last executing test programs: 21m44.92769859s ago: executing program 1 (id=1891): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x1, "76c570ed0aecab192371afcb8685543e345d6aca87edb7278d85f1db666a811e"}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="04"], 0x50) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(&(0x7f00000000c0)=[{r2, 0x60}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0105303, &(0x7f0000001380)={0x0, 0x0, 0x0, 'queue1\x00'}) 21m43.519650471s ago: executing program 1 (id=1894): close(0x3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d782b4857c66df726c546ef7e73d2183", 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$inet(r0, 0x0, 0x20010404) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sched_setscheduler(0x0, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000000000e, 0x402641) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) syz_open_dev$MSR(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 21m35.464089942s ago: executing program 2 (id=1906): getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000480)={0x3, 0x40000000000009b, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) read$msr(r1, &(0x7f0000019c80)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000003f80)="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", 0x1020}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x0) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002f80)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/39, 0x27}], 0x2}, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00'}) 21m35.184059643s ago: executing program 1 (id=1909): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffff7fc}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 21m32.546211019s ago: executing program 2 (id=1912): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x24, 0x22, 0x0, 0x2, 0x108, 0x61, 0x5, 0x2, 0x1}) 21m32.544509584s ago: executing program 1 (id=1913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, '\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x5, 0x6, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0x9, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x3ff, 0x2, 0x2, 0xe, 0x5, 0x1, 0x88, 0x2, 0x6, 0x5, 0xffffffff, 0x0, 0x9, 0x1b9315a1, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa5, 0x6, 0x2, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0x0, 0x2, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x2, 0x2, 0x4, 0xf, 0xae9, 0x3, 0x2, 0xa, 0x9, 0x7, 0x0, 0x0, 0x7ff, 0x4, 0x7, 0x4, 0x9, 0x65, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x8f, 0x6, 0x3, 0x8000000000000000, 0x0, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x3, 0x8, 0x5, 0x796a, 0xb0e, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xffffffffffffffff, 0x7]}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRES8=r4, @ANYRESDEC=r3, @ANYRESDEC, @ANYRES8=r3, @ANYRES16=r3, @ANYRES64=r1], 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x168, 0x10, 0x0, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x12, "0082"}}, @common=@inet=@hashlimit1={{0x58}, {'veth1_vlan\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x1, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x3, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) write$sndseq(r5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 21m32.199266231s ago: executing program 2 (id=1915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() getpid() sched_setscheduler(r2, 0x6, &(0x7f00000000c0)=0x1ff) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004801}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002380)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x58}, 0x1, 0x0, 0x0, 0x44002}, 0x24) 21m30.800993082s ago: executing program 1 (id=1916): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "642c72f67d5441f6e8da020400"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21m29.808515132s ago: executing program 2 (id=1917): iopl(0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r2, &(0x7f0000000140)='\t', 0x1) tee(r1, r0, 0x827, 0x8) 21m29.626616508s ago: executing program 3 (id=1918): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) listen(r1, 0x8) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) listen(r4, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) 21m28.616482005s ago: executing program 2 (id=1920): r0 = getpgrp(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0xfa, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x9, 0x0) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) epoll_create1(0x0) r7 = eventfd2(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) io_getevents(r6, 0x6, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) io_submit(r6, 0x1, &(0x7f00000009c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r8, 0x0, 0x0, 0x3, 0x0, 0x1, r7}]) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0xfffe, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='ext4\x00', 0x1000040, 0x0) 21m27.39336614s ago: executing program 3 (id=1922): getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000480)={0x3, 0x40000000000009b, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) read$msr(r1, &(0x7f0000019c80)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000003f80)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b82407fbb8ae52a24b445059869df6095b826013c10bb7745d9edc0ef211452945180b52cc3986fb74d70cdc0194be37b376d2d4798d4e4463d042b1a462e80d80915fcffca56f2e0f5a6b6bff7e43eb6c80c1a8e85c077f4e980c3aa7b4b34562044059224e7280a86d55356ca279765d0943a185ac585ba7355885a40b0f4d02e5afe7b154deb20048d62307273f7069b86987af5b7fd9272d1ed5a9891e493deafa8a98f30c86803d00028221b891d3ae3437e26e9e0bbb0c152036ffebc06c5aa3fe55480e68414e7283793c5f93bf95ee471bf2b70abf696bb304bbecce852fd81439df022489675c1827a96f824378a80ce5338143bbc8fc3b1955bba34f2121cf485212c7cd8b50d81382605d28573b46b376e1092560f6d76c8ee2c4ebd9cf88665cec5acd5c2bb34ed1ce0338a7c1c8583914be1ef3a054e91f35a82147c0ef819f7971e12c18c5314df9e06bbbea133f82e638fd4646fb6a517fe75130f65392e8e1456fff3ae5cc7298b7bd6e7ea141808b4b4ec6930e7ee97e802a9a5c37c7bfaf6f8fd113b1e713e9d07cf0ddddf91965c29dbcc7a6478a071efe498458ee8428baeacd171ca321a88863d747ae8ba633f835401e66c831bec8d66ede3a6be8c9d6cd2e543df191a661d934e115c49db11cd3382aa4c378ea27b37078e4dbd52d5237873388f0b114dbcd77332e3cae456d8a96465a763709b9e33255b9648f186ae462f585dd729676a66e5dcba00b76ef82b9926d820d1f81f2ef2bdedb9727bc9b8420a16af0a3d49bfabaf53637b5712cd1efcfecefea443d99749398406a15af44464330fcc7ae05bc1319a403f17320384adf670171b10572b7a3c29224327d4da0cc98605adb69b143b75f495c3ee34b0e2df6119cdecfc9c14adac77c00225ba394a33c2031f7fd6fd5c51603133fd282b714d0206a61dcbfd9826847751c0828c7258b75739fc0f26cb4f5037652f608bfd156660b8ca43069fdfd27dc658b768b0842a71bd2191064e7c343710b26b4f94900dea847881b9269a250b165aa5b32cb02e853e01df7283f5aae557f555cdd110ffa52c5c702cb214934c5aa8a99c87b2ec9dd6717693827029ad477fa822c84c83303d04a6db313af73b83ef53d0caae2a0de16e13746d092a2e6260638245c57bf2904740ef4d4385b3fd888ea17795c712dbce6a559c71a8425deab805f99ec9f16cf268c5c6cb6cbbefe71115e62c85e9a0940b96a19a49b4a9373250c5b7a2446b4393aaa144ba32a9a0fff5cffc515d48691911a84ef869af3c3b08db4d8e44279b8ecf0753e88e5405897b4050db08c254cf0ff5b69a045bc62049218a573c6a395148454953a72768ddbd4326a0d247a0a4571ea894875a2f899f47487c3d2b62e51d8239633d3421fd79b0c32d05b99256614accf64ee6e2d51a3bdd2210d000000e6ac68159923977200feba975e290d768d7255416a06c8f161fa39f7a04c4651d420f1d96703cb3773bd2a2a0c37b1603151c4cc47f0699900849509534f8ec5131cfee5d96d598e28d571328ca037a34ba31aa5e6d51fe2604f8316545f129f0ae8e0856888d3315ed22f6246852df12d67e3a64e7891df946b81495189341e9401406037cfb31490fcff4fc0406f2f70e2cabcd0fb8adeec4be909526dfa252a5aee0435df3a07e0897b86eaff8dd190f466b2a81e8a37ffb577bfb5feddefb292809c1d925c2f9cf27380dc78e74d74ceb1d31ebe84bbd2e6ce48dded3c55203966896ad1458d3d3095b9bacf250416ee27aa73a5c5d6ec6b2c9c323759ffe97df44481f796f4762e3245c0a88fd129dbafde688f2c57445665c623025a76748a9931a7f67c53faa4a155c9ba5caa38986462e48db7c580749bd372955244c9d4a17631f24b9b64036de9e97147b7056dcb54652fca36a037d0c3f754a303c594d8e04f706fe75e8f19607e6cc94ac60d83b4fc620a00b52605323391f3e005dcdb9be443b59d89760b605f32c07bef27a326863e07d770e7bb2853354f6404a83d099559e5a25849bd16c6381354ec45df14e3e16099a0cc299256118be93e47c025b01a2fe899c81411c8f6b74808562ecb2f91b8688b1617b93516b29162bf71db6e2dbee1ba98fba3cf6e7f56d90fbf017d2d81d2411515d73272bc167a55770deacb3d79dcfa1cb9c27e27585b521d3900e4fb280c1ba1f9e956bd1326bf162255f66b0189ae648a402e48cc61fdd20fd3a09070c88167730bf80b34cecfcb37a4046552d1b345f66c97fb67f1993990e55e43ee58372455864de62d636d836477fca1ca355bce2eed04ca30751ad642e61862d1e29886b9acc5be9d6ab7e6eab7c89a7ebde051116ae5f12432caa8228c4dddb5221f7f5fafeef8d397ee0c7d94dfcd2fade21947c98bd89b071f4e24dfb43b46f1db5f1276d8d71e3cccca479cb612be6bd02e6f188403b85022ed0e9d42f9c4531a11659bfd144b4a49b6659be2a548658a66d7faa44622742d7c42d7f90caa2ca3a24d10c993a9b1c814f4e0b735615cbd9c00d6bf444d0ae1071f2b74023d2e53b9d2b79f6ddaeadcef3bcc5d13971b7f9c7e72d1a431e1d79e34e1dab13ee758f741777d836905c7873de0192ecda15d3a224331fc2222f6793edd69da51befe4f772ec696e4e4e5deba877b52b91d8b7de4fd151e1009134cebf4a353e6219b21f131487b3fba0f4b7e39626c5c7583ed5073086ff735ce19cb786e8d1bf359b4c3a7bc29bbf9d441d914d7e842b88f0868d0f6a6fd41624271ad5e166d677ea5109b6c8e9d2fdfff9e944e9c9ad50b3cde7e3f229e2bbf81c6aaa7b7c8e5700362000b6509942bbed25253e0833a5f7a71975b780472ed6f3da3a2ba162f20b3b90d4a084acbb137129bbd9b65f3e9ba6886241d80ee90dcf7d64050d52e8550f21262a88395ca06b83a5b5d9c05426582c86fe7753019a71ecc84c59fae3239d195246306f153b301629fbc6bd6e3fbc6aff7d35d79c5c8046b61ec70e2b7356c9400477778990364091be2b74bdab711f5561ff137021fdf9e82a35fd5bf85673bbb2944cf1f36a2e25fa4dd948525621f7a14dc3c8d1e1f1ec9d334dddcf7f9487f3d3ec60106becfddc15ece3850215aa3231a543264263757c6417adde58eb6b624096a9759c8f7a1c9add4d374a4301a86fcc5c7b96e4e294cc935ad9315669d03b80522e5b7f6207e325cc5e9a33cdd8d5512aa388e452674a936826d47f23097d33c4e4a1f2f0802a2b9be2a608f2f0ff27f6b041d70d268f848687d45e6e510691ad516c7d7038d4153fb30415e425a4cb9d879aee8ffbca65df46876151af9a583d9a3fb331fb1b616a8007fddba31bee77e420172cd2a2a140a3376db47d7336d958bfa6f4ae80f78310c9043a184258dbaa9bba0c2482d7eb70c2bd94d52587fb92fd80c58110b05ad6eb1623009cd263deb3cb219bfde713ef738dfed0b1c6254177d939e8c358cc69ddfa3e31aa4c3cbfe384d96749217ff3b2b45a15f34403fe327aa2f805d1eaf7ee7f187070032eceba18a11e4ccf7c2e3a4d5c72d1db7b0bb5dc2354ae7eb27dedb91a5571203835b482353950220ad39f21334135c6fdd22a71c6119ce5dfa292a71ad296b141663210872c192aa228e21068d717235f1186234de39e69e5904ead38314ef69b86a656371d9987d327a7064fc6e1acd7f822165b1e42da9bff573db1eaf2563552bf6dbb6591031883f5cf7e22d1f2e2522e5bb88fc4bdece187d7f2612886a7f314895d43dd2c9e1b731aec39014028590ea0c76f1cd7d71c96ed45ce31d5e38f38a36a95d54708875dd99d8612275450a700251c7f21742d31b9be6de5fcf63b7b639ff746f31537694b3005ddf6cc8375f25bd782bc784943b72bd19f938a449fe0a617b5b1430a4d506e3bf0a1f118b6e45e9e6a3515efd9ecd1a964c5459921b01a0cacf0d4e4659f06ee2e53123a2241b583072f91af6b82f51fa14622ead00697b2f511e7f54cc4e8b015bd03b4ebae849ec9f7738d945450ff8363aee60678b80a86e93326f6a87d73b1a114f6f6186e2a4365d66d5b74df15280c4060ec847da5a1baf1706e7a373f2ec73ad755bffdd5813cf5ce8cf8b07d4ac8b324293b7248145b35b13fe638f902c5e8147084c221591cefa221573080f49ed7b3479e9c81c4ec2e5e8df89ce0266f6023327aae85f74fc70085398ca9749a1b8467d3d2d7bdcfc4bb9af62721a4cf55a5d2600210eeda03de3b9353725eb991583d7226debf7e3d4b06d89c41599b3687d56571c6c810882e1060510b0e6480b4e3d8705c858e24897dd8bd936f9a16bd626b98dd55696aa2dea3c0a12a6b12f5befba90ea487134453b5a8e863b5446565730e9d84e019d664654568c3448bbddd8cccc15e4615addae0d732dafe6f54b229cd5689396720d0010dfea3f9e6d9793b51be5c4e39659e8eb604ec15ee7ae2a2961a8b815d9417795cdde0702d6cf7dcdc16f02365d7eee5dfc7a0a9ea3957672f00a209fb845e782777ef9e5c9e7aa7926bb93c3486a8612e222ddc9709d9a2acef6c60db859c4fd39f365bb22f90edd04f891fd3ccdff35c5eac56ec49d02063a7859aa14c938d575fb85cc26a3f3fb3ef4d8ce576e927dc54c27702aff904e133a6869ac4384ca6ce273d1a7f3b4ffb570dd097e607ade8eb8ca1d436733262b527c508e4ff7e09bb56432c36a38065c582210252efc06aa0d3fe0ea99e97e6ee88f80ad33bcb2cd0570b8f97488bfe09d4560b9ab44ec7ea5726d291460ab46d32922c1b37067425ff9abc8a4bf810879114dc266a575e1ddcbfd6ef2c51b624091b3ebe68ededfd94f883ae674b1f00be817a559b3c6376aa68f039628ae425191b7c7ba60e73b0fa3c4fe5533b4f8fe0b21f61a5f9e520e22cdbebd929048552b6d8d1d5c18fa9900b7786462e7e4d738e57485e9a6dd14a0fd37f0256613317df8ec3518c7eee50c59070a7276f8b0575426887f2cb5be122cc766a25a07132ef01611d0c2d3f16de29a8c0f39a3a5a3e9596b61fdd3dff97b95ff67b4798ddbc4b14e518bcc52cdd2d87605ce9d9c5f2a6d4e11d2f94575b0d5de72d0b97d0a2cf32b5465c6a4ddb62d61b97f2331341c9d448ec765180f858394f2c0b2ee982b9f867d73f97d0e0e3b275ef49c7c262c4d6f5fac787edafaa8b79410b1288a0b52afd93c8584ff9d61eddfa0cada98bd3c200fc708078098764bbe304c44d62eff132415a917c022c9f7466318017da7b4649eb0fae58fcb716a1f295d84dd9ec14218beb0372c041aaa4421a8f75eaef5115f0f32aca8fd30fde0e9e08972e23faf5381eb18c626c0ce920261461c3dfe7f1e8b35ca16f7283de3af4bba5c384e256cd369568214101a8e27c94531a81fe4fba595a4455f8724eebea716d1a4940b3d787fc4bd6ad8aa403fceb74f316fb5a816890646338efb6f13aba195f127aa1b1107bf303b1f997c74d6f4f664d708f58c3b3ca063825405ad7a61260debf4b220443b6537f5ae94820ec62901944cc9023e655f82e0e31a13f351ed0336cbcfda8ae0b20025fb33e49f011f6aa708140cffefbd06f9b90fefc6f9d79f67495ff0b1a2f1ff075eda3fdd800088fc0583dc0e1e9f7f02673da61cc4466a2559d70cd90e453b11449442eb11f4440a8d12c88c52b51ebf6e5d3754ab023d269e2e74f9a8b905ba0f3ce0385f868076957c5cb218597c1f650ad585f67f4fbc80114b09402c5108f287", 0x1020}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x0) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002f80)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/39, 0x27}], 0x2}, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00'}) 21m27.349092202s ago: executing program 1 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) socket$inet6(0xa, 0x80001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r5) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@nfs_export_on}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 21m25.625551605s ago: executing program 2 (id=1925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) iopl(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 21m23.753627464s ago: executing program 3 (id=1928): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 21m23.338323646s ago: executing program 3 (id=1930): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) 21m22.970567911s ago: executing program 3 (id=1932): getpid() prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') tee(0xffffffffffffffff, r0, 0x6, 0xd) 21m20.660017579s ago: executing program 3 (id=1935): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x81, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200008c0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r3, 0xc6c3, 0x0) unshare(0xc000400) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21m11.841047825s ago: executing program 32 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) socket$inet6(0xa, 0x80001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r5) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@nfs_export_on}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 21m10.296475973s ago: executing program 33 (id=1925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) iopl(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 21m5.137977432s ago: executing program 34 (id=1935): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x81, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200008c0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r3, 0xc6c3, 0x0) unshare(0xc000400) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m12.723287567s ago: executing program 0 (id=4419): sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) 4m9.027809008s ago: executing program 0 (id=4425): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m6.863506716s ago: executing program 0 (id=4429): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00"/82], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4m3.765805821s ago: executing program 0 (id=4432): r0 = fsopen(0x0, 0x1) fsmount(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) 4m0.894970859s ago: executing program 0 (id=4435): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 3m56.567885486s ago: executing program 0 (id=4440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) close_range(r1, r1, 0x0) 3m55.691983214s ago: executing program 7 (id=4442): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00"/82], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3m53.94506424s ago: executing program 7 (id=4444): syz_open_dev$loop(0x0, 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '`\n\t\xe5[\x19\xde!o\xf4\xd7\xd2\x03\n\xa2\xb3-|Nt\xf83\xad\x13\xaf\x9cF\x92\x85\v\xc1`R\xe0\xfd;}v\x87\xb1\a\x00\xacJ:\xc6\xd60R\xa0\x92\x1c\x93\xe2:\x9f>\xdd\xf5w\ay\xe17\xa3x\xf1q\x85\x95Wq\xdfgG\x01.\x91\x9cs\x19\x06\xf1/\xe2\x992\xc9\x12\xcbJ\xc6\xfd\xbb\x80Q\x11f\xf9b{\xe6J\xbd\xaa\xdf\x8eN\xdd<\xc0N\xd1N\x1f%\xf1\xcaw\xfc\xd0\x1c\"\x80Cg\xed\t K1:[oW\x1e\x89\xf7\x86\r\x85\x9c{#ou\xfb\xd4\xba\x9b\xde\xa1oS\xc1\xae0\xf6T\x11@P\xe1\x9f\x17\xcbL\xe1z}e<'}, {0x20, '\x00\x88'}], 0xa, "521299a432289bea"}, 0xcc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setown(r4, 0x8, 0x0) fcntl$setlease(r4, 0x400, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 3m50.391906386s ago: executing program 7 (id=4450): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 3m48.175593889s ago: executing program 7 (id=4454): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00"/88], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3m47.252657596s ago: executing program 7 (id=4456): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1fc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="84fa", 0x2}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x8c0) 3m46.343385478s ago: executing program 7 (id=4460): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000b00), 0x8}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0xc050) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c00180008ac0f00000000001400fe0000000000000000000000ffffac1414290d4e821a710cb1932987b0e75aed541650bb2d6f67d29d6fabadb11dd0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973dea6b8b0a99b962bc0fe94a3fcae3697948545bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d97fccc9cc917712df9e99f079767734f56ce"], 0x118}], 0x1, 0x0, 0x0, 0x240000b1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') 3m41.324462572s ago: executing program 35 (id=4440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) close_range(r1, r1, 0x0) 3m30.277930003s ago: executing program 36 (id=4460): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000b00), 0x8}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0xc050) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c00180008ac0f00000000001400fe0000000000000000000000ffffac1414290d4e821a710cb1932987b0e75aed541650bb2d6f67d29d6fabadb11dd0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973dea6b8b0a99b962bc0fe94a3fcae3697948545bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d97fccc9cc917712df9e99f079767734f56ce"], 0x118}], 0x1, 0x0, 0x0, 0x240000b1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') 3m8.99644558s ago: executing program 6 (id=4500): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) dup(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 3m8.04059277s ago: executing program 6 (id=4502): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e4198601e547179700000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000394"], 0x1fc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="84fa", 0x2}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x8c0) 3m7.308997981s ago: executing program 6 (id=4504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}}, 0x0) 3m6.158845742s ago: executing program 6 (id=4506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="cc00330080000000ffffffffffff080211000000f70b87594b3f00000000000001000100dd068b7668a2"], 0xe8}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 3m4.993633446s ago: executing program 6 (id=4510): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) dup(0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 3m2.684949668s ago: executing program 6 (id=4512): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x3, 0x9) sendmsg$nl_route_sched(r0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000400)={0x6, 0xa, 0x4651, 0x4, 0x0, 0x46bf27c1, 0x2, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004ec0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x1d}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'erspan0\x00', 'tunl0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x2, 0x80805, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m56.944027572s ago: executing program 4 (id=4516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r2, @ANYBLOB="080002007f00000108"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @empty=0x7f000000}}) 2m54.239485366s ago: executing program 4 (id=4518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) 2m50.466894124s ago: executing program 4 (id=4521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x0) 2m48.859104993s ago: executing program 4 (id=4523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd80, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val, {0x8100, 0x1, 0x0, 0xffc}}, {@llc_tr={0x11, {@llc={0xf8, 0xaa, '\f', "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"}}}}}, 0x0) 2m46.771688899s ago: executing program 37 (id=4512): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x3, 0x9) sendmsg$nl_route_sched(r0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000400)={0x6, 0xa, 0x4651, 0x4, 0x0, 0x46bf27c1, 0x2, 0x2}, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004ec0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x1d}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'erspan0\x00', 'tunl0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x2, 0x80805, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m45.806421342s ago: executing program 4 (id=4527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrlimit(0xb, 0x0) 2m44.13211758s ago: executing program 4 (id=4529): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 2m28.788356467s ago: executing program 38 (id=4529): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 9.357291986s ago: executing program 5 (id=4630): r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.256249302s ago: executing program 5 (id=4631): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, r1, 0x4}, 0x10) 5.91798415s ago: executing program 5 (id=4632): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) 3.668199557s ago: executing program 5 (id=4633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x59c5c513b6279947, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.759914763s ago: executing program 5 (id=4634): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x1}], 0x1}, 0x0) sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x29, 0x10001, "bd"}], 0x18}}], 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x2000c840) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) socket(0x23, 0x3, 0x0) 0s ago: executing program 5 (id=4635): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b00"/45, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00"/93], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): 20] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1233.456340][T14220] usb 7-1: USB disconnect, device number 5 [ 1234.005066][T17303] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3323'. [ 1246.461163][T17381] binder: BINDER_SET_CONTEXT_MGR already set [ 1246.461189][T17381] binder: 17378:17381 ioctl 4018620d 2000000002c0 returned -16 [ 1247.092380][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1247.262841][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1247.266904][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1247.266928][ T10] usb 6-1: config 0 has no interface number 0 [ 1247.293086][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1247.293114][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.293132][ T10] usb 6-1: Product: syz [ 1247.293146][ T10] usb 6-1: Manufacturer: syz [ 1247.293158][ T10] usb 6-1: SerialNumber: syz [ 1247.314174][ T10] usb 6-1: config 0 descriptor?? [ 1247.758602][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1247.758632][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1248.091966][ T5724] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1248.221995][ T5724] usb 1-1: device descriptor read/64, error -71 [ 1248.521957][ T5724] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1248.658307][ T5724] usb 1-1: device descriptor read/64, error -71 [ 1248.762263][ T5724] usb usb1-port1: attempt power cycle [ 1249.016048][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1249.016374][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1249.065500][ T10] usb 6-1: USB disconnect, device number 5 [ 1249.382269][ T5724] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1249.402855][ T5724] usb 1-1: device descriptor read/8, error -71 [ 1249.670458][T17423] binder: BINDER_SET_CONTEXT_MGR already set [ 1249.670474][T17423] binder: 17422:17423 ioctl 4018620d 2000000002c0 returned -16 [ 1249.672230][ T5724] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1249.696094][ T5724] usb 1-1: device descriptor read/8, error -71 [ 1249.802198][ T5724] usb usb1-port1: unable to enumerate USB device [ 1251.527001][T17441] "syz.0.3368" (17441) uses obsolete ecb(arc4) skcipher [ 1252.355440][T17447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3368'. [ 1252.355519][T17447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3368'. [ 1252.950144][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.950295][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.657611][T17465] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.657625][T17465] binder: 17461:17465 ioctl 4018620d 200000004a80 returned -16 [ 1253.793431][T17469] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.793447][T17469] binder: 17468:17469 ioctl 4018620d 2000000002c0 returned -16 [ 1256.347696][T17491] "syz.0.3384" (17491) uses obsolete ecb(arc4) skcipher [ 1256.618921][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3384'. [ 1256.619681][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3384'. [ 1257.817883][T17508] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1257.883526][T17510] binder: 17509:17510 ioctl c0306201 0 returned -14 [ 1257.908840][T17510] binder: 17509:17510 ioctl c0306201 200000000680 returned -14 [ 1261.499812][T17534] "syz.5.3400" (17534) uses obsolete ecb(arc4) skcipher [ 1262.038566][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3400'. [ 1262.039254][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3400'. [ 1263.855128][T17555] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.3406'. [ 1264.741524][ T37] audit: type=1326 audit(2000000930.310:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17557 comm="syz.0.3407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6287f5ce59 code=0x0 [ 1268.428256][T17597] netlink: 15672 bytes leftover after parsing attributes in process `syz.7.3420'. [ 1277.239259][T17641] comedi comedi0: Minor 16777222 is invalid! [ 1278.331668][ T7567] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1278.468106][T17653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1278.912102][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1279.071905][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1279.078207][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.078233][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1279.115537][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1279.115567][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.115586][ T10] usb 6-1: Product: syz [ 1279.115599][ T10] usb 6-1: Manufacturer: syz [ 1279.115612][ T10] usb 6-1: SerialNumber: syz [ 1279.199629][ T10] usb 6-1: 0:2 : does not exist [ 1279.446829][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1279.631090][ T10] usb 6-1: USB disconnect, device number 6 [ 1279.909445][T13986] udevd[13986]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.364464][ T7567] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1280.673762][T17687] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3449'. [ 1283.809704][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3462'. [ 1285.266026][T17729] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1286.463486][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1286.805969][T17759] fuse: fd is not a fuse device [ 1288.970331][T17778] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3484'. [ 1289.755397][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1290.470400][ T7567] Bluetooth: Wrong link type (-71) [ 1292.461637][T17813] netlink: 'syz.6.3498': attribute type 8 has an invalid length. [ 1292.955656][T17818] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1296.585985][ T7567] Bluetooth: Wrong link type (-71) [ 1297.511981][T12022] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1297.704724][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1297.748520][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1297.755761][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1297.766034][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1297.770431][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1297.772019][T12022] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1297.772052][T12022] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.772090][T12022] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1297.772155][T12022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.939254][T12022] usb 1-1: config 0 descriptor?? [ 1297.962803][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3511'. [ 1298.442407][T12022] usbhid 1-1:0.0: can't add hid device: -71 [ 1298.442533][T12022] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1298.470748][T12022] usb 1-1: USB disconnect, device number 7 [ 1298.692345][T17875] binder: 17873:17875 ioctl c0306201 200000000680 returned -14 [ 1299.971990][ T7567] Bluetooth: hci4: command tx timeout [ 1302.760239][ T7567] Bluetooth: hci4: command tx timeout [ 1303.552204][ T7567] Bluetooth: Wrong link type (-71) [ 1304.862047][ T7567] Bluetooth: hci4: command tx timeout [ 1305.062428][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.062706][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.062882][T17853] bridge_slave_0: entered allmulticast mode [ 1305.068440][T17853] bridge_slave_0: entered promiscuous mode [ 1305.110841][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.119990][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.120230][T17853] bridge_slave_1: entered allmulticast mode [ 1305.145569][T17853] bridge_slave_1: entered promiscuous mode [ 1305.159747][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3522'. [ 1305.405916][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.418121][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.523238][T17853] team0: Port device team_slave_0 added [ 1305.528007][T17853] team0: Port device team_slave_1 added [ 1305.636674][T17924] binder: 17922:17924 ioctl c0306201 200000000680 returned -14 [ 1305.805648][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.805660][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.805674][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.812660][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.812674][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.812698][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.861942][T14220] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1305.940790][T17853] hsr_slave_0: entered promiscuous mode [ 1305.944358][T17853] hsr_slave_1: entered promiscuous mode [ 1305.945255][T17853] debugfs: 'hsr0' already exists in 'hsr' [ 1305.945277][T17853] Cannot create hsr debugfs directory [ 1306.024251][T14220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1306.024290][T14220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.024328][T14220] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1306.024356][T14220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.073025][T14220] usb 7-1: config 0 descriptor?? [ 1306.676090][T14220] usbhid 7-1:0.0: can't add hid device: -71 [ 1306.676230][T14220] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1306.701065][T14220] usb 7-1: USB disconnect, device number 6 [ 1306.793082][ T7567] Bluetooth: Wrong link type (-71) [ 1306.959458][ T7567] Bluetooth: hci4: command tx timeout [ 1309.142188][T14840] bridge_slave_1: left allmulticast mode [ 1309.142279][T14840] bridge_slave_1: left promiscuous mode [ 1309.142556][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.043566][T14840] bridge_slave_0: left allmulticast mode [ 1310.043600][T14840] bridge_slave_0: left promiscuous mode [ 1310.043893][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.149320][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3535'. [ 1310.181571][T17972] binder: 17971:17972 ioctl 4018620d 0 returned -22 [ 1310.189787][T17972] binder: 17971:17972 ioctl c0306201 200000000680 returned -14 [ 1313.023993][T14840] bond0 (unregistering): (slave 30): Releasing backup interface [ 1313.083437][T14840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.122631][T14840] bond0 (unregistering): Released all slaves [ 1313.128770][T14840] bond1 (unregistering): Released all slaves [ 1313.141573][T14840] bond2 (unregistering): Released all slaves [ 1313.152391][T14840] bond3 (unregistering): Released all slaves [ 1313.170001][T14840] bond4 (unregistering): Released all slaves [ 1313.188798][T14840] bond5 (unregistering): Released all slaves [ 1313.211355][T14840] bond6 (unregistering): Released all slaves [ 1313.236843][T14840] bond7 (unregistering): Released all slaves [ 1313.471092][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1314.217446][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1314.217531][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.511917][ T5728] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1314.661940][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 1314.680733][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.680770][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.698028][ T5728] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1314.698057][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.698076][ T5728] usb 1-1: Product: syz [ 1314.698088][ T5728] usb 1-1: Manufacturer: syz [ 1314.698101][ T5728] usb 1-1: SerialNumber: syz [ 1314.726381][ T5728] usb 1-1: 0:2 : does not exist [ 1315.538353][ T7567] Bluetooth: Wrong link type (-71) [ 1316.005445][ T5728] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1316.080721][ T5728] usb 1-1: USB disconnect, device number 8 [ 1316.165909][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1316.351877][T13986] udevd[13986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.852852][T14840] hsr_slave_0: left promiscuous mode [ 1320.388749][T14840] hsr_slave_1: left promiscuous mode [ 1320.722840][T14840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.776934][T14840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.304783][ T5603] Bluetooth: Wrong link type (-71) [ 1322.561943][T10758] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1322.729255][T10758] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1322.729283][T10758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.729295][T10758] usb 1-1: Product: syz [ 1322.729302][T10758] usb 1-1: Manufacturer: syz [ 1322.729353][T10758] usb 1-1: SerialNumber: syz [ 1322.764895][T10758] usb 1-1: config 0 descriptor?? [ 1322.788672][T10758] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 1322.923957][T14840] team0 (unregistering): Port device team_slave_1 removed [ 1323.042552][T14840] team0 (unregistering): Port device team_slave_0 removed [ 1323.376152][T18068] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3554'. [ 1323.421324][T10758] i2c i2c-1: failure reading functionality [ 1323.527463][T10758] i2c i2c-1: connected i2c-tiny-usb device [ 1323.565555][T10758] usb 1-1: USB disconnect, device number 9 [ 1323.971689][T18104] binder: 18102:18104 ioctl c0306201 0 returned -14 [ 1323.972560][T18104] binder: 18102:18104 ioctl c0306201 200000000680 returned -14 [ 1327.486715][T17853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1328.476492][T17853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.477571][T17853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1328.676666][T17853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.678438][T17853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1328.790458][T17853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.791741][T17853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1329.585182][T17853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1329.938633][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.986540][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.003695][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.003880][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.038779][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.039720][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.315768][T18143] binder: 18142:18143 ioctl c0306201 0 returned -14 [ 1330.333295][T18143] binder: 18142:18143 ioctl c0306201 200000000680 returned -14 [ 1331.664804][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.812030][T14220] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1332.833504][T17853] veth0_vlan: entered promiscuous mode [ 1332.848360][T17853] veth1_vlan: entered promiscuous mode [ 1332.986741][T17853] veth0_macvtap: entered promiscuous mode [ 1332.992051][T14220] usb 1-1: Using ep0 maxpacket: 32 [ 1333.016508][T17853] veth1_macvtap: entered promiscuous mode [ 1333.028130][T14220] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1333.028159][T14220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.041439][T14220] usb 1-1: config 0 descriptor?? [ 1333.072619][T14220] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1333.118822][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.152765][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1333.170837][T14840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.183179][T14840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.184847][T14840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.184891][T14840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.278324][T14220] gspca_sunplus: reg_w_riv err -71 [ 1333.278448][T14220] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1333.285927][T14220] usb 1-1: USB disconnect, device number 10 [ 1333.814327][ T5728] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1333.972403][ T5728] usb 7-1: Using ep0 maxpacket: 16 [ 1333.987068][ T5728] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.987093][ T5728] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1334.018035][ T5728] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1334.018062][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.018079][ T5728] usb 7-1: Product: syz [ 1334.018091][ T5728] usb 7-1: Manufacturer: syz [ 1334.018103][ T5728] usb 7-1: SerialNumber: syz [ 1334.337523][ T5728] usb 7-1: 0:2 : does not exist [ 1334.364938][ T5728] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1334.518831][ T5728] usb 7-1: USB disconnect, device number 7 [ 1334.735261][T18189] binder: 18188:18189 ioctl c0306201 0 returned -14 [ 1334.735672][T18189] binder: 18188:18189 ioctl c0306201 200000000680 returned -14 [ 1334.826562][T14840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.826584][T14840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.198578][T13986] udevd[13986]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.227817][T10032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.227838][T10032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.026240][T18220] binder: 18219:18220 ioctl c0306201 200000000680 returned -14 [ 1339.698787][T18239] sctp: [Deprecated]: syz.6.3603 (pid 18239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1339.698787][T18239] Use struct sctp_sack_info instead [ 1341.821250][T18259] binder: 18258:18259 ioctl c0306201 200000000680 returned -14 [ 1344.927791][T18291] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3621'. [ 1345.230883][T18297] binder: 18296:18297 ioctl c0306201 200000000680 returned -14 [ 1347.178442][T18324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3634'. [ 1348.673695][T18332] binder: 18331:18332 ioctl c0306201 200000000680 returned -14 [ 1349.438976][T18345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1349.778940][T18347] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3644'. [ 1350.595298][T18359] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3648'. [ 1350.644324][T18362] binder: 18361:18362 ioctl c0306201 200000000680 returned -14 [ 1351.736706][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1351.736729][T18384] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1351.736872][T18384] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1353.716371][T18386] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3660'. [ 1353.953725][T18396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1354.007723][T18398] binder: 18397:18398 ioctl c0306201 200000000680 returned -14 [ 1354.281374][T18406] sctp: [Deprecated]: syz.0.3668 (pid 18406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1354.281374][T18406] Use struct sctp_sack_info instead [ 1355.171518][T18418] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1355.171542][T18418] netlink: 212 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1355.171599][T18418] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1357.405186][T18426] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1358.067162][T18437] binder: 18436:18437 ioctl c0306201 0 returned -14 [ 1358.148214][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1359.638156][T18467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1360.792229][T18485] binder: 18484:18485 ioctl c0306201 0 returned -14 [ 1361.598562][T18505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1363.770055][T18538] sctp: [Deprecated]: syz.6.3714 (pid 18538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1363.770055][T18538] Use struct sctp_sack_info instead [ 1363.971026][T18543] binder: 18542:18543 ioctl c0306201 0 returned -14 [ 1364.084192][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3717'. [ 1364.613598][ T7567] Bluetooth: hci2: command 0x1003 tx timeout [ 1364.613934][ T5603] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1365.674144][T18562] fuse: Bad value for 'fd' [ 1366.806665][T14220] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1366.954440][T14220] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1366.956035][T14220] usb 6-1: not running at top speed; connect to a high speed hub [ 1366.957745][T14220] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.957767][T14220] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1366.957812][T14220] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1366.957836][T14220] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1366.961254][T14220] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1366.961280][T14220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.961297][T14220] usb 6-1: Product: syz [ 1366.961309][T14220] usb 6-1: Manufacturer: syz [ 1366.961322][T14220] usb 6-1: SerialNumber: syz [ 1367.168059][T18578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3728'. [ 1367.272855][T14220] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1367.272902][T14220] cdc_ncm 6-1:1.0: bind() failure [ 1367.280500][T14220] usb 6-1: USB disconnect, device number 7 [ 1368.433285][T18600] fuse: Bad value for 'fd' [ 1369.600043][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3742'. [ 1370.251893][T14279] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1370.455826][T14279] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1370.456369][T14279] usb 6-1: not running at top speed; connect to a high speed hub [ 1370.457448][T14279] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.457468][T14279] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1370.457506][T14279] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.457519][T14279] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1370.459846][T14279] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1370.459870][T14279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.459887][T14279] usb 6-1: Product: syz [ 1370.459900][T14279] usb 6-1: Manufacturer: syz [ 1370.459913][T14279] usb 6-1: SerialNumber: syz [ 1370.751556][T18629] fuse: Bad value for 'fd' [ 1370.796485][T14279] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1370.796532][T14279] cdc_ncm 6-1:1.0: bind() failure [ 1370.821687][T14279] usb 6-1: USB disconnect, device number 8 [ 1372.452029][ T5728] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1372.606318][ T5728] usb 6-1: Using ep0 maxpacket: 16 [ 1372.608723][ T5728] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.608786][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1372.608810][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1372.608892][ T5728] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1372.608911][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.613808][ T5728] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1372.613833][ T5728] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1372.613850][ T5728] usb 6-1: Manufacturer: syz [ 1372.639534][ T5728] usb 6-1: config 0 descriptor?? [ 1373.061974][ T5728] rc_core: IR keymap rc-hauppauge not found [ 1373.061996][ T5728] Registered IR keymap rc-empty [ 1373.088187][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.103574][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.128906][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1373.151393][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 1373.287197][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.303907][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.324433][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.341974][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.362087][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.382002][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.401988][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.422153][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.442009][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.461958][ T5728] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.510645][ T5728] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1373.510671][ T5728] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1373.547624][ T5728] usb 6-1: USB disconnect, device number 9 [ 1374.428996][T18672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1374.429031][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1374.720303][T18676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1375.950312][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1375.950390][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.400881][T18698] netlink: 388 bytes leftover after parsing attributes in process `syz.7.3772'. [ 1377.864948][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1377.864972][T18717] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1377.865036][T18717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1381.487644][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1381.487667][T18751] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1381.487713][T18751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1382.391983][T12022] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1382.557831][T12022] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1382.569907][T12022] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1382.569949][T12022] usb 1-1: can't read configurations, error -71 [ 1385.157321][T18800] netlink: 'syz.5.3812': attribute type 61 has an invalid length. [ 1385.335672][T18806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1386.731932][T12022] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1386.904686][T12022] usb 1-1: device descriptor read/64, error -71 [ 1387.512003][T12022] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1388.993218][T12022] usb 1-1: device descriptor read/64, error -71 [ 1389.146334][T12022] usb usb1-port1: attempt power cycle [ 1389.833656][T18846] binder: 18845:18846 ioctl c0306201 200000000680 returned -14 [ 1392.071982][T12022] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1392.592597][T12022] usb 5-1: device descriptor read/64, error -71 [ 1393.223952][T12022] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1394.284052][T12022] usb 5-1: device descriptor read/64, error -71 [ 1394.339813][T18883] binder: 18882:18883 ioctl c0306201 200000000680 returned -14 [ 1394.397736][T12022] usb usb5-port1: attempt power cycle [ 1395.494000][T12022] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1395.525658][T12022] usb 5-1: device descriptor read/8, error -71 [ 1395.763520][T12022] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1395.785339][T12022] usb 5-1: device descriptor read/8, error -71 [ 1395.892245][T12022] usb usb5-port1: unable to enumerate USB device [ 1399.307749][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1399.307833][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1401.711912][ T4983] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1401.851875][ T4983] usb 6-1: device descriptor read/64, error -71 [ 1402.103615][ T4983] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1402.252383][ T4983] usb 6-1: device descriptor read/64, error -71 [ 1402.410361][ T4983] usb usb6-port1: attempt power cycle [ 1403.813229][ T4983] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1403.832955][ T4983] usb 6-1: device descriptor read/8, error -71 [ 1404.123550][ T4983] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1404.152608][ T4983] usb 6-1: device descriptor read/8, error -71 [ 1404.272357][ T4983] usb usb6-port1: unable to enumerate USB device [ 1407.463647][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1407.463724][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1409.382983][T12022] kernel write not supported for file bpf-prog (pid: 12022 comm: kworker/1:5) [ 1409.801954][T14279] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1409.941880][T14279] usb 6-1: device descriptor read/64, error -71 [ 1410.204371][T14279] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1411.043687][T14279] usb 6-1: device descriptor read/64, error -71 [ 1411.153665][T14279] usb usb6-port1: attempt power cycle [ 1411.501964][T14279] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1411.524263][T14279] usb 6-1: device descriptor read/8, error -71 [ 1411.761875][T14279] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1411.784073][T14279] usb 6-1: device descriptor read/8, error -71 [ 1412.487907][T14279] usb usb6-port1: unable to enumerate USB device [ 1413.142458][T19042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3892'. [ 1413.143211][T19042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3892'. [ 1418.561917][T10758] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 1418.711909][T12022] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1418.734097][T10758] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1418.734123][T10758] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1418.734140][T10758] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1418.734592][T10758] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1418.734669][T10758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1418.734680][T10758] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1418.809225][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1418.809299][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1419.281891][T12022] usb 7-1: Using ep0 maxpacket: 8 [ 1419.285086][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1419.285162][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1419.320895][T12022] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1419.320925][T12022] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1419.350050][T12022] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.350086][T12022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.350106][T12022] usb 7-1: Product: syz [ 1419.350119][T12022] usb 7-1: Manufacturer: syz [ 1419.350132][T12022] usb 7-1: SerialNumber: syz [ 1419.604915][T12022] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1419.605021][T12022] cdc_ncm 7-1:1.0: bind() failure [ 1419.648713][T12022] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1419.648759][T12022] cdc_ncm 7-1:1.1: bind() failure [ 1419.665822][T12022] usb 7-1: USB disconnect, device number 8 [ 1419.723046][T13986] udevd[13986]: setting mode of /dev/bus/usb/007/008 to 020664 failed: No such file or directory [ 1419.723225][T13986] udevd[13986]: setting owner of /dev/bus/usb/007/008 to uid=0, gid=0 failed: No such file or directory [ 1421.456715][T10758] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1421.456752][T10758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.503269][T10758] usb 5-1: config 0 descriptor?? [ 1421.536410][T10758] usb 5-1: can't set config #0, error -71 [ 1421.551584][T10758] usb 5-1: USB disconnect, device number 10 [ 1423.967789][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 1425.421909][T14220] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1425.576689][T14220] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1425.576716][T14220] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1425.576734][T14220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1425.576767][T14220] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1425.576811][T14220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1425.576831][T14220] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1428.963868][T14220] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1428.963899][T14220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.004351][T14220] usb 5-1: config 0 descriptor?? [ 1429.004958][T14220] usb 5-1: can't set config #0, error -71 [ 1429.023972][T14220] usb 5-1: USB disconnect, device number 11 [ 1429.325888][T19198] Invalid argument reading file caps for ./file0 [ 1430.812002][T14220] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 1431.917225][T14220] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1431.917253][T14220] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1431.917270][T14220] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1431.917302][T14220] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1431.917336][T14220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1431.917413][T14220] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1433.283239][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1433.601239][T14220] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1433.601267][T14220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.656019][T14220] usb 1-1: config 0 descriptor?? [ 1433.656516][T14220] usb 1-1: can't set config #0, error -71 [ 1433.657948][T14220] usb 1-1: USB disconnect, device number 16 [ 1433.954416][ T37] audit: type=1326 audit(2000001102.516:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1433.954470][ T37] audit: type=1326 audit(2000001102.526:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1433.961040][ T37] audit: type=1326 audit(2000001102.526:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.052834][ T37] audit: type=1326 audit(2000001102.626:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.053149][ T37] audit: type=1326 audit(2000001102.626:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.053473][ T37] audit: type=1326 audit(2000001102.626:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.053724][ T37] audit: type=1326 audit(2000001102.626:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.055040][ T37] audit: type=1326 audit(2000001102.626:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe57623d68e code=0x7ffc0000 [ 1434.055086][ T37] audit: type=1326 audit(2000001102.626:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.055184][ T37] audit: type=1326 audit(2000001102.626:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19256 comm="syz.6.3961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x7ffc0000 [ 1434.321930][T11806] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1434.471849][T11806] usb 7-1: Using ep0 maxpacket: 8 [ 1434.474804][T11806] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.474853][T11806] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1434.474874][T11806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.496924][T11806] usb 7-1: config 0 descriptor?? [ 1434.562165][T11806] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -22 [ 1435.173786][T14220] usb 7-1: USB disconnect, device number 9 [ 1435.959766][T19283] mmap: syz.0.3968 (19283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1435.987686][T19283] overlayfs: missing 'lowerdir' [ 1437.094979][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1437.095044][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.612043][T10758] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1439.771966][T10758] usb 6-1: Using ep0 maxpacket: 32 [ 1439.778383][T10758] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1439.778410][T10758] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1439.778428][T10758] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1439.778475][T10758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1439.778493][T10758] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1439.778513][T10758] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1439.778551][T10758] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1439.778570][T10758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.793860][T10758] usb 6-1: config 0 descriptor?? [ 1440.088770][T19328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1440.228649][T10758] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1440.360819][T11806] usb 6-1: USB disconnect, device number 18 [ 1440.531057][T11806] usblp0: removed [ 1451.031022][T19436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1456.390681][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1456.390747][ T37] audit: type=1326 audit(2000000011.920:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19463 comm="syz.6.4028" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x0 [ 1457.124462][T19477] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1461.721137][T19518] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4036'. [ 1462.394976][T19525] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1466.888974][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4059'. [ 1467.083955][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4059'. [ 1469.351298][T19600] input: syz1 as /devices/virtual/input/input8 [ 1470.057155][T19608] loop2: detected capacity change from 0 to 7 [ 1470.144630][T19608] Dev loop2: unable to read RDB block 7 [ 1470.144662][T19608] loop2: unable to read partition table [ 1470.144802][T19608] loop2: partition table beyond EOD, truncated [ 1470.144830][T19608] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1472.750240][T19626] binder: 19625:19626 ioctl 4018620d 0 returned -22 [ 1472.750654][T19626] binder: 19625:19626 ioctl 4008941a 200000000200 returned -22 [ 1474.512075][T10758] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1474.775055][T10758] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1474.777644][T10758] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1474.801025][T10758] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1474.801051][T10758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.801069][T10758] usb 1-1: Product: syz [ 1474.801091][T10758] usb 1-1: Manufacturer: syz [ 1474.801103][T10758] usb 1-1: SerialNumber: syz [ 1475.269971][T10758] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1475.570779][T10758] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1475.570839][T10758] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1475.968472][T10758] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1476.117786][T10758] usb 1-1: USB disconnect, device number 17 [ 1476.625336][T13986] udevd[13986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.171990][T10758] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1478.321933][T10758] usb 7-1: Using ep0 maxpacket: 32 [ 1478.324013][T10758] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.324035][T10758] usb 7-1: config 0 has no interfaces? [ 1478.324061][T10758] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1478.324073][T10758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.903882][ T37] audit: type=1326 audit(2000000034.460:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19678 comm="syz.4.4100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3dbce59 code=0x0 [ 1479.215465][T10758] usb 7-1: config 0 descriptor?? [ 1479.614086][T14220] usb 7-1: USB disconnect, device number 10 [ 1482.210332][ T37] audit: type=1326 audit(2000000037.750:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19713 comm="syz.5.4113" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1129ffce59 code=0x0 [ 1482.863191][ T4983] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1483.022079][ T4983] usb 5-1: Using ep0 maxpacket: 8 [ 1483.030823][ T4983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1483.042403][ T4983] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1483.042440][ T4983] usb 5-1: can't read configurations, error -71 [ 1485.022016][ T5728] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1485.082161][T14220] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1485.189209][ T5728] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1485.198176][ T5728] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1485.198204][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.198277][ T5728] usb 7-1: Product: syz [ 1485.198291][ T5728] usb 7-1: Manufacturer: syz [ 1485.198305][ T5728] usb 7-1: SerialNumber: syz [ 1485.267899][T14220] usb 1-1: Using ep0 maxpacket: 32 [ 1485.274487][ T5728] usb 7-1: config 0 descriptor?? [ 1485.283021][T14220] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1485.283043][T14220] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.283118][T14220] usb 1-1: config 0 has no interface number 0 [ 1485.283161][T14220] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1485.283181][T14220] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.285530][T14220] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1485.285561][T14220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.285578][T14220] usb 1-1: Product: syz [ 1485.285590][T14220] usb 1-1: Manufacturer: syz [ 1485.285603][T14220] usb 1-1: SerialNumber: syz [ 1485.368955][T14220] usb 1-1: config 0 descriptor?? [ 1485.385743][T14220] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1485.386003][T14220] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1487.938524][ T5728] usb 7-1: USB disconnect, device number 11 [ 1488.301635][T14220] usb 1-1: USB disconnect, device number 18 [ 1489.439264][T19814] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4145'. [ 1489.439285][T19814] tc_dump_action: action bad kind [ 1493.691554][ T37] audit: type=1326 audit(2000000008.060:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19838 comm="syz.4.4153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3dbce59 code=0x0 [ 1495.270027][T17227] udevd[17227]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 1496.270811][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4164'. [ 1497.535863][ T37] audit: type=1326 audit(2000000011.900:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19887 comm="syz.7.4168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a3c8dce59 code=0x0 [ 1498.379976][T19898] netlink: 'syz.4.4171': attribute type 10 has an invalid length. [ 1498.380434][T19898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.385650][T19898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.393801][T19898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.393945][T19898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.394314][T19898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.394466][T19898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.509525][T19898] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1498.534950][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1498.535019][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1498.775169][T19904] netlink: 'syz.7.4174': attribute type 12 has an invalid length. [ 1498.775191][T19904] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4174'. [ 1501.004540][ T37] audit: type=1326 audit(2000000015.390:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19920 comm="syz.6.4180" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57627ce59 code=0x0 [ 1501.376704][T19927] fuse: Bad value for 'fd' [ 1502.061034][T19947] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4190'. [ 1503.080048][ T37] audit: type=1326 audit(2000000017.450:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19953 comm="syz.0.4193" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6287f5ce59 code=0x0 [ 1505.111015][T19992] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1505.113445][T19992] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1505.999006][ T37] audit: type=1326 audit(2000000020.340:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19991 comm="syz.5.4207" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1129ffce59 code=0x0 [ 1507.121916][ T1006] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1507.275216][ T1006] usb 1-1: Using ep0 maxpacket: 8 [ 1507.277074][ T1006] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1507.277128][ T1006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1507.277203][ T1006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1507.277218][ T1006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1507.277230][ T1006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1507.277256][ T1006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1507.277269][ T1006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.540140][ T1006] usb 1-1: usb_control_msg returned -32 [ 1507.540189][ T1006] usbtmc 1-1:16.0: can't read capabilities [ 1507.807204][T20022] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1507.807242][T20022] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1507.807298][T20022] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1507.839734][T20022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1508.070083][T20022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1508.678738][T20034] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1509.106454][T20047] fuse: Invalid rootmode [ 1510.033473][ T5728] usb 1-1: USB disconnect, device number 19 [ 1510.408832][T20064] hub 8-0:1.0: USB hub found [ 1510.420593][T20064] hub 8-0:1.0: 1 port detected [ 1511.863429][ T5728] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1512.052048][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 1512.055201][ T5728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1512.056826][ T5728] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1512.056854][ T5728] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1512.071691][ T5728] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1512.071709][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.071719][ T5728] usb 1-1: Product: syz [ 1512.071727][ T5728] usb 1-1: Manufacturer: syz [ 1512.071734][ T5728] usb 1-1: SerialNumber: syz [ 1512.377757][ T5728] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1512.377805][ T5728] cdc_ncm 1-1:1.0: bind() failure [ 1512.417064][ T5728] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1512.417109][ T5728] cdc_ncm 1-1:1.1: bind() failure [ 1512.454647][ T5728] usb 1-1: USB disconnect, device number 20 [ 1512.563555][T20088] fuse: Bad value for 'rootmode' [ 1513.227139][T20095] netlink: 'syz.7.4241': attribute type 4 has an invalid length. [ 1513.503889][ T5728] IPVS: starting estimator thread 0... [ 1513.592026][T20103] IPVS: using max 15 ests per chain, 36000 per kthread [ 1513.748615][ T7567] Bluetooth: Unknown LE signaling command 0x05 [ 1513.748636][ T7567] Bluetooth: Wrong link type (-22) [ 1513.748748][ T7567] Bluetooth: hci3: link tx timeout [ 1513.749165][ T7567] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1516.468471][ T7567] Bluetooth: hci3: command 0x0406 tx timeout [ 1516.751434][T20136] netlink: 'syz.7.4256': attribute type 4 has an invalid length. [ 1518.143414][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4259'. [ 1518.143472][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4259'. [ 1518.383475][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4259'. [ 1518.383558][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4259'. [ 1520.587528][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1520.587583][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1520.681616][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1520.681672][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1520.810701][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1520.810757][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1521.250029][ T5728] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1521.439993][ T5728] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1521.440023][ T5728] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1521.440096][ T5728] usb 8-1: Product: syz [ 1521.440104][ T5728] usb 8-1: SerialNumber: syz [ 1521.491639][ T5728] usb 8-1: config 0 descriptor?? [ 1521.741964][ T5728] hso 8-1:0.0: Failed to find BULK eps [ 1522.325429][ T5728] usb 8-1: USB disconnect, device number 2 [ 1522.419965][T20226] hugetlbfs: syz.6.4287 (20226): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1524.867627][T20240] __nla_validate_parse: 1 callbacks suppressed [ 1524.867706][T20240] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4292'. [ 1524.867771][T20240] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4292'. [ 1526.854533][ T5717] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1527.001881][ T5717] usb 8-1: Using ep0 maxpacket: 8 [ 1527.007435][ T5717] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1527.008695][ T5717] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1527.008723][ T5717] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1527.013270][ T5717] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.013297][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.013316][ T5717] usb 8-1: Product: syz [ 1527.013329][ T5717] usb 8-1: Manufacturer: syz [ 1527.013341][ T5717] usb 8-1: SerialNumber: syz [ 1528.204099][ T5717] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1528.204144][ T5717] cdc_ncm 8-1:1.0: bind() failure [ 1528.260591][ T5717] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1528.260687][ T5717] cdc_ncm 8-1:1.1: bind() failure [ 1528.285307][ T5717] usb 8-1: USB disconnect, device number 3 [ 1528.451268][T20284] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1529.022782][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1529.022856][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1529.115497][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1529.115573][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1529.268106][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1529.268227][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1529.441941][T14279] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1529.591949][T14279] usb 8-1: Using ep0 maxpacket: 16 [ 1529.599014][T14279] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.599041][T14279] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1529.626654][T14279] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1529.626683][T14279] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.626703][T14279] usb 8-1: Product: syz [ 1529.626716][T14279] usb 8-1: Manufacturer: syz [ 1529.626729][T14279] usb 8-1: SerialNumber: syz [ 1529.711176][T14279] usb 8-1: 0:2 : does not exist [ 1529.903891][T14279] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1529.994901][T14279] usb 8-1: USB disconnect, device number 4 [ 1531.204764][T13986] udevd[13986]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.150651][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1534.150715][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1534.363291][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1534.363368][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1535.709828][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1537.062465][T20378] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1538.414026][T20397] syz.6.4344 (20397): drop_caches: 0 [ 1538.624563][T20398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1538.624640][T20398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1538.821175][T20398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1538.821232][T20398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1538.842014][T14279] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1538.933241][T20398] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1539.001906][T14279] usb 1-1: Using ep0 maxpacket: 32 [ 1539.004414][T14279] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1539.004439][T14279] usb 1-1: config 0 has no interface number 0 [ 1539.004483][T14279] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1539.004504][T14279] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1539.007089][T14279] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1539.007116][T14279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.007136][T14279] usb 1-1: Product: syz [ 1539.007149][T14279] usb 1-1: Manufacturer: syz [ 1539.007161][T14279] usb 1-1: SerialNumber: syz [ 1539.091457][T14279] usb 1-1: config 0 descriptor?? [ 1539.101521][T14279] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1539.112756][T14279] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1540.318470][T20421] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1540.642045][T20251] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1540.942921][T20251] usb 8-1: Using ep0 maxpacket: 8 [ 1541.822760][T20251] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1541.824088][ T4983] usb 1-1: USB disconnect, device number 21 [ 1541.852708][T20251] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1541.852738][T20251] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1541.897984][T20251] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1541.898015][T20251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.898032][T20251] usb 8-1: Product: syz [ 1541.898047][T20251] usb 8-1: Manufacturer: syz [ 1541.898060][T20251] usb 8-1: SerialNumber: syz [ 1542.445085][T20251] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1542.445115][T20251] cdc_ncm 8-1:1.0: bind() failure [ 1542.453225][T20251] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1542.453268][T20251] cdc_ncm 8-1:1.1: bind() failure [ 1542.474174][T20251] usb 8-1: USB disconnect, device number 5 [ 1543.485177][T20461] fuse: Unknown parameter 'user_i00000000000000000000' [ 1544.650413][T20476] netlink: 'syz.6.4370': attribute type 21 has an invalid length. [ 1544.650436][T20476] __nla_validate_parse: 1 callbacks suppressed [ 1544.650452][T20476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4370'. [ 1545.182813][T14279] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1545.346826][T14279] usb 1-1: Using ep0 maxpacket: 32 [ 1545.361869][T14279] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1545.361895][T14279] usb 1-1: config 0 has no interface number 0 [ 1545.361937][T14279] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1545.370793][T14279] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1545.370822][T14279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.370840][T14279] usb 1-1: Product: syz [ 1545.370853][T14279] usb 1-1: Manufacturer: syz [ 1545.370866][T14279] usb 1-1: SerialNumber: syz [ 1545.589059][T14279] usb 1-1: config 0 descriptor?? [ 1546.547790][T20499] fuse: fd is not a fuse device [ 1547.739566][T14279] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1547.739599][T14279] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1547.745641][T14279] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1547.745671][T14279] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1547.745687][T14279] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1547.745704][T14279] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1547.745991][T14279] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1547.871966][T14279] usb 1-1: USB disconnect, device number 22 [ 1554.019729][T20541] fuse: fd is not a fuse device [ 1556.651955][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1556.801920][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1556.804941][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1556.804966][ T10] usb 8-1: config 0 has no interface number 0 [ 1556.805073][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1556.808709][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1556.808737][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.808756][ T10] usb 8-1: Product: syz [ 1556.808769][ T10] usb 8-1: Manufacturer: syz [ 1556.808783][ T10] usb 8-1: SerialNumber: syz [ 1556.910137][ T10] usb 8-1: config 0 descriptor?? [ 1558.899992][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1558.900023][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1558.951458][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1558.951491][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1558.951509][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1558.951535][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1558.992245][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1559.022720][ T10] usb 8-1: USB disconnect, device number 6 [ 1560.048439][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1560.048509][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1560.235143][T20584] fuse: fd is not a fuse device [ 1566.265319][ T5717] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1566.527896][ T5717] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1566.527927][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.527946][ T5717] usb 6-1: Product: syz [ 1566.527960][ T5717] usb 6-1: Manufacturer: syz [ 1566.527973][ T5717] usb 6-1: SerialNumber: syz [ 1566.621093][ T5717] usb 6-1: config 0 descriptor?? [ 1566.637841][ T5717] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 019 [ 1567.148514][ T5717] (null): failure reading functionality [ 1567.350977][ T5717] i2c i2c-1: failure reading functionality [ 1567.390561][ T5717] i2c i2c-1: connected i2c-tiny-usb device [ 1567.404437][ T5717] usb 6-1: USB disconnect, device number 19 [ 1567.831893][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1567.981904][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1567.984286][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1567.984310][ T10] usb 8-1: config 0 has no interface number 0 [ 1567.984390][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1567.991597][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1567.991623][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.991640][ T10] usb 8-1: Product: syz [ 1567.991653][ T10] usb 8-1: Manufacturer: syz [ 1567.991666][ T10] usb 8-1: SerialNumber: syz [ 1568.199739][T12022] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1568.263340][ T10] usb 8-1: config 0 descriptor?? [ 1568.365331][T12022] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1568.365359][T12022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.365376][T12022] usb 1-1: config 0 has no interface number 0 [ 1568.365419][T12022] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1568.365457][T12022] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1568.365477][T12022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.376923][T12022] usb 1-1: config 0 descriptor?? [ 1568.636272][T20626] fuse: fd is not a fuse device [ 1569.317845][T12022] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1569.401284][T12022] usb 1-1: USB disconnect, device number 23 [ 1569.412765][ T56] usb 1-1: Failed to submit usb control message: -19 [ 1569.412798][ T56] usb 1-1: unable to send the bmi data to the device: -19 [ 1569.412815][ T56] usb 1-1: unable to get target info from device [ 1569.413628][ T56] usb 1-1: could not get target info (-19) [ 1569.414105][ T56] usb 1-1: could not probe fw (-19) [ 1569.562074][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1569.562104][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1569.568905][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1569.568995][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1569.569011][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1569.569026][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1569.569312][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1569.648075][ T10] usb 8-1: USB disconnect, device number 7 [ 1572.391906][T12022] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1573.536689][T12022] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1573.536717][T12022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.536727][T12022] usb 6-1: Product: syz [ 1573.536734][T12022] usb 6-1: Manufacturer: syz [ 1573.536741][T12022] usb 6-1: SerialNumber: syz [ 1573.569538][T12022] usb 6-1: config 0 descriptor?? [ 1574.971120][T12022] usb 6-1: Firmware version (0.0) predates our first public release. [ 1574.971147][T12022] usb 6-1: Please update to version 0.2 or newer [ 1576.145205][T20661] comedi comedi0: Minor 2 could not be opened [ 1580.389296][T20673] fuse: Bad value for 'fd' [ 1580.404031][T12022] usb 6-1: USB disconnect, device number 20 [ 1581.342078][ T5717] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1581.541900][ T5717] usb 7-1: Using ep0 maxpacket: 32 [ 1581.550635][ T5717] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1581.550660][ T5717] usb 7-1: config 0 has no interface number 0 [ 1581.550705][ T5717] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1581.744253][ T5717] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1581.744282][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.744301][ T5717] usb 7-1: Product: syz [ 1581.744313][ T5717] usb 7-1: Manufacturer: syz [ 1581.744326][ T5717] usb 7-1: SerialNumber: syz [ 1581.811303][ T5717] usb 7-1: config 0 descriptor?? [ 1583.129206][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1583.129236][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1583.155380][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1583.155407][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1583.155424][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1583.155440][ T5717] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1583.155738][ T5717] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1584.008818][ T5717] usb 7-1: USB disconnect, device number 12 [ 1593.410293][T20750] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4460'. [ 1597.908792][T20127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1597.979723][T20127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1597.989402][T20127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1598.003990][T20127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1598.007577][T20127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1600.051989][T20127] Bluetooth: hci2: command tx timeout [ 1601.723850][T20792] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1602.131857][T20127] Bluetooth: hci2: command tx timeout [ 1602.376850][ T5724] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1602.577217][ T5724] usb 7-1: Using ep0 maxpacket: 16 [ 1602.662339][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.662402][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1602.662428][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1602.662447][ T5724] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1602.662467][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1602.663936][ T5724] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1602.663961][ T5724] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1602.663979][ T5724] usb 7-1: Manufacturer: syz [ 1602.797244][ T5724] usb 7-1: config 0 descriptor?? [ 1603.573949][ T5724] rc_core: IR keymap rc-hauppauge not found [ 1603.573972][ T5724] Registered IR keymap rc-empty [ 1603.574085][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1603.624606][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1603.872574][ T5724] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1603.912649][ T5724] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 1604.213060][T20127] Bluetooth: hci2: command tx timeout [ 1604.728170][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.741956][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.890158][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.911978][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.931970][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.955683][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.972032][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1604.991968][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1605.164298][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1605.181957][ T5724] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1605.205150][ T5724] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1605.205165][ T5724] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1605.462037][ T5724] usb 7-1: USB disconnect, device number 13 [ 1606.291923][T20127] Bluetooth: hci2: command tx timeout [ 1608.306562][ T37] audit: type=1326 audit(2000000122.690:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20805 comm="syz.5.4475" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1129ffce59 code=0x0 [ 1610.571667][T20768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.573723][T20768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.573884][T20768] bridge_slave_0: entered allmulticast mode [ 1610.581680][T20768] bridge_slave_0: entered promiscuous mode [ 1610.586770][T20768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.586883][T20768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.587056][T20768] bridge_slave_1: entered allmulticast mode [ 1610.591289][T20768] bridge_slave_1: entered promiscuous mode [ 1610.769428][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1610.857846][T20768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.867135][T20768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.940151][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1610.952348][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1610.968641][T20768] team0: Port device team_slave_0 added [ 1610.991572][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1611.012088][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1611.051187][T20768] team0: Port device team_slave_1 added [ 1611.368866][T20768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.368884][T20768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.368909][T20768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.441294][T20768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.441310][T20768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.441335][T20768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.262201][ T5603] Bluetooth: hci6: command tx timeout [ 1613.454993][T20768] hsr_slave_0: entered promiscuous mode [ 1613.463763][T20768] hsr_slave_1: entered promiscuous mode [ 1613.732428][T20841] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4482'. [ 1614.091967][T10758] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1614.264878][T10758] usb 7-1: Using ep0 maxpacket: 16 [ 1614.267414][T10758] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.267488][T10758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1614.267513][T10758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1614.267532][T10758] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1614.267552][T10758] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1614.269664][T10758] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1614.269690][T10758] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1614.269708][T10758] usb 7-1: Manufacturer: syz [ 1614.454459][T10758] usb 7-1: config 0 descriptor?? [ 1614.962090][T10758] rc_core: IR keymap rc-hauppauge not found [ 1614.962112][T10758] Registered IR keymap rc-empty [ 1614.962263][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1614.991502][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.019618][T10758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1615.067934][T10758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 1615.220243][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.333533][ T5603] Bluetooth: hci6: command tx timeout [ 1615.413611][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.460983][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.473533][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.509203][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.526098][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.571818][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.591929][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.612081][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.651065][T10758] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1615.720843][T10758] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1615.720871][T10758] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1615.796851][T10758] usb 7-1: USB disconnect, device number 14 [ 1617.411904][ T5603] Bluetooth: hci6: command tx timeout [ 1618.657627][ T5603] Bluetooth: Unknown LE signaling command 0x1d [ 1618.657709][ T5603] Bluetooth: Wrong link type (-22) [ 1619.826622][ T5603] Bluetooth: hci6: command tx timeout [ 1621.420452][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1621.420522][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1623.782314][T20768] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1624.275332][T20768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1624.358267][T20768] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1626.009768][T20768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.067493][T20768] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1626.609827][T20768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.839236][T20768] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1627.227784][T20768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.598623][T20821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.598761][T20821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.599004][T20821] bridge_slave_0: entered allmulticast mode [ 1629.649766][T20821] bridge_slave_0: entered promiscuous mode [ 1629.845305][T20821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.849147][T20821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.849391][T20821] bridge_slave_1: entered allmulticast mode [ 1629.880946][T20821] bridge_slave_1: entered promiscuous mode [ 1630.020633][T20821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.045379][T20821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.394735][T20821] team0: Port device team_slave_0 added [ 1630.451149][T20821] team0: Port device team_slave_1 added [ 1631.088056][T20821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.088073][T20821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.088107][T20821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.151633][T20821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.151655][T20821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.151680][T20821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.315023][T20821] hsr_slave_0: entered promiscuous mode [ 1631.316581][T20821] hsr_slave_1: entered promiscuous mode [ 1631.317495][T20821] debugfs: 'hsr0' already exists in 'hsr' [ 1631.317519][T20821] Cannot create hsr debugfs directory [ 1632.317123][T20768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.557369][T20768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.661194][T20923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1633.143017][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.165471][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.377071][T16423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.377205][T16423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.593790][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1641.799310][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.799349][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.799369][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1641.799409][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1641.799431][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.980864][ T10] usb 6-1: config 0 descriptor?? [ 1642.367601][T20982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4516'. [ 1642.487143][ T10] plantronics 0003:047F:FFFF.0004: report_id 0 is invalid [ 1642.487166][ T10] plantronics 0003:047F:FFFF.0004: item 0 1 1 8 parsing failed [ 1642.487963][ T10] plantronics 0003:047F:FFFF.0004: parse failed [ 1642.488058][ T10] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 1642.654120][ T1006] usb 6-1: USB disconnect, device number 21 [ 1643.451683][T20821] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1643.905833][T20821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1645.012504][T20821] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1645.499038][T20821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1646.730548][T20821] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1647.011662][T20821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1647.939303][T20821] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1648.027979][T20821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1650.026633][T20768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.763438][T21075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1653.954268][ T37] audit: type=1326 audit(2000000168.350:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21086 comm="syz.4.4527" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3dbce59 code=0x7ffc0000 [ 1653.954321][ T37] audit: type=1326 audit(2000000168.350:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21086 comm="syz.4.4527" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3dbce59 code=0x7ffc0000 [ 1653.959375][ T37] audit: type=1326 audit(2000000168.350:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21086 comm="syz.4.4527" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fe5d3dbce59 code=0x7ffc0000 [ 1653.959513][ T37] audit: type=1326 audit(2000000168.350:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21086 comm="syz.4.4527" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d3dbce59 code=0x7ffc0000 [ 1656.233416][T20127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1656.290486][T20127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1656.299804][T20127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1656.425763][T20127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1656.426953][T20127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1657.110742][T20768] veth0_vlan: entered promiscuous mode [ 1657.415980][T20768] veth1_vlan: entered promiscuous mode [ 1657.532988][T20821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.856212][T20768] veth0_macvtap: entered promiscuous mode [ 1657.929375][T20821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.074488][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.075972][T10038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.157484][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.157726][T10038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.416079][T20127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1658.502218][T20127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1658.530497][T20127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1658.557970][T20127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1658.590931][T20127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1658.612037][T20127] Bluetooth: hci0: command tx timeout [ 1660.667240][T21115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1660.693284][ T5603] Bluetooth: hci0: command tx timeout [ 1660.693858][T20127] Bluetooth: hci5: command tx timeout [ 1662.772607][ T5603] Bluetooth: hci0: command tx timeout [ 1662.788096][T20127] Bluetooth: hci5: command tx timeout [ 1664.226288][T10041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.852390][ T5603] Bluetooth: hci0: command tx timeout [ 1664.852423][ T5603] Bluetooth: hci5: command tx timeout [ 1665.060854][T21137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4535'. [ 1665.793042][T20821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.098889][T21154] binder: 21153:21154 ioctl 4018620d 0 returned -22 [ 1666.109416][T21154] binder: 21153:21154 ioctl 4008941a 200000000200 returned -22 [ 1666.178254][T21067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.178394][T21067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.178639][T21067] bridge_slave_0: entered allmulticast mode [ 1666.213710][T21067] bridge_slave_0: entered promiscuous mode [ 1666.270393][T21067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.270510][T21067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.270824][T21067] bridge_slave_1: entered allmulticast mode [ 1666.300369][T21067] bridge_slave_1: entered promiscuous mode [ 1666.820613][T21067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1666.879713][T21067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.931999][T20127] Bluetooth: hci5: command tx timeout [ 1667.099319][T21105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.101037][T21105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.101255][T21105] bridge_slave_0: entered allmulticast mode [ 1667.130303][T21105] bridge_slave_0: entered promiscuous mode [ 1667.160123][T21067] team0: Port device team_slave_0 added [ 1667.160945][T21105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.161143][T21105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.161690][T21105] bridge_slave_1: entered allmulticast mode [ 1667.202242][T21105] bridge_slave_1: entered promiscuous mode [ 1667.209005][T21067] team0: Port device team_slave_1 added [ 1667.352591][T21105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.362698][T21067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.362715][T21067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.362749][T21067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.464305][T21105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.466780][T21067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.466795][T21067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.466820][T21067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.532978][T21105] team0: Port device team_slave_0 added [ 1668.601521][T21105] team0: Port device team_slave_1 added [ 1668.663590][T21067] hsr_slave_0: entered promiscuous mode [ 1668.665032][T21067] hsr_slave_1: entered promiscuous mode [ 1668.665929][T21067] debugfs: 'hsr0' already exists in 'hsr' [ 1668.665952][T21067] Cannot create hsr debugfs directory [ 1668.812047][T21105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.812073][T21105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.812100][T21105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.911641][T21105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.911659][T21105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.911718][T21105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.145808][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1670.196335][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1670.255466][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1670.306524][T21105] hsr_slave_0: entered promiscuous mode [ 1670.307856][T21105] hsr_slave_1: entered promiscuous mode [ 1670.308793][T21105] debugfs: 'hsr0' already exists in 'hsr' [ 1670.308817][T21105] Cannot create hsr debugfs directory [ 1670.363137][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1670.363933][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1670.956515][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1671.007775][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1671.010892][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1671.027516][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1671.031592][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1672.451921][T20127] Bluetooth: hci1: command tx timeout [ 1673.481933][T20127] Bluetooth: hci2: command tx timeout [ 1674.729820][T20127] Bluetooth: hci1: command tx timeout [ 1675.928095][T20127] Bluetooth: hci2: command tx timeout [ 1676.873052][T20127] Bluetooth: hci1: command tx timeout [ 1677.028031][T21198] lo speed is unknown, defaulting to 1000 [ 1677.028187][T21198] lo speed is unknown, defaulting to 1000 [ 1677.029366][T21198] lo speed is unknown, defaulting to 1000 [ 1677.031153][T21198] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1677.031187][T21198] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1677.031223][T21198] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1677.050385][T21198] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1677.088214][T21198] lo speed is unknown, defaulting to 1000 [ 1677.090933][T21198] lo speed is unknown, defaulting to 1000 [ 1677.095463][T21198] lo speed is unknown, defaulting to 1000 [ 1677.098111][T21198] lo speed is unknown, defaulting to 1000 [ 1677.101335][T21198] lo speed is unknown, defaulting to 1000 [ 1677.105589][T21198] lo speed is unknown, defaulting to 1000 [ 1677.108277][T21198] lo speed is unknown, defaulting to 1000 [ 1677.111085][T21198] lo speed is unknown, defaulting to 1000 [ 1677.115225][T21198] lo speed is unknown, defaulting to 1000 [ 1677.117435][T21198] lo speed is unknown, defaulting to 1000 [ 1677.972554][T20127] Bluetooth: hci2: command tx timeout [ 1678.932470][T20127] Bluetooth: hci1: command tx timeout [ 1680.052414][T20127] Bluetooth: hci2: command tx timeout [ 1681.214772][T21168] lo speed is unknown, defaulting to 1000 [ 1682.855090][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1682.855160][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1683.117954][T21172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.119621][T21172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.119826][T21172] bridge_slave_0: entered allmulticast mode [ 1683.155123][T21172] bridge_slave_0: entered promiscuous mode [ 1683.174199][T21172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.174415][T21172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.176522][T21172] bridge_slave_1: entered allmulticast mode [ 1683.182333][T21172] bridge_slave_1: entered promiscuous mode [ 1683.351212][T21172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.408931][T21172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.536455][T21172] team0: Port device team_slave_0 added [ 1683.564088][T21172] team0: Port device team_slave_1 added [ 1683.710128][T21172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.710146][T21172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.710180][T21172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.627338][T21168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.627469][T21168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.627689][T21168] bridge_slave_0: entered allmulticast mode [ 1684.630678][T21168] bridge_slave_0: entered promiscuous mode [ 1684.674370][T21172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.674385][T21172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.674409][T21172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.741254][T21168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.749431][T21168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.749725][T21168] bridge_slave_1: entered allmulticast mode [ 1684.771070][T21168] bridge_slave_1: entered promiscuous mode [ 1685.284801][T21168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.329720][T21168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.393072][T21172] hsr_slave_0: entered promiscuous mode [ 1685.397718][T21172] hsr_slave_1: entered promiscuous mode [ 1685.398304][T21172] debugfs: 'hsr0' already exists in 'hsr' [ 1685.398320][T21172] Cannot create hsr debugfs directory [ 1685.484679][T21168] team0: Port device team_slave_0 added [ 1685.597628][T21168] team0: Port device team_slave_1 added [ 1685.624496][T21269] binder: 21268:21269 ioctl 4018620d 0 returned -22 [ 1685.624771][T21269] binder: 21268:21269 ioctl 4008941a 200000000200 returned -22 [ 1685.762031][T21168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.762048][T21168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.762073][T21168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.858226][T21168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.858253][T21168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.858276][T21168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.529296][T21168] hsr_slave_0: entered promiscuous mode [ 1687.530819][T21168] hsr_slave_1: entered promiscuous mode [ 1687.547229][T21168] debugfs: 'hsr0' already exists in 'hsr' [ 1687.547254][T21168] Cannot create hsr debugfs directory [ 1688.600528][T21280] siw: device registration error -23 [ 1692.870218][T21286] virtio-fs: tag not found [ 1696.920536][T20127] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1698.376165][T21296] binder: 21295:21296 ioctl 4018620d 0 returned -22 [ 1698.376542][T21296] binder: 21295:21296 ioctl 4008941a 200000000200 returned -22 [ 1701.526494][T21300] sg_write: process 1465 (syz.5.4552) changed security contexts after opening file descriptor, this is not allowed. [ 1701.763333][T14278] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1701.916422][T14278] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.916476][T14278] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1701.916519][T14278] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1701.916539][T14278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.965279][T14278] usb 6-1: config 0 descriptor?? [ 1701.987027][T14278] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1702.894999][T21302] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4552'. [ 1704.542972][T14279] usb 6-1: USB disconnect, device number 22 [ 1707.864128][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1708.041917][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1708.044732][ T10] usb 6-1: config 0 has no interfaces? [ 1708.048434][ T10] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1708.048460][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.048477][ T10] usb 6-1: Product: syz [ 1708.048490][ T10] usb 6-1: Manufacturer: syz [ 1708.048502][ T10] usb 6-1: SerialNumber: syz [ 1708.105236][ T10] usb 6-1: config 0 descriptor?? [ 1708.359572][ T10] usb 6-1: USB disconnect, device number 23 [ 1712.190402][T20127] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1712.870989][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1712.912989][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1712.938251][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1712.949186][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1712.953053][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1714.305516][T21313] lo speed is unknown, defaulting to 1000 [ 1715.012205][ T5603] Bluetooth: hci6: command tx timeout [ 1715.298341][T21313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.298552][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.298754][T21313] bridge_slave_0: entered allmulticast mode [ 1715.301494][T21313] bridge_slave_0: entered promiscuous mode [ 1715.343139][T21313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.343267][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.372734][T21313] bridge_slave_1: entered allmulticast mode [ 1715.375556][T21313] bridge_slave_1: entered promiscuous mode [ 1715.509084][T21333] binder: 21332:21333 ioctl 4018620d 0 returned -22 [ 1715.513815][T21333] binder: 21332:21333 ioctl 4008941a 200000000200 returned -22 [ 1715.529732][T21313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.569933][T21313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.666145][T21313] team0: Port device team_slave_0 added [ 1715.682273][T21313] team0: Port device team_slave_1 added [ 1715.739525][T21313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.739542][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.739571][T21313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.796368][T21313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.796436][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.796461][T21313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.927104][T21313] hsr_slave_0: entered promiscuous mode [ 1715.938706][T21313] hsr_slave_1: entered promiscuous mode [ 1715.939788][T21313] debugfs: 'hsr0' already exists in 'hsr' [ 1715.939813][T21313] Cannot create hsr debugfs directory [ 1717.093734][ T5603] Bluetooth: hci6: command tx timeout [ 1718.516612][T20127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1718.576725][T20127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1718.578198][T20127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1718.579239][T20127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1718.581538][T20127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1719.172200][ T5603] Bluetooth: hci6: command tx timeout [ 1719.296145][T21340] lo speed is unknown, defaulting to 1000 [ 1720.026877][T21340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.027090][T21340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.027325][T21340] bridge_slave_0: entered allmulticast mode [ 1720.057206][T21340] bridge_slave_0: entered promiscuous mode [ 1720.071541][T21340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.072045][T21340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.072262][T21340] bridge_slave_1: entered allmulticast mode [ 1720.098477][T21340] bridge_slave_1: entered promiscuous mode [ 1720.421934][ T1006] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1720.661906][ T1006] usb 6-1: Using ep0 maxpacket: 32 [ 1720.668356][ T1006] usb 6-1: config 0 has no interfaces? [ 1720.684862][ T1006] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1720.684889][ T1006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.684906][ T1006] usb 6-1: Product: syz [ 1720.684918][ T1006] usb 6-1: Manufacturer: syz [ 1720.684930][ T1006] usb 6-1: SerialNumber: syz [ 1720.692104][ T5603] Bluetooth: hci7: command tx timeout [ 1720.752228][T21340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.766540][ T1006] usb 6-1: config 0 descriptor?? [ 1720.811027][T21340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.990858][ T10] usb 6-1: USB disconnect, device number 24 [ 1721.253316][ T5603] Bluetooth: hci6: command tx timeout [ 1722.124982][T21340] team0: Port device team_slave_0 added [ 1722.169162][T21340] team0: Port device team_slave_1 added [ 1722.231616][T21340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.231631][T21340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.231654][T21340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.254102][T21340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.254118][T21340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.254205][T21340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.771927][ T5603] Bluetooth: hci7: command tx timeout [ 1723.423934][T21340] hsr_slave_0: entered promiscuous mode [ 1723.424992][T21340] hsr_slave_1: entered promiscuous mode [ 1723.425618][T21340] debugfs: 'hsr0' already exists in 'hsr' [ 1723.425634][T21340] Cannot create hsr debugfs directory [ 1724.852099][ T5603] Bluetooth: hci7: command tx timeout [ 1726.933399][ T5603] Bluetooth: hci7: command tx timeout [ 1730.068319][T20127] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1730.080239][T20127] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1730.090799][T20127] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1730.137218][T20127] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1730.147675][T20127] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1731.350279][T20127] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1731.426180][T20127] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1731.429374][T20127] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1731.449853][T20127] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1731.476326][T20127] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1731.975009][T21379] lo speed is unknown, defaulting to 1000 [ 1732.212022][ T5603] Bluetooth: hci8: command tx timeout [ 1733.156064][T21379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.159315][T21379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.159588][T21379] bridge_slave_0: entered allmulticast mode [ 1733.192920][T21379] bridge_slave_0: entered promiscuous mode [ 1733.204097][T21379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.220389][T21379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.220720][T21379] bridge_slave_1: entered allmulticast mode [ 1733.244037][T21379] bridge_slave_1: entered promiscuous mode [ 1733.389563][T21379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.428188][T21379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.469456][T21383] lo speed is unknown, defaulting to 1000 [ 1733.554304][T21379] team0: Port device team_slave_0 added [ 1733.588610][T21379] team0: Port device team_slave_1 added [ 1733.652348][ T5603] Bluetooth: hci9: command tx timeout [ 1733.689759][T21379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.689774][T21379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.689807][T21379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.767889][T21379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.767905][T21379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.767929][T21379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.022990][T21379] hsr_slave_0: entered promiscuous mode [ 1734.024567][T21379] hsr_slave_1: entered promiscuous mode [ 1734.025764][T21379] debugfs: 'hsr0' already exists in 'hsr' [ 1734.025787][T21379] Cannot create hsr debugfs directory [ 1734.291980][ T5603] Bluetooth: hci8: command tx timeout [ 1735.732102][ T5603] Bluetooth: hci9: command tx timeout [ 1736.372016][ T5603] Bluetooth: hci8: command tx timeout [ 1736.565107][T21383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.565230][T21383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.565562][T21383] bridge_slave_0: entered allmulticast mode [ 1736.596698][T21383] bridge_slave_0: entered promiscuous mode [ 1736.615460][T21383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.615661][T21383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.616022][T21383] bridge_slave_1: entered allmulticast mode [ 1736.618944][T21383] bridge_slave_1: entered promiscuous mode [ 1736.699938][T21383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.716992][T21383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.773839][T21383] team0: Port device team_slave_0 added [ 1736.777745][T21383] team0: Port device team_slave_1 added [ 1736.904212][T21383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.904229][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.904262][T21383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.907070][T21383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.907086][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.907108][T21383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.812070][ T5603] Bluetooth: hci9: command tx timeout [ 1738.452673][ T5603] Bluetooth: hci8: command tx timeout [ 1739.277690][T21383] hsr_slave_0: entered promiscuous mode [ 1739.279413][T21383] hsr_slave_1: entered promiscuous mode [ 1739.280556][T21383] debugfs: 'hsr0' already exists in 'hsr' [ 1739.280589][T21383] Cannot create hsr debugfs directory [ 1739.892080][ T5603] Bluetooth: hci9: command tx timeout [ 1744.294646][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1744.294717][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1772.339997][T20127] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1772.444431][T20127] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1772.471541][T20127] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1772.489883][T20127] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1772.499321][T20127] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1773.339062][T21487] lo speed is unknown, defaulting to 1000 [ 1774.611994][ T5603] Bluetooth: hci10: command tx timeout [ 1774.947824][T21487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.947965][T21487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.968479][T21487] bridge_slave_0: entered allmulticast mode [ 1774.989821][T21487] bridge_slave_0: entered promiscuous mode [ 1775.011231][T21487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.025304][T21487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.047494][T21487] bridge_slave_1: entered allmulticast mode [ 1775.089797][T21487] bridge_slave_1: entered promiscuous mode [ 1775.285412][T21487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.303402][T21487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.377873][T21487] team0: Port device team_slave_0 added [ 1775.388055][T21487] team0: Port device team_slave_1 added [ 1775.475242][T21487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.475259][T21487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.475284][T21487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.477877][T21487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.477906][T21487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.477930][T21487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.655976][T21487] hsr_slave_0: entered promiscuous mode [ 1775.657535][T21487] hsr_slave_1: entered promiscuous mode [ 1775.658678][T21487] debugfs: 'hsr0' already exists in 'hsr' [ 1775.658702][T21487] Cannot create hsr debugfs directory [ 1776.692344][ T5603] Bluetooth: hci10: command tx timeout [ 1778.456039][T20127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1778.490495][T20127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1778.500562][T20127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1778.501645][T20127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1778.602694][T20127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1778.772117][T20127] Bluetooth: hci10: command tx timeout [ 1780.692379][T20127] Bluetooth: hci4: command tx timeout [ 1780.852068][T20127] Bluetooth: hci10: command tx timeout [ 1781.397580][T21515] lo speed is unknown, defaulting to 1000 [ 1782.211945][T20127] Bluetooth: hci5: command 0x0406 tx timeout [ 1782.212543][T20127] Bluetooth: hci0: command 0x0406 tx timeout [ 1782.772020][ T7567] Bluetooth: hci4: command tx timeout [ 1783.865859][T21515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.866097][T21515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.866330][T21515] bridge_slave_0: entered allmulticast mode [ 1783.869176][T21515] bridge_slave_0: entered promiscuous mode [ 1783.912654][T21515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.912861][T21515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.913123][T21515] bridge_slave_1: entered allmulticast mode [ 1783.916456][T21515] bridge_slave_1: entered promiscuous mode [ 1783.993661][T21515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1784.015158][T21515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1784.140692][T21515] team0: Port device team_slave_0 added [ 1784.620737][T21515] team0: Port device team_slave_1 added [ 1784.852216][T17855] Bluetooth: hci4: command tx timeout [ 1785.218257][T21515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.218275][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1785.218299][T21515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1785.220832][T21515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1785.220846][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1785.220870][T21515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1785.417843][T21515] hsr_slave_0: entered promiscuous mode [ 1785.428756][T21515] hsr_slave_1: entered promiscuous mode [ 1785.431510][T21515] debugfs: 'hsr0' already exists in 'hsr' [ 1785.431534][T21515] Cannot create hsr debugfs directory [ 1786.932232][T17855] Bluetooth: hci4: command tx timeout [ 1789.978193][ T5603] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1790.101440][ T5603] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1790.322365][ T5603] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1790.361964][ T5603] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1790.385786][ T5603] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1790.808501][ T5603] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1790.861374][ T5603] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1790.873695][ T5603] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1790.879125][ T5603] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1790.880017][ T5603] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1791.721715][T10041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.532129][T17855] Bluetooth: hci11: command tx timeout [ 1793.018643][T17855] Bluetooth: hci12: command tx timeout [ 1794.612001][T17855] Bluetooth: hci11: command tx timeout [ 1795.096937][T17855] Bluetooth: hci12: command tx timeout [ 1795.558849][T21554] lo speed is unknown, defaulting to 1000 [ 1796.193543][T21549] lo speed is unknown, defaulting to 1000 [ 1796.711838][T21598] Bluetooth: hci11: command tx timeout [ 1797.172014][T21598] Bluetooth: hci12: command tx timeout [ 1797.572220][T21598] Bluetooth: hci2: command 0x0406 tx timeout [ 1797.572647][T21598] Bluetooth: hci1: command 0x0406 tx timeout [ 1798.009916][T21554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.010093][T21554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.010375][T21554] bridge_slave_0: entered allmulticast mode [ 1798.047436][T21554] bridge_slave_0: entered promiscuous mode [ 1798.086340][T21554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.086516][T21554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.086987][T21554] bridge_slave_1: entered allmulticast mode [ 1798.113609][T21554] bridge_slave_1: entered promiscuous mode [ 1798.241704][T21549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.244051][T21549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.244292][T21549] bridge_slave_0: entered allmulticast mode [ 1798.277067][T21549] bridge_slave_0: entered promiscuous mode [ 1798.294356][T21554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.294699][T21549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.294898][T21549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.295127][T21549] bridge_slave_1: entered allmulticast mode [ 1798.341562][T21549] bridge_slave_1: entered promiscuous mode [ 1798.424645][T21554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.772045][ T5603] Bluetooth: hci11: command tx timeout [ 1799.251987][ T5603] Bluetooth: hci12: command tx timeout [ 1800.567215][T21549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.571463][T21554] team0: Port device team_slave_0 added [ 1800.605661][T21549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.609582][T21554] team0: Port device team_slave_1 added [ 1801.112377][T21549] team0: Port device team_slave_0 added [ 1801.114491][T21554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.114505][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.114528][T21554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.119280][T21549] team0: Port device team_slave_1 added [ 1801.120528][T21554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.120541][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.120564][T21554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.312620][T21549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.312636][T21549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.312672][T21549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.389792][T21549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.389807][T21549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.389831][T21549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.488357][T21554] hsr_slave_0: entered promiscuous mode [ 1801.489918][T21554] hsr_slave_1: entered promiscuous mode [ 1801.490974][T21554] debugfs: 'hsr0' already exists in 'hsr' [ 1801.490994][T21554] Cannot create hsr debugfs directory [ 1803.200818][T21549] hsr_slave_0: entered promiscuous mode [ 1803.209094][T21549] hsr_slave_1: entered promiscuous mode [ 1803.210300][T21549] debugfs: 'hsr0' already exists in 'hsr' [ 1803.210322][T21549] Cannot create hsr debugfs directory [ 1805.737342][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1805.737414][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1819.172475][ T38] INFO: task syz-executor:21105 blocked for more than 143 seconds. [ 1819.172616][ T38] Tainted: G L syzkaller #0 [ 1819.172627][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1819.172672][ T38] task:syz-executor state:D stack:19168 pid:21105 tgid:21105 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1819.172728][ T38] Call Trace: [ 1819.172788][ T38] [ 1819.172925][ T38] __schedule+0x16ec/0x5620 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1819.173065][ T38] ? __pfx___schedule+0x10/0x10 [ 1819.173134][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1819.173177][ T38] rt_mutex_schedule+0x76/0xf0 [ 1819.173238][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1819.173270][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1819.173292][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1819.173313][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1819.173340][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1819.173369][ T38] ? del_device_store+0xd7/0x370 [ 1819.173485][ T38] ? del_device_store+0xd7/0x370 [ 1819.173510][ T38] ? del_device_store+0xd7/0x370 [ 1819.173526][ T38] mutex_lock_nested+0x168/0x1d0 [ 1819.173551][ T38] del_device_store+0xd7/0x370 [ 1819.173569][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1819.173704][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1819.173724][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1819.173747][ T38] ? sysfs_kf_write+0x166/0x260 [ 1819.173773][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1819.173794][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1819.173824][ T38] vfs_write+0x629/0xba0 [ 1819.173924][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1819.173947][ T38] ? do_sys_openat2+0x14c/0x200 [ 1819.173973][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1819.174038][ T38] ksys_write+0x156/0x270 [ 1819.174060][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1819.174089][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.174144][ T38] do_syscall_64+0x15f/0xf80 [ 1819.174191][ T38] ? clear_bhb_loop+0x40/0x90 [ 1819.174212][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.174247][ T38] RIP: 0033:0x7f67c29fd68e [ 1819.174308][ T38] RSP: 002b:00007ffe1fdf1d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1819.174439][ T38] RAX: ffffffffffffffda RBX: 0000555568e4f500 RCX: 00007f67c29fd68e [ 1819.174453][ T38] RDX: 0000000000000001 RSI: 00007ffe1fdf1dc0 RDI: 0000000000000005 [ 1819.174465][ T38] RBP: 00007f67c2ad35f2 R08: 0000000000000000 R09: 0000000000000000 [ 1819.174477][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.174488][ T38] R13: 00007ffe1fdf1dc0 R14: 00007f67c37e4620 R15: 0000000000000003 [ 1819.174518][ T38] [ 1819.174582][ T38] [ 1819.174582][ T38] Showing all locks held in the system: [ 1819.174593][ T38] 3 locks held by rcuc/1/28: [ 1819.174651][ T38] 1 lock held by khungtaskd/38: [ 1819.174661][ T38] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1819.174921][ T38] 2 locks held by getty/5359: [ 1819.174932][ T38] #0: ffff888036d0e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1819.174989][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1819.175039][ T38] 6 locks held by kworker/u8:13/10041: [ 1819.175050][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1819.175149][ T38] #1: ffffc90003b57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1819.175191][ T38] #2: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1819.175317][ T38] #3: ffff88802b7d7160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1819.175419][ T38] #4: ffff88803c8b6310 (&devlink->lock_key#19){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1819.175490][ T38] #5: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1819.175581][ T38] 2 locks held by syz-executor/13195: [ 1819.175592][ T38] #0: ffff8880258c6480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1819.175666][ T38] #1: ffff888059fd99f0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 1819.175775][ T38] 7 locks held by syz-executor/21067: [ 1819.175786][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.175832][ T38] #1: ffff88801e738478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.175874][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.175921][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.175963][ T38] #4: ffff8880308ed160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1819.176062][ T38] #5: ffff88805d526310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1819.176138][ T38] #6: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1819.176180][ T38] 1 lock held by syz.4.4529/21091: [ 1819.176191][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1819.176231][ T38] 4 locks held by syz-executor/21105: [ 1819.176242][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.176286][ T38] #1: ffff88805860fc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.176357][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.176404][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.176447][ T38] 4 locks held by syz-executor/21168: [ 1819.176457][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.176502][ T38] #1: ffff8880245cf078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.176546][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.176593][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.176635][ T38] 4 locks held by syz-executor/21172: [ 1819.176646][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.176690][ T38] #1: ffff88808ea3b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.176733][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.176781][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.176824][ T38] 4 locks held by syz-executor/21313: [ 1819.176834][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.176880][ T38] #1: ffff88803f8e3c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.176923][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.176971][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.177013][ T38] 4 locks held by syz-executor/21340: [ 1819.177023][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.177068][ [ 1819.177068][ T38] #1: ffff888099d67878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.177110][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.177158][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.177200][ T38] 4 locks held by syz-executor/21379: [ 1819.177210][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.177255][ T38] #1: ffff88802b6a4c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.177298][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.177352][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.177394][ T38] 4 locks held by syz-executor/21383: [ 1819.177404][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.177449][ T38] #1: ffff88805b04b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.177492][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.177539][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.177582][ T38] 4 locks held by syz-executor/21487: [ 1819.177592][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.177636][ T38] #1: ffff888093153c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.177679][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.177727][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.177770][ T38] 4 locks held by syz-executor/21515: [ 1819.177779][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.177830][ T38] #1: ffff88805f1f7078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.177873][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.177920][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.177963][ T38] 4 locks held by syz-executor/21549: [ 1819.177973][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.178018][ T38] #1: ffff88809a353c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.178060][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.178128][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.178169][ T38] 4 locks held by syz-executor/21554: [ 1819.178179][ T38] #0: ffff88803750a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1819.178224][ T38] #1: ffff88808caf6878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1819.178267][ T38] #2: ffff88802752c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1819.178314][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1819.178363][ T38] [ 1819.178396][ T38] ============================================= [ 1819.178396][ T38] [ 1819.178410][ T38] NMI backtrace for cpu 0 [ 1819.178486][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1819.178511][ T38] Tainted: [L]=SOFTLOCKUP [ 1819.178517][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1819.178547][ T38] Call Trace: [ 1819.178584][ T38] [ 1819.178593][ T38] dump_stack_lvl+0xe8/0x150 [ 1819.178660][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1819.178680][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1819.178736][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1819.178757][ T38] sys_info+0x135/0x170 [ 1819.178780][ T38] watchdog+0xfd3/0x1030 [ 1819.178810][ T38] ? watchdog+0x1c9/0x1030 [ 1819.178834][ T38] kthread+0x388/0x470 [ 1819.178882][ T38] ? __pfx_watchdog+0x10/0x10 [ 1819.178899][ T38] ? __pfx_kthread+0x10/0x10 [ 1819.178922][ T38] ret_from_fork+0x514/0xb70 [ 1819.178945][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.178964][ T38] ? __switch_to+0xc79/0x1410 [ 1819.179080][ T38] ? __pfx_kthread+0x10/0x10 [ 1819.179102][ T38] ret_from_fork_asm+0x1a/0x30 [ 1819.179138][ T38] [ 1819.179145][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1819.179285][ C1] NMI backtrace for cpu 1 [ 1819.179300][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1819.179321][ C1] Tainted: [L]=SOFTLOCKUP [ 1819.179327][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1819.179336][ C1] RIP: 0010:__lock_acquire+0x35e/0x2cf0 [ 1819.179418][ C1] Code: 09 d4 41 09 cc 41 09 dc 45 89 64 c7 20 41 89 7c c7 24 4c 89 7c 24 20 4d 8d 2c c7 41 81 e4 ff 1f 00 00 4c 0f a3 25 b2 67 d2 11 <73> 15 49 69 c4 c8 00 00 00 48 8d 80 30 b3 13 93 4c 8b 74 24 08 eb [ 1819.179456][ C1] RSP: 0018:ffffc90000a2edc8 EFLAGS: 00000003 [ 1819.179469][ C1] RAX: 000000000000000f RBX: 0000000000020000 RCX: 000000000000000b [ 1819.179480][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1819.179493][ C1] RBP: 0000000000000003 R08: ffffffff895de335 R09: ffffffff8dfc8080 [ 1819.179504][ C1] R10: dffffc0000000000 R11: fffff52000145e08 R12: 000000000000000b [ 1819.179514][ C1] R13: ffff88801daa68b0 R14: ffff88801daa5c40 R15: ffff88801daa6838 [ 1819.179526][ C1] FS: 0000000000000000(0000) GS:ffff888126271000(0000) knlGS:0000000000000000 [ 1819.179538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1819.179549][ C1] CR2: 00007f112a00dac0 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 1819.179563][ C1] Call Trace: [ 1819.179590][ C1] [ 1819.179600][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.179624][ C1] ? synproxy_pernet+0x45/0x270 [ 1819.179716][ C1] lock_acquire+0x106/0x350 [ 1819.179733][ C1] ? synproxy_pernet+0x45/0x270 [ 1819.179755][ C1] ? __asan_memset+0x22/0x50 [ 1819.179819][ C1] ? synproxy_pernet+0x45/0x270 [ 1819.179839][ C1] synproxy_pernet+0x61/0x270 [ 1819.179857][ C1] ? synproxy_pernet+0x45/0x270 [ 1819.179877][ C1] nft_synproxy_eval_v4+0xf4/0x4e0 [ 1819.179899][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1819.179920][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1819.179983][ C1] nft_synproxy_do_eval+0x305/0x580 [ 1819.180003][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 1819.180064][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1819.180083][ C1] ? nft_trace_init+0x283/0x4c0 [ 1819.180121][ C1] ? netlink_has_listeners+0x339/0x3f0 [ 1819.180140][ C1] nft_do_chain+0x48d/0x1ae0 [ 1819.180180][ C1] ? __pfx_nft_osf_eval+0x10/0x10 [ 1819.180198][ C1] ? __pfx_nft_trace_notify+0x10/0x10 [ 1819.180212][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1819.180229][ C1] ? __nft_trace_packet+0x66/0x110 [ 1819.180250][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.180270][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1819.180285][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1819.180302][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1819.180342][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1819.180357][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1819.180371][ C1] nf_hook_slow+0xc5/0x220 [ 1819.180414][ C1] NF_HOOK+0x21f/0x3c0 [ 1819.180428][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1819.180443][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1819.180456][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1819.180469][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1819.180485][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1819.180503][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1819.180518][ C1] NF_HOOK+0x336/0x3c0 [ 1819.180531][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1819.180585][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1819.180599][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1819.180613][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1819.180628][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1819.180644][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1819.180658][ C1] ? process_backlog+0x271/0xc60 [ 1819.180709][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1819.180723][ C1] process_backlog+0x569/0xc60 [ 1819.180760][ C1] __napi_poll+0xab/0x550 [ 1819.180776][ C1] net_rx_action+0x696/0xe00 [ 1819.180797][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1819.180811][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1819.180853][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1819.180912][ C1] ? preempt_schedule_notrace+0x57/0x90 [ 1819.180936][ C1] handle_softirqs+0x1de/0x6d0 [ 1819.180983][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1819.181000][ C1] rcu_cpu_kthread+0xf03/0x1470 [ 1819.181049][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 1819.181071][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1819.181088][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1819.181109][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1819.181129][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1819.181167][ C1] smpboot_thread_fn+0x541/0xa50 [ 1819.181184][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1819.181203][ C1] kthread+0x388/0x470 [ 1819.181221][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1819.181236][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.181255][ C1] ret_from_fork+0x514/0xb70 [ 1819.181272][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.181287][ C1] ? __switch_to+0xc79/0x1410 [ 1819.181307][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.181325][ C1] ret_from_fork_asm+0x1a/0x30 [ 1819.181348][ C1] [ 1819.902365][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1819.902390][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1819.902415][ T38] Tainted: [L]=SOFTLOCKUP [ 1819.902422][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1819.902439][ T38] Call Trace: [ 1819.902447][ T38] [ 1819.902455][ T38] vpanic+0x56c/0xa60 [ 1819.902482][ T38] ? __pfx___schedule+0x10/0x10 [ 1819.902504][ T38] ? __pfx_vpanic+0x10/0x10 [ 1819.902533][ T38] panic+0xc5/0xd0 [ 1819.902552][ T38] ? __pfx_panic+0x10/0x10 [ 1819.902573][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1819.902602][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1819.902624][ T38] watchdog+0x102c/0x1030 [ 1819.902650][ T38] ? watchdog+0x1c9/0x1030 [ 1819.902674][ T38] kthread+0x388/0x470 [ 1819.902696][ T38] ? __pfx_watchdog+0x10/0x10 [ 1819.902714][ T38] ? __pfx_kthread+0x10/0x10 [ 1819.902736][ T38] ret_from_fork+0x514/0xb70 [ 1819.902757][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.902776][ T38] ? __switch_to+0xc79/0x1410 [ 1819.902802][ T38] ? __pfx_kthread+0x10/0x10 [ 1819.902952][ T38] ret_from_fork_asm+0x1a/0x30 [ 1819.902986][ T38] [ 1819.903475][ T38] Kernel Offset: disabled