 473.942974][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 473.943040][T11234] syz_tun: left promiscuous mode [ 474.219368][ T36] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 474.274178][T11241] tipc: Started in network mode [ 474.274238][T11241] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 474.407002][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 474.409681][ T36] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 474.409708][ T36] usb 2-1: config 0 has no interface number 0 [ 474.409753][ T36] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.409782][ T36] usb 2-1: config 0 interface 85 has no altsetting 0 [ 474.480656][ T36] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 474.480692][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.480715][ T36] usb 2-1: Product: syz [ 474.480731][ T36] usb 2-1: Manufacturer: syz [ 474.480747][ T36] usb 2-1: SerialNumber: syz [ 474.545813][ T36] usb 2-1: config 0 descriptor?? [ 476.873272][ T36] appletouch 2-1:0.85: Failed to read mode from device. [ 476.873504][ T36] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 476.948960][ T36] usb 2-1: USB disconnect, device number 17 [ 479.079233][T11268] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1993'. [ 479.627543][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.628572][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.629173][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.629632][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.630168][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.630677][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.632124][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.632645][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.633134][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 479.716479][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.323794][ C0] net_ratelimit: 2639 callbacks suppressed [ 484.323817][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.324489][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.326739][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 484.383509][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 484.384283][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.385019][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.385985][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 484.447813][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 484.448564][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 484.487064][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.329030][ C0] net_ratelimit: 4402 callbacks suppressed [ 489.329052][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.329690][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.330271][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.333606][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.334241][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.338128][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.339641][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.341097][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 489.342603][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 489.344005][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 491.370499][ T5707] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 491.706431][ T5707] usb 2-1: Using ep0 maxpacket: 32 [ 491.716398][ T5707] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 491.716429][ T5707] usb 2-1: config 0 has no interface number 0 [ 491.716474][ T5707] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.716503][ T5707] usb 2-1: config 0 interface 85 has no altsetting 0 [ 491.767281][ T5707] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 491.767315][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.767336][ T5707] usb 2-1: Product: syz [ 491.767351][ T5707] usb 2-1: Manufacturer: syz [ 491.767367][ T5707] usb 2-1: SerialNumber: syz [ 491.817948][ T5707] usb 2-1: config 0 descriptor?? [ 491.873179][T11350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2029'. [ 492.113981][ T5707] appletouch 2-1:0.85: Failed to read mode from device. [ 492.114154][ T5707] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 492.287080][ T5707] usb 2-1: USB disconnect, device number 18 [ 495.083430][ C0] net_ratelimit: 2712 callbacks suppressed [ 495.083445][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 495.083876][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 495.084307][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 495.084783][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 495.085177][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 495.085547][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 495.085919][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 495.086319][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 495.086685][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 495.087173][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 496.863281][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.927227][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.933161][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.946087][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.953204][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.658631][T11395] tipc: Started in network mode [ 498.658667][T11395] tipc: Node identity ac1414aa, cluster identity 4711 [ 499.127088][ T5605] Bluetooth: hci5: command tx timeout [ 499.389016][T11395] tipc: New replicast peer: 172.20.20.187 [ 499.467944][T11395] tipc: Enabled bearer , priority 10 [ 499.635538][T11395] syz.1.2043 (11395) used greatest stack depth: 17864 bytes left [ 501.075681][ T36] tipc: Node number set to 2886997162 [ 501.106996][ C0] net_ratelimit: 2099 callbacks suppressed [ 501.107021][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.107675][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.108270][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 501.108938][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 501.109786][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.110355][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.118268][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 501.118837][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 501.119333][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.120357][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 501.216882][ T5605] Bluetooth: hci5: command tx timeout [ 502.062415][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.094014][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.283804][T11421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2047'. [ 502.285205][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 503.162063][T11369] lo speed is unknown, defaulting to 1000 [ 503.287040][ T5605] Bluetooth: hci5: command tx timeout [ 505.875193][ T5605] Bluetooth: hci5: command tx timeout [ 506.516974][ C0] net_ratelimit: 2257 callbacks suppressed [ 506.516994][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 506.517673][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 506.521677][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 506.522190][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 506.522831][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 506.547457][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 506.558258][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 506.563384][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 506.567832][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 506.595933][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 509.656977][ T5707] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 509.949132][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 509.953034][ T5707] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 509.953059][ T5707] usb 2-1: config 179 has no interface number 0 [ 509.953090][ T5707] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 509.953108][ T5707] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 509.953128][ T5707] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 509.953145][ T5707] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 509.953174][ T5707] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 509.953191][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.189788][T11471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.489674][ T5707] usb 2-1: USB disconnect, device number 19 [ 511.527306][ C0] net_ratelimit: 3710 callbacks suppressed [ 511.527329][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 511.527897][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 511.531144][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 511.531723][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 511.532279][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 511.534443][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 511.535016][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 511.543143][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 511.549299][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 511.556365][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 514.018893][T11511] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2069'. [ 514.076933][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2069'. [ 514.831077][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.833183][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.833410][T11369] bridge_slave_0: entered allmulticast mode [ 514.866450][T11369] bridge_slave_0: entered promiscuous mode [ 514.884477][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.886310][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.886536][T11369] bridge_slave_1: entered allmulticast mode [ 514.930503][T11369] bridge_slave_1: entered promiscuous mode [ 515.247129][ T36] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 515.436976][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 515.439832][ T36] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 515.439866][ T36] usb 1-1: config 179 has no interface number 0 [ 515.439923][ T36] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 515.439952][ T36] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 515.439982][ T36] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 515.441865][ T36] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 515.441917][ T36] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 515.441944][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.475528][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.574480][T11518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 515.650270][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.793731][ T36] usb 1-1: USB disconnect, device number 9 [ 516.083157][T11369] team0: Port device team_slave_0 added [ 516.086371][T11369] team0: Port device team_slave_1 added [ 516.309355][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.309374][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.309406][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.351258][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.351311][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.351397][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.544215][ C0] net_ratelimit: 2976 callbacks suppressed [ 516.544232][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 516.544665][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 516.545151][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 516.552318][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 516.552973][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 516.576700][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 516.584255][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 516.594171][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 516.612129][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 516.613669][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 518.086054][T11369] hsr_slave_0: entered promiscuous mode [ 518.097350][T11369] hsr_slave_1: entered promiscuous mode [ 518.125444][T11369] debugfs: 'hsr0' already exists in 'hsr' [ 518.125474][T11369] Cannot create hsr debugfs directory [ 521.551214][ C0] net_ratelimit: 2361 callbacks suppressed [ 521.551234][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 521.559352][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 521.560919][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 521.562452][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 521.563835][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 521.565153][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 521.566541][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 521.568174][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 521.569409][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 521.570754][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 521.829949][T11369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.069660][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.089667][T11369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.262901][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.310683][T11369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.653089][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.253420][T11369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.416356][T11369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.096943][ T36] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 525.247002][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 525.249718][ T36] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 525.249744][ T36] usb 5-1: config 0 has no interface number 0 [ 525.295555][ T36] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 525.295589][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.295611][ T36] usb 5-1: Product: syz [ 525.295627][ T36] usb 5-1: Manufacturer: syz [ 525.295659][ T36] usb 5-1: SerialNumber: syz [ 525.371487][ T36] usb 5-1: config 0 descriptor?? [ 525.413706][ T36] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 525.413805][ T36] usb 5-1: selecting invalid altsetting 1 [ 525.413824][ T36] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 525.506496][ T36] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 525.519762][ T36] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 525.519882][ T36] usb 5-1: media controller created [ 525.553847][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.631306][ T36] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 525.631365][ T36] zl10353_read_register: readreg error (reg=127, ret==-71) [ 525.631965][ T36] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 525.792948][ T36] usb 5-1: USB disconnect, device number 29 [ 526.562600][ C0] net_ratelimit: 2081 callbacks suppressed [ 526.562625][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 526.563270][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 526.563910][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 526.564571][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 526.565306][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 526.565951][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 526.566585][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 526.568496][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 526.570154][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 526.571808][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 526.742317][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.988682][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.197313][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.198877][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.258216][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.258513][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.896114][T11627] Bluetooth: hci4: command 0x0406 tx timeout [ 531.567885][ C0] net_ratelimit: 1478 callbacks suppressed [ 531.567910][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 531.568498][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 531.572149][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 531.572755][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 531.573323][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 531.581023][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 531.581630][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 531.585546][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 531.586130][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 531.590420][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 534.406961][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 534.446956][ T5714] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 534.656282][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 534.662585][ T5714] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.662611][ T5714] usb 2-1: config 0 has no interface number 0 [ 534.681895][ T5714] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 534.681926][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.681956][ T5714] usb 2-1: Product: syz [ 534.681972][ T5714] usb 2-1: Manufacturer: syz [ 534.681988][ T5714] usb 2-1: SerialNumber: syz [ 534.752331][ T5714] usb 2-1: config 0 descriptor?? [ 535.240009][ T5714] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 535.240036][ T5714] usb 2-1: selecting invalid altsetting 1 [ 535.240052][ T5714] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 535.333917][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.661090][ T5714] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 535.661557][ T5714] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 535.661610][ T5714] usb 2-1: media controller created [ 535.802640][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.207337][ T5714] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 536.207397][ T5714] zl10353_read_register: readreg error (reg=127, ret==-71) [ 536.207873][ T5714] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 536.577129][ C0] net_ratelimit: 3477 callbacks suppressed [ 536.577147][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 536.577560][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 536.577981][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 536.578374][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 536.578737][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 536.579116][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 536.579513][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 536.579882][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 536.580283][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 536.580649][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 539.506312][ T5714] usb 2-1: USB disconnect, device number 20 [ 540.512274][T11369] veth0_vlan: entered promiscuous mode [ 540.919446][T11369] veth1_vlan: entered promiscuous mode [ 541.400629][T11369] veth0_macvtap: entered promiscuous mode [ 541.463942][T11369] veth1_macvtap: entered promiscuous mode [ 541.599314][ C0] net_ratelimit: 3781 callbacks suppressed [ 541.599340][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 541.599987][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 541.600475][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 541.601015][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 541.601453][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 541.601948][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 541.602420][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 541.602860][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 541.603298][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 541.603744][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 542.663588][T11369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.775012][T11369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.886132][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.938341][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.939409][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.939457][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.008916][ T6124] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 544.168398][ T6124] usb 1-1: Using ep0 maxpacket: 32 [ 544.173681][ T6124] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.173708][ T6124] usb 1-1: config 0 has no interface number 0 [ 544.256328][ T6124] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 544.256361][ T6124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.256382][ T6124] usb 1-1: Product: syz [ 544.256398][ T6124] usb 1-1: Manufacturer: syz [ 544.256413][ T6124] usb 1-1: SerialNumber: syz [ 544.364723][ T6124] usb 1-1: config 0 descriptor?? [ 544.394424][ T6124] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 544.394454][ T6124] usb 1-1: selecting invalid altsetting 1 [ 544.394472][ T6124] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 544.557160][ T6124] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 544.557673][ T6124] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 544.557727][ T6124] usb 1-1: media controller created [ 544.795012][ T6124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.148550][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.148573][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.250167][ T6124] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 545.250226][ T6124] zl10353_read_register: readreg error (reg=127, ret==-71) [ 545.250725][ T6124] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 545.354190][ T6124] usb 1-1: USB disconnect, device number 10 [ 547.565697][ C0] net_ratelimit: 2111 callbacks suppressed [ 547.565722][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 547.566482][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 547.567217][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 547.568069][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 547.572231][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 547.572996][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 547.573685][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 547.574355][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 547.575084][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 547.575779][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 548.460876][T11638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.460899][T11638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.566822][ C0] net_ratelimit: 3602 callbacks suppressed [ 552.566843][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 552.568103][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 552.569077][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 552.569647][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 552.570255][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 552.571722][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 552.572636][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 552.573196][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 552.573855][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 552.574874][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 553.156965][T11728] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 553.696900][T11728] usb 7-1: Using ep0 maxpacket: 32 [ 553.699206][T11728] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.699230][T11728] usb 7-1: config 0 has no interface number 0 [ 553.712711][T11728] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 553.712742][T11728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.712764][T11728] usb 7-1: Product: syz [ 553.712780][T11728] usb 7-1: Manufacturer: syz [ 553.712796][T11728] usb 7-1: SerialNumber: syz [ 553.876185][T11728] usb 7-1: config 0 descriptor?? [ 553.907520][T11728] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 553.907552][T11728] usb 7-1: selecting invalid altsetting 1 [ 553.907569][T11728] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 553.915720][T11728] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 553.916118][T11728] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 553.916201][T11728] usb 7-1: media controller created [ 553.985055][T11728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.164655][T11728] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 554.164712][T11728] zl10353_read_register: readreg error (reg=127, ret==-71) [ 554.189467][T11728] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 554.258463][T11728] usb 7-1: USB disconnect, device number 2 [ 554.598553][ T5326] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 554.764382][ T5326] usb 5-1: Using ep0 maxpacket: 32 [ 554.773191][ T5326] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 554.773211][ T5326] usb 5-1: config 0 has no interface number 0 [ 554.773244][ T5326] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.773264][ T5326] usb 5-1: config 0 interface 85 has no altsetting 0 [ 554.811904][ T5326] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 554.811937][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.811960][ T5326] usb 5-1: Product: syz [ 554.811975][ T5326] usb 5-1: Manufacturer: syz [ 554.811992][ T5326] usb 5-1: SerialNumber: syz [ 554.911342][ T5326] usb 5-1: config 0 descriptor?? [ 555.353180][ T5326] appletouch 5-1:0.85: Failed to read mode from device. [ 555.353348][ T5326] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 555.429232][ T5732] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 557.107045][ T5732] usb 7-1: Using ep0 maxpacket: 8 [ 557.109445][ T5732] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 557.109488][ T5732] usb 7-1: config 179 has no interface number 0 [ 557.109551][ T5732] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 557.109580][ T5732] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 557.109610][ T5732] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 557.109639][ T5732] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 557.109669][ T5732] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 557.109716][ T5732] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 557.109741][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.267512][T11799] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 557.720597][ C0] net_ratelimit: 5044 callbacks suppressed [ 557.720620][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 557.911341][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 557.941549][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.968874][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.969495][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 558.046842][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 558.047530][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 558.055553][ T5326] usb 5-1: USB disconnect, device number 30 [ 558.066891][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 558.067776][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 558.086820][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 558.391705][ T5707] usb 7-1: USB disconnect, device number 3 [ 558.391705][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 558.391772][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 561.687178][ T5732] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 561.913122][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 562.292563][ T5732] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 562.292604][ T5732] usb 1-1: config 0 has no interface number 0 [ 562.292651][ T5732] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 562.292680][ T5732] usb 1-1: config 0 interface 85 has no altsetting 0 [ 562.344634][ T5732] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 562.344666][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.344688][ T5732] usb 1-1: Product: syz [ 562.344703][ T5732] usb 1-1: Manufacturer: syz [ 562.344718][ T5732] usb 1-1: SerialNumber: syz [ 562.402575][ T5732] usb 1-1: config 0 descriptor?? [ 562.640948][ T5732] appletouch 1-1:0.85: Failed to read mode from device. [ 562.641192][ T5732] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 562.726974][ C0] net_ratelimit: 2527 callbacks suppressed [ 562.726997][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.727585][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 562.728171][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 562.728761][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.729321][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.729963][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 562.730564][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 562.731127][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.731706][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.732276][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 563.072835][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.076672][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.223823][ T5732] usb 1-1: USB disconnect, device number 11 [ 566.200478][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2175'. [ 566.201180][T11861] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2175'. [ 569.347234][ C0] net_ratelimit: 2272 callbacks suppressed [ 569.347259][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 569.347897][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.348689][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.349280][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 569.349903][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 569.350481][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.351043][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 569.351694][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 569.352262][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 569.352829][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 571.566932][ T5326] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 571.756927][ T5326] usb 7-1: Using ep0 maxpacket: 32 [ 572.196559][ T5326] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 572.196590][ T5326] usb 7-1: config 0 has no interface number 0 [ 572.196637][ T5326] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.196668][ T5326] usb 7-1: config 0 interface 85 has no altsetting 0 [ 572.244930][ T5326] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 572.244964][ T5326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.244988][ T5326] usb 7-1: Product: syz [ 572.245003][ T5326] usb 7-1: Manufacturer: syz [ 572.245021][ T5326] usb 7-1: SerialNumber: syz [ 572.295712][ T5326] usb 7-1: config 0 descriptor?? [ 572.536874][ T5326] appletouch 7-1:0.85: Failed to read mode from device. [ 572.537121][ T5326] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 573.646165][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'. [ 573.658659][ T5326] usb 7-1: USB disconnect, device number 4 [ 573.662452][T11909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2191'. [ 574.524475][ C0] net_ratelimit: 4507 callbacks suppressed [ 574.524497][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 574.525164][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 574.525748][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.531656][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.542899][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 574.545407][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 574.546009][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.560576][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 574.578879][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 574.579374][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.032861][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2207'. [ 579.058138][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2207'. [ 579.529065][ C0] net_ratelimit: 3461 callbacks suppressed [ 579.529089][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.529670][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.530259][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.531183][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.531752][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.532314][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.532877][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.533460][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.534046][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 579.534618][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 579.926904][ T5714] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 580.078294][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 580.081044][ T5714] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 580.081073][ T5714] usb 6-1: config 0 has no interface number 0 [ 580.081119][ T5714] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.081149][ T5714] usb 6-1: config 0 interface 85 has no altsetting 0 [ 580.084860][ T5714] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 580.084891][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.084913][ T5714] usb 6-1: Product: syz [ 580.084929][ T5714] usb 6-1: Manufacturer: syz [ 580.084945][ T5714] usb 6-1: SerialNumber: syz [ 580.273553][ T5714] usb 6-1: config 0 descriptor?? [ 580.782567][ T5714] appletouch 6-1:0.85: Failed to read mode from device. [ 580.782727][ T5714] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 581.276968][ T5714] usb 6-1: USB disconnect, device number 2 [ 584.536945][ C0] net_ratelimit: 3366 callbacks suppressed [ 584.536968][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.537571][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.538171][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.538702][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.539245][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.539785][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.540336][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 584.540905][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.541519][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 584.542062][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 585.454693][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2221'. [ 585.477387][T11989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2221'. [ 590.893118][ C0] net_ratelimit: 4122 callbacks suppressed [ 590.893143][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 590.893811][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 590.896538][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 590.897189][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 590.897736][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 590.898317][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 590.898872][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 590.899440][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 590.899929][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 590.900440][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 595.195342][T12065] smc: net device lo applied user defined pnetid SYZ0 [ 596.095712][ C0] net_ratelimit: 3839 callbacks suppressed [ 596.095732][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 596.096302][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 596.096949][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 596.097431][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 596.193272][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 596.193819][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 596.194318][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 596.194801][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 596.195280][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 596.213059][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 596.372951][T12062] rdma_rxe: rxe_newlink: failed to add lo [ 598.507720][T12103] rdma_rxe: rxe_newlink: failed to add lo [ 599.865612][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2261'. [ 599.867873][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2261'. [ 601.097413][ C0] net_ratelimit: 4106 callbacks suppressed [ 601.097439][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 601.098021][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 601.100991][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 601.101579][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 601.102415][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 601.104792][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 601.105555][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 601.106686][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 601.111796][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 601.116711][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.846446][T11728] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 602.848700][T12125] ceph: No mds server is up or the cluster is laggy [ 602.874550][T11728] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 604.051421][T11728] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 604.239360][T11728] usb 5-1: Using ep0 maxpacket: 8 [ 604.241778][T11728] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.241804][T11728] usb 5-1: config 179 has no interface number 0 [ 604.241852][T11728] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 604.241880][T11728] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 604.241910][T11728] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.241937][T11728] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 604.241966][T11728] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 604.242017][T11728] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 604.242041][T11728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.233627][T12140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 605.804941][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 605.804945][ T10] usb 5-1: USB disconnect, device number 31 [ 605.805081][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 606.107169][ C0] net_ratelimit: 4692 callbacks suppressed [ 606.107195][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 606.107760][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 606.108319][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 606.108869][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 606.109563][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 606.110852][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 606.112007][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 606.112837][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 606.113701][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 606.114726][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 606.376238][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2272'. [ 606.392423][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2272'. [ 607.804466][T12169] ceph: No mds server is up or the cluster is laggy [ 607.927052][ T1765] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 608.565607][ T5707] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 609.749664][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2288'. [ 609.750111][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2288'. [ 609.956944][ T36] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 610.108971][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 610.113550][ T36] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 610.113578][ T36] usb 6-1: config 179 has no interface number 0 [ 610.113627][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 610.113656][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 610.113694][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 610.113722][ T36] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 610.113751][ T36] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 610.113795][ T36] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 610.113819][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.290899][T12200] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 611.117471][ C0] net_ratelimit: 3812 callbacks suppressed [ 611.117495][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 611.118137][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 611.118791][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 611.119512][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 611.120216][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 611.123561][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 611.124026][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 611.124512][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 611.125037][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 611.125513][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 611.737507][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 611.737582][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 611.824642][ T36] usb 6-1: USB disconnect, device number 3 [ 613.449229][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 615.166877][ T5732] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 615.330335][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 615.344747][ T5732] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 615.344777][ T5732] usb 5-1: config 179 has no interface number 0 [ 615.344838][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 615.344868][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 615.344898][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.344925][ T5732] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 615.344954][ T5732] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 615.345000][ T5732] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 615.345035][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.515431][T12253] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 616.134098][ C0] net_ratelimit: 4560 callbacks suppressed [ 616.134119][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 616.134694][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 616.173992][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 616.174614][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 616.214771][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 616.215428][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 616.216016][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 616.256433][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 616.257183][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 616.281780][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 616.778090][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 616.778138][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 616.778248][ T31] usb 5-1: USB disconnect, device number 32 [ 617.877404][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2317'. [ 619.561422][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 620.419195][T12329] syz.4.2328 (12329) used greatest stack depth: 17776 bytes left [ 621.062671][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2331'. [ 621.138303][ C0] net_ratelimit: 2458 callbacks suppressed [ 621.138326][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 621.141179][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 621.141800][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 621.142370][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 621.142969][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 621.143529][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 621.223427][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 621.224115][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 621.224738][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 621.226379][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 621.450857][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 623.066702][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'. [ 624.496065][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.496130][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.940955][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'. [ 626.147308][ C0] net_ratelimit: 4465 callbacks suppressed [ 626.147331][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 626.148964][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 626.149613][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 626.150238][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 626.150885][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 626.151583][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 626.152142][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 626.152593][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 626.153051][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 626.153588][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 626.407829][ T38] INFO: task syz.2.2013:11288 blocked for more than 144 seconds. [ 626.407858][ T38] Tainted: G L syzkaller #0 [ 626.407872][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.407883][ T38] task:syz.2.2013 state:D stack:27672 pid:11288 tgid:11286 ppid:5599 task_flags:0x400140 flags:0x00080002 [ 626.407955][ T38] Call Trace: [ 626.407963][ T38] [ 626.407978][ T38] __schedule+0x16dc/0x5500 [ 626.408039][ T38] ? __pfx___schedule+0x10/0x10 [ 626.408064][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 626.408116][ T38] rt_mutex_schedule+0x76/0xf0 [ 626.408143][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 626.408188][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 626.408227][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 626.408265][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 626.408302][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 626.408350][ T38] ? write_threads+0x3a0/0x5a0 [ 626.408388][ T38] ? write_threads+0x3a0/0x5a0 [ 626.408428][ T38] ? write_threads+0x3a0/0x5a0 [ 626.408460][ T38] mutex_lock_nested+0x168/0x1d0 [ 626.408502][ T38] write_threads+0x3a0/0x5a0 [ 626.408544][ T38] ? __might_fault+0xaf/0x130 [ 626.408670][ T38] ? __pfx_write_threads+0x10/0x10 [ 626.408726][ T38] ? _copy_from_user+0x94/0xb0 [ 626.408756][ T38] ? simple_transaction_get+0x130/0x170 [ 626.408786][ T38] nfsctl_transaction_write+0x112/0x160 [ 626.408822][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 626.408857][ T38] vfs_write+0x29f/0xbb0 [ 626.408896][ T38] ? __pfx_vfs_write+0x10/0x10 [ 626.408929][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.408958][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 626.408985][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 626.409013][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 626.409047][ T38] ? fdget_pos+0x252/0x320 [ 626.409082][ T38] ksys_write+0x156/0x270 [ 626.409116][ T38] ? __pfx_ksys_write+0x10/0x10 [ 626.418635][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.418674][ T38] do_syscall_64+0x174/0x580 [ 626.418702][ T38] ? trace_irq_disable+0x3b/0x140 [ 626.418726][ T38] ? clear_bhb_loop+0x40/0x90 [ 626.418755][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.418779][ T38] RIP: 0033:0x7fc87648de99 [ 626.418799][ T38] RSP: 002b:00007fc8746e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 626.418824][ T38] RAX: ffffffffffffffda RBX: 00007fc876715fa0 RCX: 00007fc87648de99 [ 626.418842][ T38] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000003 [ 626.418856][ T38] RBP: 00007fc876523eaf R08: 0000000000000000 R09: 0000000000000000 [ 626.418870][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.418884][ T38] R13: 00007fc876716038 R14: 00007fc876715fa0 R15: 00007ffd273610f8 [ 626.418920][ T38] [ 626.418956][ T38] [ 626.418956][ T38] Showing all locks held in the system: [ 626.418971][ T38] 6 locks held by kworker/u8:1/13: [ 626.418987][ T38] 3 locks held by ktimers/0/16: [ 626.419002][ T38] 1 lock held by khungtaskd/38: [ 626.419015][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 626.419105][ T38] 5 locks held by kworker/u8:12/3399: [ 626.419122][ T38] 2 locks held by getty/5349: [ 626.419134][ T38] #0: ffff888035cdb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 626.419194][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 626.419263][ T38] 10 locks held by syz-executor/5595: [ 626.419280][ T38] 8 locks held by kworker/u8:13/5808: [ 626.419297][ T38] 3 locks held by syz.2.2013/11288: [ 626.419309][ T38] #0: ffff888034479328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 626.419366][ T38] #1: ffff888062b1c500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 626.419430][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3a0/0x5a0 [ 626.419495][ T38] 3 locks held by syz.2.2013/11290: [ 626.419507][ T38] #0: ffff88802c3bd928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 626.419587][ T38] #1: ffff888062b1c500 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 626.423059][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 626.423129][ T38] 1 lock held by udevd/11457: [ 626.423145][ T38] 4 locks held by syz.0.2355/12415: [ 626.423160][ T38] 4 locks held by syz.5.2354/12416: [ 626.423173][ T38] #0: ffff88805d987158 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_bind+0x23/0x130 [ 626.423229][ T38] #1: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 626.423288][ T38] #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 626.423347][ T38] #3: ffff88805d9870a0 (slock-AF_INET#2){+...}-{3:3}, at: release_sock+0x45/0x290 [ 626.423408][ T38] 6 locks held by syz.5.2354/12419: [ 626.436933][ T38] [ 626.436944][ T38] ============================================= [ 626.436944][ T38] [ 626.436954][ T38] NMI backtrace for cpu 1 [ 626.436975][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.437005][ T38] Tainted: [L]=SOFTLOCKUP [ 626.437013][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 626.437027][ T38] Call Trace: [ 626.437034][ T38] [ 626.437044][ T38] dump_stack_lvl+0xe8/0x150 [ 626.437084][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 626.437107][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 626.437146][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 626.437185][ T38] sys_info+0x135/0x170 [ 626.437216][ T38] watchdog+0xfd7/0x1030 [ 626.437247][ T38] ? watchdog+0x1c7/0x1030 [ 626.437275][ T38] kthread+0x388/0x470 [ 626.437310][ T38] ? __pfx_watchdog+0x10/0x10 [ 626.437328][ T38] ? __pfx_kthread+0x10/0x10 [ 626.437363][ T38] ret_from_fork+0x514/0xb70 [ 626.437400][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 626.437434][ T38] ? __switch_to+0xc89/0x1420 [ 626.437465][ T38] ? __pfx_kthread+0x10/0x10 [ 626.437500][ T38] ret_from_fork_asm+0x1a/0x30 [ 626.437548][ T38] [ 626.437567][ T38] Sending NMI from CPU 1 to CPUs 0: [ 626.437614][ C0] NMI backtrace for cpu 0 [ 626.437634][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.437660][ C0] Tainted: [L]=SOFTLOCKUP [ 626.437667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 626.437679][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x32/0xa0 [ 626.437714][ C0] Code: 65 48 8b 0d 58 20 d8 10 65 44 8b 05 78 20 d8 10 41 81 e0 00 00 ff 00 ba 00 01 00 00 23 91 f4 0b 00 00 41 89 d1 45 09 c1 74 12 <45> 85 c0 75 5f 85 d2 74 5b 83 b9 0c 17 00 00 00 74 52 8b 91 e0 16 [ 626.437731][ C0] RSP: 0018:ffffc90000157098 EFLAGS: 00000206 [ 626.437747][ C0] RAX: ffffffff891fc406 RBX: 0000000000000000 RCX: ffff88801caa8000 [ 626.437761][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.437772][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000100 [ 626.437783][ C0] R10: ffffc90000157240 R11: fffff5200002ae4a R12: 0000000000000003 [ 626.437796][ C0] R13: ffff88805f79f8c8 R14: dffffc0000000000 R15: 0000000000000001 [ 626.437809][ C0] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 626.437825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.437838][ C0] CR2: 00007f396df956b8 CR3: 000000003a55c000 CR4: 00000000003526f0 [ 626.437855][ C0] Call Trace: [ 626.437861][ C0] [ 626.437867][ C0] lockdep_rtnl_is_held+0x26/0x40 [ 626.437894][ C0] ip6_ignore_linkdown+0x4f/0x140 [ 626.437921][ C0] find_match+0x9c/0xb80 [ 626.437945][ C0] ? __lock_acquire+0x683/0x2ce0 [ 626.437971][ C0] __find_rr_leaf+0x243/0x740 [ 626.438001][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 626.438026][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 626.438056][ C0] ? __lock_acquire+0x683/0x2ce0 [ 626.438078][ C0] fib6_table_lookup+0x3cb/0xb00 [ 626.438098][ C0] ? unwind_next_frame+0x8f/0x2550 [ 626.438129][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 626.438152][ C0] ip6_pol_route+0x229/0x14d0 [ 626.438168][ C0] ? ip6_pol_route+0x163/0x14d0 [ 626.438187][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 626.438203][ C0] ? __lock_acquire+0x683/0x2ce0 [ 626.438224][ C0] ? kasan_save_track+0x4f/0x80 [ 626.438242][ C0] ? kasan_save_track+0x3e/0x80 [ 626.438259][ C0] ? kasan_save_free_info+0x40/0x50 [ 626.438285][ C0] ? kmem_cache_free+0x187/0x6c0 [ 626.438304][ C0] ? ip6_mc_input+0x909/0xbc0 [ 626.438327][ C0] ? NF_HOOK+0x336/0x3c0 [ 626.438347][ C0] ? process_backlog+0x3bf/0xc50 [ 626.438367][ C0] fib6_rule_lookup+0x556/0x730 [ 626.438396][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 626.438414][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 626.438451][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 626.438476][ C0] ip6_route_input+0x78d/0xb20 [ 626.438497][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 626.438531][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 626.438557][ C0] ip6_rcv_finish+0x141/0x280 [ 626.438582][ C0] NF_HOOK+0x336/0x3c0 [ 626.438605][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 626.438626][ C0] ? NF_HOOK+0x9e/0x3c0 [ 626.438648][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 626.438668][ C0] ? ip6_rcv_core+0xa1/0x1870 [ 626.438692][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 626.438720][ C0] ? process_backlog+0x261/0xc50 [ 626.438736][ C0] process_backlog+0x3bf/0xc50 [ 626.438757][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.438791][ C0] __napi_poll+0xae/0x550 [ 626.438821][ C0] net_rx_action+0x621/0xd70 [ 626.438846][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 626.438874][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 626.438902][ C0] handle_softirqs+0x1d9/0x6c0 [ 626.438931][ C0] run_ktimerd+0x69/0x100 [ 626.438956][ C0] smpboot_thread_fn+0x57c/0xa80 [ 626.438984][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 626.439013][ C0] kthread+0x388/0x470 [ 626.439047][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 626.439071][ C0] ? __pfx_kthread+0x10/0x10 [ 626.439099][ C0] ret_from_fork+0x514/0xb70 [ 626.439130][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.439159][ C0] ? __switch_to+0xc89/0x1420 [ 626.439186][ C0] ? __pfx_kthread+0x10/0x10 [ 626.439214][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.439241][ C0] [ 626.443071][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 626.443096][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.443129][ T38] Tainted: [L]=SOFTLOCKUP [ 626.443137][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 626.443150][ T38] Call Trace: [ 626.443159][ T38] [ 626.443168][ T38] vpanic+0x56c/0xa60 [ 626.443195][ T38] ? __pfx___schedule+0x10/0x10 [ 626.443221][ T38] ? __pfx_vpanic+0x10/0x10 [ 626.443255][ T38] panic+0xc5/0xd0 [ 626.443275][ T38] ? __pfx_panic+0x10/0x10 [ 626.443295][ T38] ? preempt_schedule_common+0x82/0xd0 [ 626.443322][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 626.443351][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 626.443391][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 626.443434][ T38] watchdog+0x1030/0x1030 [ 626.443469][ T38] ? watchdog+0x1c7/0x1030 [ 626.443499][ T38] kthread+0x388/0x470 [ 626.443541][ T38] ? __pfx_watchdog+0x10/0x10 [ 626.443560][ T38] ? __pfx_kthread+0x10/0x10 [ 626.443597][ T38] ret_from_fork+0x514/0xb70 [ 626.443640][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 626.443675][ T38] ? __switch_to+0xc89/0x1420 [ 626.443710][ T38] ? __pfx_kthread+0x10/0x10 [ 626.443746][ T38] ret_from_fork_asm+0x1a/0x30 [ 626.443786][ T38] [ 626.444402][ T38] Kernel Offset: disabled