last executing test programs: 8.970929494s ago: executing program 2 (id=255): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$kcm(0x2, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 7.328804294s ago: executing program 4 (id=261): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0xd0, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x20, 0x6}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x17, 0x6, @link_local}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x1}, 0x0}) 6.915706483s ago: executing program 2 (id=264): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x24}}, 0x0) 6.819126695s ago: executing program 2 (id=265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000", @ANYRESOCT], 0xb8}}, 0x4000) 6.659467616s ago: executing program 2 (id=268): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$kcm(0x2, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 6.481726818s ago: executing program 1 (id=271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000340)="af79401c", 0x4}], 0x3) 5.743350575s ago: executing program 1 (id=275): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x24}}, 0x0) 5.469671292s ago: executing program 3 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfc", 0x3}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000340)="af79401c", 0x4}], 0x4) 5.418699457s ago: executing program 1 (id=277): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 5.356093888s ago: executing program 0 (id=278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000", @ANYRESOCT], 0xb8}}, 0x4000) 5.346699684s ago: executing program 0 (id=279): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x40, r0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 5.288119346s ago: executing program 0 (id=280): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.869059751s ago: executing program 1 (id=281): r0 = socket(0x2, 0xa, 0x300) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000800)={0xf394, {{0xa, 0x4e22, 0xfffffff8, @empty, 0x10000}}, {{0xa, 0x4e21, 0x0, @remote, 0x2}}}, 0x108) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcafd0e077bf945c40399aeb88c1efcab6c7795d64a69c0160363258e550a72ed13b6de13637349f05f524bbde1d772edc6e"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000080850000000f000000182b00", @ANYRES32=r3, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.659626015s ago: executing program 3 (id=282): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001300)="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", 0x201}], 0x1}}], 0x1, 0x4008040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4.236125188s ago: executing program 0 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(0x0, 0x5, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6f, 0x100) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 4.181715982s ago: executing program 4 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, 0x0, 0x0) 3.990489764s ago: executing program 2 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000340)="af79401c", 0x4}], 0x3) 3.182654248s ago: executing program 3 (id=286): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtfilter={0x4f8, 0x2c, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x0, 0xf}, {0xf, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0x90, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8e}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x498, 0x2, [@TCA_CGROUP_ACT={0xe0, 0x1, [@m_xt={0xdc, 0x16, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6c, 0x6, "b13d0fac84d239c3029de3c8bc52a3cb3c3fd3cd36495230f6d1e6a8f2bb0b6c531b6192bb6ecae4499a4509bdf284573a7bc137def214fa9dd42e8d71631be12baf4b0fb08ed67f2b564e9aab6f39ef17fa073782d1dda113e6808a7c6edd6d7bac3962f3f29412"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x3b4, 0x1, [@m_skbedit={0x44, 0x18, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xb}}]}, {0xd, 0x6, "68333f95b37d673d95"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xb0, 0x11, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000001, 0x0, 0x0, 0x3ff, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x0, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf6d, 0x7, 0x3, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x63, 0x3, 0x2, 0x7}}]}, {0x11, 0x6, "e7334421e1b8d5060326e2df01"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x118, 0x3, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5, 0x1, 0xe87, 0x400}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x6, 0x9, 0x400}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xddb, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x53, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1480, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0x1, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xec00, 0x800, 0x6, 0xedfe, 0x1}}]}, {0x65, 0x6, "e89f4a1d82ba8acce980b579685cda9c16360e6ec0dcf8ac7062182a150889aa91126f7afe41939f08f9978cbf01abd0ad28fbaa6a474b19f85906b3a0431ddbfad3a862722e00dc04a23b87103025bd398c5db50d7473994d39a5603613ad191f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe8, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0xb5, 0x6, "79df708dd0574d90c976f05be4bc714b1339c79355be70a59b2a13c3407f6a486e89ed33fb7fce3c4f3f08e2f04202af8f0da8dd3905356e11a266d2367030d1818fda5a0cf1339744e36e3e684cd5b4670c63f5151d1390ed0984ecd876bb03c0eecee82a7383a65c422d48446799c327ecc04edbc1e656bcf1197a1f4efb59109273944e6772e40508febbf79eb8d757f5981cb60053e3e295224fd81263ab6e78bfab52b2f1f16bdf31c86394ab2092"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xbc, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x8e, 0x6, "3db0c62f0590060bbd618379a1a1a9f3e2c858e01d761e33eb4572afe6a0d32b5dde4397981c8f629464685ce0ae8fc1c05818edf6142bfdf4e771c03b173fd870017e57a648abbf5979314f6a5e083ad70df46604ee6f54f6c9761f1224cb3a2cfdff49a8153536f92554b158647fc8c4c63c22adfff21ac5eff1f9ee262505c03c73b5827d08b0092d"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x11}, 0x20040054) 3.12054327s ago: executing program 0 (id=287): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x24}}, 0x0) 3.024245051s ago: executing program 1 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000340)="af79401c", 0x4}], 0x4) 3.01303279s ago: executing program 0 (id=289): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$kcm(0x2, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 2.923850687s ago: executing program 3 (id=290): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b'], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.719813861s ago: executing program 2 (id=291): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$kcm(0x2, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.450219846s ago: executing program 3 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfc", 0x3}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000340)="af79401c", 0x4}], 0x4) 2.420341714s ago: executing program 4 (id=293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x101, 0xb, r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000), 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 1.747777339s ago: executing program 1 (id=294): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$kcm(0x2, 0x4, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 1.448972177s ago: executing program 4 (id=295): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.310150996s ago: executing program 3 (id=296): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xc) 1.171209779s ago: executing program 4 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x6f, 0x100) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 0s ago: executing program 4 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x7, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 64.512345][ T5779] cgroup: Unknown subsys name 'net' [ 64.772575][ T5779] cgroup: Unknown subsys name 'cpuset' [ 64.828821][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.318093][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.335470][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.349863][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.359399][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.372293][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.376635][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.445061][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.447752][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.456221][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.473623][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.475371][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.477615][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.501165][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.530261][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.546614][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.556779][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.609758][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.615099][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.615836][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.643225][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.644307][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.646283][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.671243][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.690711][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.699886][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.700640][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.266514][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 69.342254][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 69.394075][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 69.538966][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 69.543678][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 69.600137][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.600834][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.600999][ T5794] bridge_slave_0: entered allmulticast mode [ 69.602512][ T5794] bridge_slave_0: entered promiscuous mode [ 69.653512][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.653633][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.653785][ T5794] bridge_slave_1: entered allmulticast mode [ 69.655074][ T5794] bridge_slave_1: entered promiscuous mode [ 69.730509][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.730605][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.730854][ T5797] bridge_slave_0: entered allmulticast mode [ 69.732190][ T5797] bridge_slave_0: entered promiscuous mode [ 69.790317][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.790443][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.790885][ T5797] bridge_slave_1: entered allmulticast mode [ 69.792405][ T5797] bridge_slave_1: entered promiscuous mode [ 69.830518][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.830595][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.830699][ T5790] bridge_slave_0: entered allmulticast mode [ 69.831981][ T5790] bridge_slave_0: entered promiscuous mode [ 69.836717][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.886581][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.886657][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.886752][ T5790] bridge_slave_1: entered allmulticast mode [ 69.888025][ T5790] bridge_slave_1: entered promiscuous mode [ 69.916728][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.978014][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.029463][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.029663][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.029784][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.029871][ T5801] bridge_slave_0: entered allmulticast mode [ 70.031122][ T5801] bridge_slave_0: entered promiscuous mode [ 70.032755][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.032862][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.033006][ T5802] bridge_slave_0: entered allmulticast mode [ 70.034521][ T5802] bridge_slave_0: entered promiscuous mode [ 70.040953][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.044243][ T5794] team0: Port device team_slave_0 added [ 70.063011][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.063120][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.063255][ T5801] bridge_slave_1: entered allmulticast mode [ 70.065827][ T5801] bridge_slave_1: entered promiscuous mode [ 70.067689][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.067793][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.067924][ T5802] bridge_slave_1: entered allmulticast mode [ 70.071589][ T5802] bridge_slave_1: entered promiscuous mode [ 70.077151][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.079541][ T5794] team0: Port device team_slave_1 added [ 70.174030][ T5797] team0: Port device team_slave_0 added [ 70.222458][ T5797] team0: Port device team_slave_1 added [ 70.429606][ T5793] Bluetooth: hci0: command tx timeout [ 70.447543][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.459498][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.461264][ T5790] team0: Port device team_slave_0 added [ 70.462272][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.462280][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.462294][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.481436][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.485966][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.488804][ T5790] team0: Port device team_slave_1 added [ 70.489753][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.489764][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.489787][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.575377][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.575393][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.575417][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.589610][ T5793] Bluetooth: hci1: command tx timeout [ 70.641393][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.641408][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.641432][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.645695][ T5801] team0: Port device team_slave_0 added [ 70.648126][ T5802] team0: Port device team_slave_0 added [ 70.654428][ T5802] team0: Port device team_slave_1 added [ 70.667209][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.667222][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.667244][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.668311][ T5793] Bluetooth: hci2: command tx timeout [ 70.690196][ T5801] team0: Port device team_slave_1 added [ 70.710622][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.710635][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.710658][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.749296][ T5793] Bluetooth: hci4: command tx timeout [ 70.749416][ T5793] Bluetooth: hci3: command tx timeout [ 70.793187][ T5794] hsr_slave_0: entered promiscuous mode [ 70.794442][ T5794] hsr_slave_1: entered promiscuous mode [ 70.831434][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.831443][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.831456][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.833405][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.833413][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.833426][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.856136][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.856150][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.856173][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.857619][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.857630][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.857653][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.984209][ T5797] hsr_slave_0: entered promiscuous mode [ 70.985769][ T5797] hsr_slave_1: entered promiscuous mode [ 70.986776][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 70.986886][ T5797] Cannot create hsr debugfs directory [ 71.060837][ T5790] hsr_slave_0: entered promiscuous mode [ 71.061514][ T5790] hsr_slave_1: entered promiscuous mode [ 71.062035][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 71.062053][ T5790] Cannot create hsr debugfs directory [ 71.189413][ T5801] hsr_slave_0: entered promiscuous mode [ 71.190050][ T5801] hsr_slave_1: entered promiscuous mode [ 71.190673][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 71.190687][ T5801] Cannot create hsr debugfs directory [ 71.205206][ T5802] hsr_slave_0: entered promiscuous mode [ 71.206321][ T5802] hsr_slave_1: entered promiscuous mode [ 71.207190][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 71.207210][ T5802] Cannot create hsr debugfs directory [ 71.236780][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.236862][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.982932][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.005756][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.043719][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.093616][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.195126][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.214092][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.253045][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.306644][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.407325][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.434903][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.473743][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.508493][ T60] Bluetooth: hci0: command tx timeout [ 72.545362][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.663361][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.669350][ T60] Bluetooth: hci1: command tx timeout [ 72.705321][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.725520][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.748886][ T60] Bluetooth: hci2: command tx timeout [ 72.782960][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.828289][ T60] Bluetooth: hci3: command tx timeout [ 72.828318][ T60] Bluetooth: hci4: command tx timeout [ 72.853280][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.916857][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.961136][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.995909][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.032047][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.034085][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.096025][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.096731][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.134581][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.134657][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.174865][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.240604][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.262648][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.268120][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.283867][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.315700][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.315811][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.356943][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.390652][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.396974][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.397091][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.453282][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.453812][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.521167][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.536155][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.570126][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.570196][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.611910][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.612027][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.667326][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.710875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.710983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.752976][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.753046][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.793956][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.988841][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.008684][ T5794] veth0_vlan: entered promiscuous mode [ 74.073097][ T5794] veth1_vlan: entered promiscuous mode [ 74.212873][ T5797] veth0_vlan: entered promiscuous mode [ 74.217078][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.220855][ T5794] veth0_macvtap: entered promiscuous mode [ 74.244850][ T5794] veth1_macvtap: entered promiscuous mode [ 74.260899][ T5797] veth1_vlan: entered promiscuous mode [ 74.321287][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.355735][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.376410][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.399565][ T1452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.426787][ T1452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.448938][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.453135][ T1452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458048][ T1452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.488810][ T5797] veth0_macvtap: entered promiscuous mode [ 74.492774][ T5790] veth0_vlan: entered promiscuous mode [ 74.571988][ T5797] veth1_macvtap: entered promiscuous mode [ 74.588953][ T60] Bluetooth: hci0: command tx timeout [ 74.662694][ T5790] veth1_vlan: entered promiscuous mode [ 74.748521][ T60] Bluetooth: hci1: command tx timeout [ 74.753226][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.803771][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.816742][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.816763][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.839487][ T60] Bluetooth: hci2: command tx timeout [ 74.864861][ T1110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.867371][ T5802] veth0_vlan: entered promiscuous mode [ 74.884019][ T1110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.904065][ T1110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.908302][ T60] Bluetooth: hci4: command tx timeout [ 74.910032][ T60] Bluetooth: hci3: command tx timeout [ 74.918420][ T1110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.933503][ T5790] veth0_macvtap: entered promiscuous mode [ 74.946682][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.946698][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.996582][ T5801] veth0_vlan: entered promiscuous mode [ 75.002323][ T5802] veth1_vlan: entered promiscuous mode [ 75.010576][ T5790] veth1_macvtap: entered promiscuous mode [ 75.122359][ T5801] veth1_vlan: entered promiscuous mode [ 75.174353][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.233651][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.233668][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.244931][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.299113][ T5802] veth0_macvtap: entered promiscuous mode [ 75.309348][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.323844][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.332039][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340530][ T5802] veth1_macvtap: entered promiscuous mode [ 75.345435][ T1433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.345451][ T1433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.363722][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.448884][ T5801] veth0_macvtap: entered promiscuous mode [ 75.512456][ T5801] veth1_macvtap: entered promiscuous mode [ 75.601409][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.643857][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.851274][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.100574][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.396662][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.476447][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.476521][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.476535][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.546157][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.572574][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.661185][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.698246][ T60] Bluetooth: hci0: command tx timeout [ 76.756868][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.764089][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.765489][ T1390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.765505][ T1390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.828333][ T60] Bluetooth: hci1: command tx timeout [ 76.829266][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.858311][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.908401][ T60] Bluetooth: hci2: command tx timeout [ 76.998613][ T60] Bluetooth: hci3: command tx timeout [ 76.998641][ T60] Bluetooth: hci4: command tx timeout [ 77.222714][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.222733][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.392965][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.392983][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.521053][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.521071][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.624099][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.624118][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.038445][ T5804] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.331565][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.358307][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 79.406328][ T5804] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.406360][ T5804] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.406381][ T5804] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 79.406404][ T5804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.406437][ T5804] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 79.406457][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.434812][ T5804] usb 2-1: config 0 descriptor?? [ 79.631481][ T10] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 79.631498][ T10] usb 1-1: config 2 has no interface number 0 [ 79.631524][ T10] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 79.631539][ T10] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 79.631569][ T10] usb 1-1: config 2 interface 88 has no altsetting 0 [ 79.824074][ T10] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 79.824102][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.824119][ T10] usb 1-1: Product: syz [ 79.824132][ T10] usb 1-1: Manufacturer: syz [ 79.824143][ T10] usb 1-1: SerialNumber: syz [ 80.050482][ T5943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.051540][ T5943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.327358][ T5940] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.328003][ T5940] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.545498][ T102] cfg80211: failed to load regulatory.db [ 83.719753][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.873149][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 83.911412][ T5949] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.911444][ T5949] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.911520][ T5949] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 83.911546][ T5949] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.911578][ T5949] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 83.911599][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.933099][ T5949] usb 5-1: config 0 descriptor?? [ 84.258201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 84.666139][ T5804] usbhid 2-1:0.0: can't add hid device: -71 [ 84.666685][ T5804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.803957][ T5804] usb 2-1: USB disconnect, device number 2 [ 85.792880][ T10] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 85.793277][ T10] asix 1-1:2.88: probe with driver asix failed with error -110 [ 86.099667][ T5830] usb 1-1: USB disconnect, device number 2 [ 86.665661][ T6008] capability: warning: `syz.3.23' uses 32-bit capabilities (legacy support in use) [ 87.400198][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.598291][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 87.600900][ T5830] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.600929][ T5830] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.600949][ T5830] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 87.600973][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.601003][ T5830] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.601023][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.632594][ T5830] usb 3-1: config 0 descriptor?? [ 89.310272][ T6015] syz.3.25 (6015) used greatest stack depth: 17328 bytes left [ 89.365826][ T6025] tipc: Started in network mode [ 89.365968][ T6025] tipc: Node identity 3e620c35b88, cluster identity 4711 [ 89.371329][ T6025] tipc: Enabled bearer , priority 0 [ 89.372721][ T6025] syzkaller0: entered promiscuous mode [ 89.372741][ T6025] syzkaller0: entered allmulticast mode [ 89.410865][ T6025] tipc: Resetting bearer [ 89.489384][ T6024] tipc: Resetting bearer [ 89.614410][ T6024] tipc: Disabling bearer [ 89.950555][ T5949] usbhid 5-1:0.0: can't add hid device: -32 [ 89.950672][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 90.319234][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 90.319341][ T5830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 90.324206][ T5830] usb 3-1: USB disconnect, device number 2 [ 90.427640][ T6035] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 90.661385][ T5949] usb 5-1: USB disconnect, device number 2 [ 90.662171][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 90.662189][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 90.723330][ T6042] netlink: 'syz.3.34': attribute type 11 has an invalid length. [ 90.723388][ T6042] netlink: 'syz.3.34': attribute type 23 has an invalid length. [ 90.723396][ T6042] netlink: 224 bytes leftover after parsing attributes in process `syz.3.34'. [ 90.824311][ T6045] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:1 [ 90.824591][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 91.445808][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 91.445829][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 91.512318][ T6045] gretap1: entered promiscuous mode [ 91.517953][ T1452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.534490][ T6041] Zero length message leads to an empty skb [ 91.618389][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.689724][ T1452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.789406][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.789435][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.789455][ T31] usb 2-1: Product: syz [ 91.789468][ T31] usb 2-1: Manufacturer: syz [ 91.789481][ T31] usb 2-1: SerialNumber: syz [ 91.918481][ T1452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.919756][ T1452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.289125][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 92.289187][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 92.291186][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 92.291240][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 92.292700][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.407313][ T31] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 92.453851][ T6075] batman_adv: batadv0: Adding interface: gretap1 [ 92.453868][ T6075] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 92.667693][ T31] usb 2-1: USB disconnect, device number 3 [ 92.918341][ T5949] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.064053][ T6084] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.131658][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.133513][ T5949] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 93.133542][ T5949] usb 5-1: can't read configurations, error -71 [ 93.137390][ T6084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.467279][ T6098] ======================================================= [ 94.467279][ T6098] WARNING: The mand mount option has been deprecated and [ 94.467279][ T6098] and is ignored by this kernel. Remove the mand [ 94.467279][ T6098] option from the mount to silence this warning. [ 94.467279][ T6098] ======================================================= [ 95.211228][ T6101] netlink: 'syz.4.50': attribute type 11 has an invalid length. [ 95.211246][ T6101] netlink: 'syz.4.50': attribute type 23 has an invalid length. [ 95.211258][ T6101] netlink: 224 bytes leftover after parsing attributes in process `syz.4.50'. [ 95.291771][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.293111][ T6102] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:1 [ 95.293342][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 95.441439][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.672502][ T6102] gretap2: entered promiscuous mode [ 95.741895][ T6108] erspan0: entered promiscuous mode [ 95.759436][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 98.868287][ T5949] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.114806][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 99.201143][ T5949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 99.405677][ T5949] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 99.405705][ T5949] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 99.405722][ T5949] usb 5-1: Product: syz [ 99.405734][ T5949] usb 5-1: Manufacturer: syz [ 99.405747][ T5949] usb 5-1: SerialNumber: syz [ 99.459127][ T6161] netlink: 'syz.1.67': attribute type 11 has an invalid length. [ 99.459140][ T6161] netlink: 'syz.1.67': attribute type 23 has an invalid length. [ 99.459147][ T6161] netlink: 224 bytes leftover after parsing attributes in process `syz.1.67'. [ 99.553024][ T6163] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:1 [ 99.553255][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 99.670560][ T5949] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 99.670582][ T5949] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 99.670598][ T5949] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 99.670613][ T5949] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 99.874350][ T5949] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 99.874435][ T5949] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 99.894894][ T6163] gretap1: entered promiscuous mode [ 99.974676][ T5949] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 100.076729][ T5949] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 100.117176][ T5949] usb 5-1: USB disconnect, device number 5 [ 100.179964][ T5949] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 100.194584][ T5949] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 100.195441][ T5949] visor 5-1:1.0: device disconnected [ 100.299080][ T938] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 100.548196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.687143][ T938] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 100.687160][ T938] usb 3-1: config 2 has no interface number 0 [ 100.687256][ T938] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 100.687281][ T938] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 100.687294][ T938] usb 3-1: config 2 interface 88 has no altsetting 0 [ 100.810043][ T938] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 100.810061][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.810071][ T938] usb 3-1: Product: syz [ 100.810084][ T938] usb 3-1: Manufacturer: syz [ 100.810091][ T938] usb 3-1: SerialNumber: syz [ 100.850259][ T6170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.851220][ T6170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.130991][ T6169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.131333][ T6169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.975384][ T6201] syzkaller0: entered promiscuous mode [ 102.975408][ T6201] syzkaller0: entered allmulticast mode [ 104.528259][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.679070][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 104.697873][ T31] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.697915][ T31] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.697929][ T31] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 104.697942][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.697967][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 104.697993][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.764817][ T31] usb 1-1: config 0 descriptor?? [ 105.854357][ T938] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.854619][ T938] asix 3-1:2.88: probe with driver asix failed with error -71 [ 105.914231][ T938] usb 3-1: USB disconnect, device number 3 [ 105.948277][ T5870] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.969035][ T5806] udevd[5806]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 106.138249][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 106.179929][ T5870] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.179961][ T5870] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.179983][ T5870] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 106.180066][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.180099][ T5870] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 106.180120][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.256834][ T5870] usb 2-1: config 0 descriptor?? [ 106.596730][ T5793] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 106.599084][ T5793] Bluetooth: hci4: Injecting HCI hardware error event [ 106.600702][ T5793] Bluetooth: hci4: hardware error 0x00 [ 107.008540][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 107.008712][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.055323][ T31] usb 1-1: USB disconnect, device number 3 [ 108.106071][ T6252] blktrace: Concurrent blktraces are not allowed on loop4 [ 108.578339][ T938] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.731360][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 108.755556][ T938] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.755588][ T938] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.755603][ T938] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 108.755617][ T938] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.755635][ T938] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 108.755652][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.832957][ T938] usb 3-1: config 0 descriptor?? [ 109.918312][ T5793] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 110.026825][ T6268] blktrace: Concurrent blktraces are not allowed on loop4 [ 110.410057][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.827167][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 110.885439][ T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.885471][ T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.885490][ T31] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 110.885566][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.885598][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 110.885617][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.013147][ T31] usb 4-1: config 0 descriptor?? [ 111.565435][ T5870] usbhid 2-1:0.0: can't add hid device: -32 [ 111.565600][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 114.146145][ T9] usb 2-1: USB disconnect, device number 4 [ 114.270243][ T938] usbhid 3-1:0.0: can't add hid device: -32 [ 114.270363][ T938] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 114.950615][ T6294] tipc: Enabled bearer , priority 0 [ 114.956112][ T6294] syzkaller0: entered promiscuous mode [ 114.956135][ T6294] syzkaller0: entered allmulticast mode [ 115.032694][ T6294] tipc: Resetting bearer [ 115.068491][ T6293] tipc: Resetting bearer [ 115.190990][ T6293] tipc: Disabling bearer [ 116.018352][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.148186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.522039][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 116.704372][ T31] usbhid 4-1:0.0: can't add hid device: -32 [ 116.846096][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 116.976588][ T36] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 116.976605][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.016138][ T36] usb 1-1: selecting invalid altsetting 3 [ 117.016160][ T36] comedi comedi5: could not set alternate setting 3 in high speed [ 117.016175][ T36] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 117.044474][ T36] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 117.205483][ T938] usb 3-1: USB disconnect, device number 4 [ 117.298459][ T9] usb 1-1: USB disconnect, device number 4 [ 117.913284][ T938] usb 4-1: USB disconnect, device number 2 [ 118.446531][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 118.617659][ T43] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.617813][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.617834][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.617852][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.649025][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 120.045654][ T6363] netlink: 232 bytes leftover after parsing attributes in process `syz.0.123'. [ 120.288186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.415258][ T6359] netlink: 'syz.1.122': attribute type 13 has an invalid length. [ 122.350187][ T6359] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 123.173091][ T6399] netlink: 68 bytes leftover after parsing attributes in process `syz.4.130'. [ 123.273680][ T5986] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 123.459641][ T5986] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 123.468350][ T5986] usb 2-1: config 2 has no interface number 0 [ 123.468409][ T5986] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 123.468434][ T5986] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 123.469743][ T5986] usb 2-1: config 2 interface 88 has no altsetting 0 [ 123.493206][ T5986] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 123.493234][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.493252][ T5986] usb 2-1: Product: syz [ 123.493265][ T5986] usb 2-1: Manufacturer: syz [ 123.493278][ T5986] usb 2-1: SerialNumber: syz [ 123.500791][ T6397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.501003][ T6397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.706438][ T6397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.706598][ T6397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.617358][ T6412] erspan0: entered promiscuous mode [ 124.653046][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 125.348300][ T938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.169117][ T6423] delete_channel: no stack [ 126.238210][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 126.293747][ T938] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.293840][ T938] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.293877][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.293903][ T938] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.293926][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.293993][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.294018][ T938] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.294044][ T938] usb 1-1: config 168 interface 0 has no altsetting 0 [ 126.295768][ T938] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.295807][ T938] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.295844][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.295914][ T938] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.295938][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.295962][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.295988][ T938] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.296013][ T938] usb 1-1: config 168 interface 0 has no altsetting 0 [ 126.297683][ T938] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.297716][ T938] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.297752][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.297829][ T938] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.297853][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.297877][ T938] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.297901][ T938] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.297926][ T938] usb 1-1: config 168 interface 0 has no altsetting 0 [ 126.581501][ T938] usb 1-1: string descriptor 0 read error: -22 [ 126.581609][ T938] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.581622][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.695908][ T6418] netlink: 'syz.2.139': attribute type 13 has an invalid length. [ 126.709570][ T938] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 126.735208][ T6418] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 126.893339][ T938] usb 1-1: USB disconnect, device number 5 [ 127.253285][ T36] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.498558][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 127.508249][ T36] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.508435][ T36] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.508602][ T36] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 127.508762][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.509084][ T36] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 127.509265][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.732184][ T36] usb 5-1: config 0 descriptor?? [ 128.629813][ T5986] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 128.630022][ T5986] asix 2-1:2.88: probe with driver asix failed with error -71 [ 128.701511][ T5986] usb 2-1: USB disconnect, device number 5 [ 130.198196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.988282][ T5949] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.138321][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 131.140553][ T5949] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 131.140578][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.210749][ T5949] usb 2-1: selecting invalid altsetting 3 [ 131.210771][ T5949] comedi comedi5: could not set alternate setting 3 in high speed [ 131.210786][ T5949] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 131.247467][ T5949] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 131.385296][ T5949] usb 2-1: USB disconnect, device number 6 [ 132.674620][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674739][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125286][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 133.125405][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.192414][ T36] usb 5-1: USB disconnect, device number 6 [ 134.309142][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.648360][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 134.734065][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.734088][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.734108][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 134.734132][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.734162][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.734183][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.813797][ T10] usb 4-1: config 0 descriptor?? [ 135.278185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.416031][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 137.428623][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 139.240029][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 139.240504][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.244061][ T10] usb 4-1: USB disconnect, device number 3 [ 139.388334][ T36] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 139.561611][ T36] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 139.561628][ T36] usb 3-1: config 2 has no interface number 0 [ 139.561651][ T36] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 139.561665][ T36] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 139.561678][ T36] usb 3-1: config 2 interface 88 has no altsetting 0 [ 139.566330][ T36] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 139.566355][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.566373][ T36] usb 3-1: Product: syz [ 139.566386][ T36] usb 3-1: Manufacturer: syz [ 139.566399][ T36] usb 3-1: SerialNumber: syz [ 139.648639][ T6552] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.657236][ T6544] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.657672][ T6544] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.883254][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.025893][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.126247][ T6563] sit0: entered promiscuous mode [ 140.132049][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 140.157114][ T6541] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.157294][ T6541] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.231819][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 140.389239][ T31] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 140.389265][ T31] usb 4-1: config 2 has no interface number 0 [ 140.389307][ T31] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 140.389382][ T31] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 140.389405][ T31] usb 4-1: config 2 interface 88 has no altsetting 0 [ 140.430521][ T31] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 140.430606][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.430625][ T31] usb 4-1: Product: syz [ 140.430638][ T31] usb 4-1: Manufacturer: syz [ 140.430651][ T31] usb 4-1: SerialNumber: syz [ 140.456900][ T6559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.457090][ T6559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.666478][ T6559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.666655][ T6559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.866489][ T6579] binder: BINDER_SET_CONTEXT_MGR already set [ 140.866503][ T6579] binder: 6578:6579 ioctl 4018620d 200000004a80 returned -16 [ 142.480746][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 142.480769][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 142.481613][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 142.481633][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 143.218356][ T6597] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 143.366960][ T6607] sit0: entered promiscuous mode [ 143.416357][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 145.757709][ T31] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.757728][ T31] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 145.757911][ T31] asix 4-1:2.88: probe with driver asix failed with error -71 [ 145.795730][ T31] usb 4-1: USB disconnect, device number 4 [ 145.874346][ T36] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.874365][ T36] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 145.874509][ T36] asix 3-1:2.88: probe with driver asix failed with error -71 [ 145.913976][ T36] usb 3-1: USB disconnect, device number 5 [ 146.068329][ T5870] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.219160][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 146.221270][ T5870] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 146.221294][ T5870] usb 5-1: config 0 has no interface number 0 [ 146.221336][ T5870] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 146.221359][ T5870] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 146.221381][ T5870] usb 5-1: config 0 interface 41 has no altsetting 0 [ 146.223830][ T5870] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 146.223855][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.223873][ T5870] usb 5-1: Product: syz [ 146.223886][ T5870] usb 5-1: Manufacturer: syz [ 146.223899][ T5870] usb 5-1: SerialNumber: syz [ 146.239008][ T5870] usb 5-1: config 0 descriptor?? [ 146.240707][ T6626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 146.242413][ T6626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 146.419860][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 146.419882][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 146.503869][ T6626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 146.505721][ T6626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 146.701044][ T1110] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.701137][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 146.701154][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 146.701381][ T1110] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.705411][ T1110] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.705452][ T1110] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.091409][ T6651] erspan0: entered promiscuous mode [ 147.120379][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 147.659489][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.837525][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.838624][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 147.838657][ T31] usb 3-1: can't read configurations, error -71 [ 148.332390][ T5870] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 148.332418][ T5870] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 148.332668][ T5870] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 148.345017][ T5870] usb 5-1: USB disconnect, device number 7 [ 148.868296][ T5804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.050821][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 149.068472][ T5804] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.068504][ T5804] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.068525][ T5804] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 149.068550][ T5804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.068582][ T5804] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.068603][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.130329][ T5804] usb 2-1: config 0 descriptor?? [ 149.419093][ T938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.628535][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 149.651301][ T938] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.651331][ T938] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.651414][ T938] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 149.651440][ T938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.651473][ T938] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.651494][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.729248][ T938] usb 4-1: config 0 descriptor?? [ 151.818324][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 151.979839][ T10] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 151.979856][ T10] usb 3-1: config 2 has no interface number 0 [ 151.979880][ T10] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 151.979895][ T10] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.979908][ T10] usb 3-1: config 2 interface 88 has no altsetting 0 [ 152.047807][ T10] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 152.047825][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.047835][ T10] usb 3-1: Product: syz [ 152.047842][ T10] usb 3-1: Manufacturer: syz [ 152.047849][ T10] usb 3-1: SerialNumber: syz [ 152.128833][ T6721] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.129439][ T6721] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.584908][ T6720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.603746][ T6720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.655491][ T5804] usbhid 2-1:0.0: can't add hid device: -71 [ 152.655648][ T5804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 152.673941][ T5804] usb 2-1: USB disconnect, device number 7 [ 153.943536][ T6733] __nla_validate_parse: 1 callbacks suppressed [ 153.943548][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 153.943556][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.232'. [ 154.948381][ T938] usbhid 4-1:0.0: can't add hid device: -71 [ 154.948540][ T938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.011247][ T938] usb 4-1: USB disconnect, device number 5 [ 155.828329][ T938] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.929383][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 156.003709][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.003733][ T938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.003767][ T938] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.003835][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.060133][ T938] usb 5-1: config 0 descriptor?? [ 156.299822][ T938] usb 5-1: string descriptor 0 read error: -71 [ 156.314877][ T938] usb 5-1: USB disconnect, device number 8 [ 156.420945][ T6758] syzkaller0: entered promiscuous mode [ 156.420968][ T6758] syzkaller0: entered allmulticast mode [ 158.348532][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 158.348562][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffff92 [ 158.348860][ T10] asix 3-1:2.88: probe with driver asix failed with error -110 [ 158.370944][ T31] usb 3-1: USB disconnect, device number 8 [ 158.963830][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.037527][ T6791] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 159.508862][ T5804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 159.907202][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.916223][ T5804] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 159.916260][ T5804] usb 1-1: can't read configurations, error -71 [ 160.771793][ T938] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.934689][ T938] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 160.934718][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.934736][ T938] usb 5-1: Product: syz [ 160.934749][ T938] usb 5-1: Manufacturer: syz [ 160.934763][ T938] usb 5-1: SerialNumber: syz [ 161.412586][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 161.412642][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 162.265086][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 162.265144][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.265932][ T938] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.320502][ T938] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 162.338507][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 163.312361][ T6870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.282'. [ 163.635692][ T5804] usb 5-1: USB disconnect, device number 9 [ 165.003001][ T6904] netlink: 68 bytes leftover after parsing attributes in process `syz.3.290'. [ 166.548489][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 166.548510][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'. [ 167.995254][ T6932] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000140: 0000 [#1] SMP KASAN PTI [ 167.995280][ T6932] KASAN: null-ptr-deref in range [0x0000000000000a00-0x0000000000000a07] [ 167.995315][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 167.995339][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.995351][ T6932] RIP: 0010:task_work_cancel+0x8a/0x220 [ 167.995390][ T6932] Code: b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 44 25 00 e8 4d 90 34 00 43 c6 44 25 04 00 49 89 de 48 81 c3 00 0a 00 00 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 87 a7 9a 00 48 83 3b 00 75 51 e8 [ 167.995405][ T6932] RSP: 0018:ffffc9000738fb20 EFLAGS: 00010202 [ 167.995426][ T6932] RAX: ffffffff818fe6d3 RBX: 0000000000000a00 RCX: 0000000000080000 [ 167.995438][ T6932] RDX: ffffc9001417b000 RSI: 0000000000009d83 RDI: 0000000000009d84 [ 167.995450][ T6932] RBP: ffffc9000738fbd0 R08: 0000000000000000 R09: 0000000000000000 [ 167.995460][ T6932] R10: dffffc0000000000 R11: fffff52000e71f93 R12: dffffc0000000000 [ 167.995473][ T6932] R13: 1ffff92000e71f68 R14: 0000000000000000 R15: 0000000000000140 [ 167.995484][ T6932] FS: 00007fd9474e46c0(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 167.995498][ T6932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.995509][ T6932] CR2: 00007fcf86efda08 CR3: 0000000031042000 CR4: 00000000003526f0 [ 167.995527][ T6932] Call Trace: [ 167.995534][ T6932] [ 167.995541][ T6932] ? __pfx___wait_for_common+0x10/0x10 [ 167.995560][ T6932] ? __pfx_task_work_cancel+0x10/0x10 [ 167.995582][ T6932] landlock_restrict_sibling_threads+0xdc4/0x11f0 [ 167.995609][ T6932] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 167.995633][ T6932] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 167.995670][ T6932] ? landlock_put_ruleset+0x10/0xb0 [ 167.995690][ T6932] __se_sys_landlock_restrict_self+0x540/0x810 [ 167.995712][ T6932] do_syscall_64+0x14d/0xf80 [ 167.995735][ T6932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.995751][ T6932] ? clear_bhb_loop+0x40/0x90 [ 167.995769][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.995784][ T6932] RIP: 0033:0x7fd9492cc799 [ 167.995801][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.995814][ T6932] RSP: 002b:00007fd9474e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 167.995830][ T6932] RAX: ffffffffffffffda RBX: 00007fd949546180 RCX: 00007fd9492cc799 [ 167.995841][ T6932] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000005 [ 167.995851][ T6932] RBP: 00007fd949362c99 R08: 0000000000000000 R09: 0000000000000000 [ 167.995861][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.995871][ T6932] R13: 00007fd949546218 R14: 00007fd949546180 R15: 00007ffe9e949958 [ 167.995889][ T6932] [ 167.995894][ T6932] Modules linked in: [ 167.995916][ T6932] ---[ end trace 0000000000000000 ]--- [ 167.995929][ T6932] RIP: 0010:task_work_cancel+0x8a/0x220 [ 167.995952][ T6932] Code: b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 44 25 00 e8 4d 90 34 00 43 c6 44 25 04 00 49 89 de 48 81 c3 00 0a 00 00 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 87 a7 9a 00 48 83 3b 00 75 51 e8 [ 167.995968][ T6932] RSP: 0018:ffffc9000738fb20 EFLAGS: 00010202 [ 167.995984][ T6932] RAX: ffffffff818fe6d3 RBX: 0000000000000a00 RCX: 0000000000080000 [ 167.995998][ T6932] RDX: ffffc9001417b000 RSI: 0000000000009d83 RDI: 0000000000009d84 [ 167.996012][ T6932] RBP: ffffc9000738fbd0 R08: 0000000000000000 R09: 0000000000000000 [ 167.996030][ T6932] R10: dffffc0000000000 R11: fffff52000e71f93 R12: dffffc0000000000 [ 167.996045][ T6932] R13: 1ffff92000e71f68 R14: 0000000000000000 R15: 0000000000000140 [ 167.996058][ T6932] FS: 00007fd9474e46c0(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 167.996075][ T6932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.996089][ T6932] CR2: 00007fcf86efda08 CR3: 0000000031042000 CR4: 00000000003526f0 [ 167.996107][ T6932] Kernel panic - not syncing: Fatal exception [ 167.996343][ T6932] Kernel Offset: disabled