last executing test programs: 14.62692285s ago: executing program 1 (id=786): syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.412063527s ago: executing program 3 (id=799): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="022000000400000008000000010071e680000000f72a4a48b018970dfbb2fe3d1388", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) pipe(&(0x7f0000000140)) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendfile(r0, r0, 0x0, 0x200000) 12.035035844s ago: executing program 1 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x9, 0x9, 0x9}, &(0x7f0000000140)=0x10) 10.679200462s ago: executing program 3 (id=803): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 9.410541443s ago: executing program 1 (id=804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0xa001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, 0x0, 0x6, 0xfffffffffffffff9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0xfffffc37) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) write$UHID_CREATE2(r6, 0x0, 0x0) 9.351538659s ago: executing program 3 (id=806): read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f0000000540)=""/74, 0x4a, 0xeffffffc, 0x0) 8.661735102s ago: executing program 0 (id=809): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 8.194494101s ago: executing program 3 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffffff0800000008000300470000001f5d5a58f03b"], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, 0x0, 0x10000000000, {0x0, 0x1, 0x1}}, 0x18) sendmmsg$sock(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000340), 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001380)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x8800) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000000000", 0xb6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='-7'], 0x9) 6.955948992s ago: executing program 4 (id=816): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f00000005c0), &(0x7f0000000780)}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 6.89628985s ago: executing program 1 (id=817): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) socket$netlink(0x10, 0x3, 0x13) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7fffefff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x18) 6.770689732s ago: executing program 4 (id=819): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) 5.533091636s ago: executing program 0 (id=821): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, 0x0, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.53088386s ago: executing program 1 (id=822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) 5.358463217s ago: executing program 2 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) close_range(r3, r3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) 4.730452642s ago: executing program 0 (id=824): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="022000000400000008000000010071e680000000f72a4a48b018970dfbb2fe3d1388", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) pipe(&(0x7f0000000140)) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendfile(r0, r0, 0x0, 0x200000) 4.718436545s ago: executing program 4 (id=825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x20, 0x9, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.630697413s ago: executing program 2 (id=826): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) open(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 3.376607785s ago: executing program 1 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0xa001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, 0x0, 0x6, 0xfffffffffffffff9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0xfffffc37) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) write$UHID_CREATE2(r6, 0x0, 0x0) 3.246227748s ago: executing program 0 (id=828): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.202666374s ago: executing program 2 (id=829): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, 0x0, &(0x7f0000ff4000)) 3.150663653s ago: executing program 3 (id=830): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) setregid(0x0, 0xee01) setresgid(0x0, 0xee01, 0x0) listen(0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) 3.054128207s ago: executing program 4 (id=831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.930732947s ago: executing program 0 (id=832): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.516899713s ago: executing program 2 (id=833): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 1.078797013s ago: executing program 0 (id=834): r0 = memfd_create(&(0x7f0000000500)='\x00'/12, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x1f000000) 819.27862ms ago: executing program 4 (id=835): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, 0x0, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 800.282869ms ago: executing program 3 (id=836): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 349.422784ms ago: executing program 2 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x3, 0xc, [{0xfff, 0xabac, 0x5c9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 914.39µs ago: executing program 2 (id=838): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="022000000400000008000000010071e680000000f72a4a48b018970dfbb2fe3d1388", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) pipe(&(0x7f0000000140)) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendfile(r0, r0, 0x0, 0x200000) 0s ago: executing program 4 (id=839): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/11, 0xb}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 87.412781][ T5786] cgroup: Unknown subsys name 'net' [ 87.633301][ T5786] cgroup: Unknown subsys name 'cpuset' [ 87.677947][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.642995][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.230837][ T44] cfg80211: failed to load regulatory.db [ 94.263798][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.265918][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.266888][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.299304][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.300183][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.344606][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.356942][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.363906][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.382130][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.383163][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.478762][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.480591][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.485370][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.486441][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.490342][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.491371][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.582568][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.585602][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.597771][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.610013][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.657886][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.663431][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.664949][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.666153][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.666895][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.433582][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 95.500869][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 95.920326][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 96.058248][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 96.278333][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 96.358431][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.359595][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.360069][ T5801] bridge_slave_0: entered allmulticast mode [ 96.362127][ T5801] bridge_slave_0: entered promiscuous mode [ 96.388680][ T5810] Bluetooth: hci0: command tx timeout [ 96.467228][ T5810] Bluetooth: hci1: command tx timeout [ 96.476172][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.476310][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.476496][ T5801] bridge_slave_1: entered allmulticast mode [ 96.480370][ T5801] bridge_slave_1: entered promiscuous mode [ 96.548422][ T5810] Bluetooth: hci2: command tx timeout [ 96.568655][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.568785][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.568923][ T5798] bridge_slave_0: entered allmulticast mode [ 96.570873][ T5798] bridge_slave_0: entered promiscuous mode [ 96.627219][ T5810] Bluetooth: hci3: command tx timeout [ 96.686515][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.686614][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.686758][ T5798] bridge_slave_1: entered allmulticast mode [ 96.691072][ T5798] bridge_slave_1: entered promiscuous mode [ 96.787662][ T5810] Bluetooth: hci4: command tx timeout [ 97.062150][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.271233][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.351339][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.362745][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.362899][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.363102][ T5803] bridge_slave_0: entered allmulticast mode [ 97.366222][ T5803] bridge_slave_0: entered promiscuous mode [ 97.532014][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.618525][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.618678][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.618818][ T5803] bridge_slave_1: entered allmulticast mode [ 97.620672][ T5803] bridge_slave_1: entered promiscuous mode [ 97.848175][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.848267][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.848411][ T5805] bridge_slave_0: entered allmulticast mode [ 97.850391][ T5805] bridge_slave_0: entered promiscuous mode [ 98.079880][ T5801] team0: Port device team_slave_0 added [ 98.080537][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.080697][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.080886][ T5805] bridge_slave_1: entered allmulticast mode [ 98.083118][ T5805] bridge_slave_1: entered promiscuous mode [ 98.159133][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.159249][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.159397][ T5812] bridge_slave_0: entered allmulticast mode [ 98.161373][ T5812] bridge_slave_0: entered promiscuous mode [ 98.230690][ T5801] team0: Port device team_slave_1 added [ 98.289813][ T5798] team0: Port device team_slave_0 added [ 98.290449][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.290581][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.290836][ T5812] bridge_slave_1: entered allmulticast mode [ 98.292962][ T5812] bridge_slave_1: entered promiscuous mode [ 98.301005][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.467329][ T5810] Bluetooth: hci0: command tx timeout [ 98.470344][ T5798] team0: Port device team_slave_1 added [ 98.548538][ T5810] Bluetooth: hci1: command tx timeout [ 98.579945][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.627297][ T5810] Bluetooth: hci2: command tx timeout [ 98.672499][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.708498][ T5810] Bluetooth: hci3: command tx timeout [ 98.867367][ T5810] Bluetooth: hci4: command tx timeout [ 98.880437][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.880458][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.880491][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.891598][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.152496][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.288878][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.288895][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.288915][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.290615][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.290630][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.290657][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.296114][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.300010][ T5803] team0: Port device team_slave_0 added [ 99.408509][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.408537][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.408556][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.410840][ T5803] team0: Port device team_slave_1 added [ 99.519796][ T5805] team0: Port device team_slave_0 added [ 99.710462][ T5805] team0: Port device team_slave_1 added [ 99.800354][ T5812] team0: Port device team_slave_0 added [ 99.920530][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.920561][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.920589][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.925516][ T5812] team0: Port device team_slave_1 added [ 100.368893][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.368907][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.368926][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.449004][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.449021][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.449040][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.459114][ T5801] hsr_slave_0: entered promiscuous mode [ 100.461221][ T5801] hsr_slave_1: entered promiscuous mode [ 100.547262][ T5810] Bluetooth: hci0: command tx timeout [ 100.627415][ T5810] Bluetooth: hci1: command tx timeout [ 100.644441][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.644459][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.644486][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.658198][ T5798] hsr_slave_0: entered promiscuous mode [ 100.659824][ T5798] hsr_slave_1: entered promiscuous mode [ 100.661122][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 100.661280][ T5798] Cannot create hsr debugfs directory [ 100.666309][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.666325][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.666355][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.690262][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.690283][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.690317][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.707318][ T5810] Bluetooth: hci2: command tx timeout [ 100.787787][ T5810] Bluetooth: hci3: command tx timeout [ 100.947255][ T5810] Bluetooth: hci4: command tx timeout [ 101.364474][ T5803] hsr_slave_0: entered promiscuous mode [ 101.365553][ T5803] hsr_slave_1: entered promiscuous mode [ 101.366352][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 101.366376][ T5803] Cannot create hsr debugfs directory [ 101.524182][ T5805] hsr_slave_0: entered promiscuous mode [ 101.525219][ T5805] hsr_slave_1: entered promiscuous mode [ 101.525910][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 101.525934][ T5805] Cannot create hsr debugfs directory [ 101.782568][ T5812] hsr_slave_0: entered promiscuous mode [ 101.783548][ T5812] hsr_slave_1: entered promiscuous mode [ 101.784295][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 101.784320][ T5812] Cannot create hsr debugfs directory [ 102.627105][ T5810] Bluetooth: hci0: command tx timeout [ 102.707189][ T5810] Bluetooth: hci1: command tx timeout [ 102.787297][ T5810] Bluetooth: hci2: command tx timeout [ 102.867187][ T5810] Bluetooth: hci3: command tx timeout [ 103.027607][ T5810] Bluetooth: hci4: command tx timeout [ 103.060109][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.096046][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.131830][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.186457][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.279283][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.324911][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.361991][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.424902][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.560342][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.605621][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.649851][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.703038][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.834506][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.882362][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.916457][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.970646][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.119681][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.125598][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.176709][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.217998][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.266665][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.358449][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.379219][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.413306][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.413857][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.454944][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.455077][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.504496][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.543104][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.543259][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.566346][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.594908][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.595055][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.670881][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.695166][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.721018][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.721173][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.771088][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.771303][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.854903][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.887431][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.896929][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.897944][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.980949][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.981110][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.062589][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.140806][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.141271][ T4810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.206127][ T206] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.226390][ T206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.346835][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.506312][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.694829][ T5801] veth0_vlan: entered promiscuous mode [ 105.770294][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.774002][ T5801] veth1_vlan: entered promiscuous mode [ 105.833541][ T5798] veth0_vlan: entered promiscuous mode [ 105.882251][ T5798] veth1_vlan: entered promiscuous mode [ 105.885785][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.008854][ T5801] veth0_macvtap: entered promiscuous mode [ 106.046052][ T5801] veth1_macvtap: entered promiscuous mode [ 106.063555][ T5803] veth0_vlan: entered promiscuous mode [ 106.080435][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.132558][ T5798] veth0_macvtap: entered promiscuous mode [ 106.148314][ T5803] veth1_vlan: entered promiscuous mode [ 106.175180][ T5798] veth1_macvtap: entered promiscuous mode [ 106.189309][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.235654][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.290682][ T4810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.296619][ T4810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.329196][ T4810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.343059][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.353979][ T4810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.375316][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.453423][ T5803] veth0_macvtap: entered promiscuous mode [ 106.509385][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.529534][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.541559][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.546475][ T5803] veth1_macvtap: entered promiscuous mode [ 106.566096][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.603908][ T5812] veth0_vlan: entered promiscuous mode [ 106.740712][ T5812] veth1_vlan: entered promiscuous mode [ 106.832455][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.849397][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.849427][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.875796][ T5805] veth0_vlan: entered promiscuous mode [ 106.901457][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.939481][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.939513][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.964800][ T5805] veth1_vlan: entered promiscuous mode [ 106.990639][ T3595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.004320][ T3595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.021560][ T3595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.035643][ T3595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.040698][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.040722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.152873][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.152895][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.155241][ T5812] veth0_macvtap: entered promiscuous mode [ 107.251558][ T5812] veth1_macvtap: entered promiscuous mode [ 107.360221][ T5805] veth0_macvtap: entered promiscuous mode [ 107.460859][ T5805] veth1_macvtap: entered promiscuous mode [ 107.465759][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.500231][ T4810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.500253][ T4810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.531159][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.667164][ T206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.694997][ T206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.698865][ T206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.703384][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.703729][ T206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.719050][ T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.719072][ T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.739468][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.808647][ T1450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.822514][ T1450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.857111][ T1450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.989595][ T1450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.793111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.793150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.793217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.793707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.793790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.793848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.977932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.978048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.978102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.978159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.197374][ T5787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.441303][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 111.995182][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.995237][ T5787] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.995260][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.028486][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.028503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.168208][ T5787] usb 2-1: config 0 descriptor?? [ 113.103050][ T5787] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 113.468646][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.468670][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.811918][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.811940][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.953003][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.953027][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.268061][ T9] usb 2-1: USB disconnect, device number 2 [ 116.130389][ T5979] ntfs3(nullb0): Primary boot signature is not NTFS. [ 116.244670][ T5979] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 117.743903][ T5993] tipc: Started in network mode [ 117.743937][ T5993] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 117.745447][ T5993] tipc: Enabled bearer , priority 10 [ 118.129094][ T5997] 9pnet: Could not find request transport: fd0x0000000000000005 [ 118.137865][ T6005] Zero length message leads to an empty skb [ 118.276296][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.927583][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.968600][ T5859] tipc: Node number set to 1 [ 119.204213][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.659641][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.149913][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.032917][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.033284][ T6046] 9pnet: Could not find request transport: fd0x0000000000000005 [ 123.710261][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.143964][ T6043] bond0: (slave rose0): Enslaving as an active interface with an up link [ 130.377198][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.536651][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.536703][ T5949] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 130.536774][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.193173][ T6114] evm: overlay not supported [ 131.253707][ T5949] usb 5-1: config 0 descriptor?? [ 131.696704][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 131.696842][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.742814][ T5949] usb 5-1: USB disconnect, device number 2 [ 132.687110][ T6126] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 135.232711][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.201933][ T6117] syz.0.55 (6117): drop_caches: 2 [ 138.295288][ T6170] lo speed is unknown, defaulting to 1000 [ 138.295496][ T6170] lo speed is unknown, defaulting to 1000 [ 138.299383][ T6170] lo speed is unknown, defaulting to 1000 [ 138.307735][ T6170] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.321550][ T6170] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.364546][ T6170] lo speed is unknown, defaulting to 1000 [ 138.368608][ T6170] lo speed is unknown, defaulting to 1000 [ 138.371667][ T6170] lo speed is unknown, defaulting to 1000 [ 138.374804][ T6170] lo speed is unknown, defaulting to 1000 [ 138.378778][ T6170] lo speed is unknown, defaulting to 1000 [ 138.542988][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.543089][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.548549][ T6169] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 138.782285][ T6185] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 143.104489][ T6215] kernel read not supported for file /eth0 (pid: 6215 comm: syz.2.75) [ 143.355654][ T6219] 9pnet_fd: Insufficient options for proto=fd [ 144.292638][ T38] audit: type=1800 audit(1760924094.287:2): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.75" name="eth0" dev="mqueue" ino=8944 res=0 errno=0 [ 146.316415][ T6235] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 148.792563][ T6256] netlink: 'syz.2.88': attribute type 4 has an invalid length. [ 149.092755][ T5887] lo speed is unknown, defaulting to 1000 [ 149.190627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.763452][ T6236] syz.1.79 (6236): drop_caches: 2 [ 151.231290][ T6275] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 151.543867][ T6282] nbd0: detected capacity change from 0 to 127 [ 151.567122][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 151.583193][ T6287] netlink: 64 bytes leftover after parsing attributes in process `syz.4.98'. [ 151.591487][ T5810] block nbd0: Receive control failed (result -104) [ 151.728769][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 151.775868][ T5885] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.776002][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.776099][ T5885] usb 3-1: Product: syz [ 151.776115][ T5885] usb 3-1: Manufacturer: syz [ 151.776129][ T5885] usb 3-1: SerialNumber: syz [ 151.845196][ T6291] io-wq is not configured for unbound workers [ 151.885891][ T5885] r8152-cfgselector 3-1: Unknown version 0x0000 [ 151.885920][ T5885] r8152-cfgselector 3-1: config 0 descriptor?? [ 152.116856][ T5885] r8152-cfgselector 3-1: Unknown version 0x0000 [ 152.150071][ T5885] r8152-cfgselector 3-1: bad CDC descriptors [ 152.193705][ T5885] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 152.700315][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.107490][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.336534][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.533944][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.220037][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.337862][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.944438][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.096471][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.127296][ T65] block nbd0: Connection timed out, retrying (0/1 alive) [ 155.129153][ T65] block nbd0: Connection timed out, retrying (0/1 alive) [ 155.129370][ T65] block nbd0: Connection timed out, retrying (0/1 alive) [ 155.129523][ T65] block nbd0: Connection timed out, retrying (0/1 alive) [ 155.134037][ T65] block nbd0: Dead connection, failed to find a fallback [ 155.134116][ T65] block nbd0: shutting down sockets [ 155.134352][ T65] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.135197][ T65] Buffer I/O error on dev nbd0, logical block 3, async page read [ 155.149752][ T65] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.149782][ T65] Buffer I/O error on dev nbd0, logical block 2, async page read [ 155.149858][ T65] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.149879][ T65] Buffer I/O error on dev nbd0, logical block 1, async page read [ 155.149948][ T65] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.149966][ T65] Buffer I/O error on dev nbd0, logical block 0, async page read [ 155.151886][ T6327] binder: 6317:6327 ioctl 4018620d 0 returned -22 [ 155.166911][ T5951] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.167282][ T5951] Buffer I/O error on dev nbd0, logical block 0, async page read [ 155.355332][ T5951] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.355469][ T5951] Buffer I/O error on dev nbd0, logical block 1, async page read [ 155.420926][ T5951] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.420957][ T5951] Buffer I/O error on dev nbd0, logical block 2, async page read [ 155.421123][ T5951] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.421145][ T5951] Buffer I/O error on dev nbd0, logical block 3, async page read [ 155.421302][ T5951] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.421324][ T5951] Buffer I/O error on dev nbd0, logical block 0, async page read [ 155.421455][ T5951] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.421478][ T5951] Buffer I/O error on dev nbd0, logical block 1, async page read [ 155.728136][ T5951] ldm_validate_partition_table(): Disk read failed. [ 155.730925][ T5951] Dev nbd0: unable to read RDB block 0 [ 155.772142][ T5951] nbd0: unable to read partition table [ 155.833758][ T5951] ldm_validate_partition_table(): Disk read failed. [ 155.836226][ T5951] Dev nbd0: unable to read RDB block 0 [ 155.890646][ T5951] nbd0: unable to read partition table [ 155.970742][ T6318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 155.970763][ T6318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.971967][ T6318] vhci_hcd vhci_hcd.0: Device attached [ 156.014361][ T6318] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 156.014390][ T6318] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.014425][ T6318] vhci_hcd vhci_hcd.0: Device attached [ 156.043077][ T6318] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 156.043098][ T6318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.043132][ T6318] vhci_hcd vhci_hcd.0: Device attached [ 156.044762][ T6318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.045794][ T6318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.130988][ T6336] vhci_hcd: connection closed [ 156.173678][ T6334] vhci_hcd: connection closed [ 156.184398][ T206] vhci_hcd: stop threads [ 156.185108][ T206] vhci_hcd: release socket [ 156.185355][ T206] vhci_hcd: disconnect device [ 156.222867][ T206] vhci_hcd: stop threads [ 156.222887][ T206] vhci_hcd: release socket [ 156.226782][ T6339] vhci_hcd: connection closed [ 156.241115][ T206] vhci_hcd: disconnect device [ 156.241523][ T206] vhci_hcd: stop threads [ 156.241532][ T206] vhci_hcd: release socket [ 156.241610][ T206] vhci_hcd: disconnect device [ 156.277163][ T5886] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 156.277466][ T5886] usb 33-1: enqueue for inactive port 0 [ 156.347190][ T5886] vhci_hcd: vhci_device speed not set [ 156.347493][ T1230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.501757][ T1230] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.501797][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.551305][ T1230] usb 2-1: config 0 descriptor?? [ 156.561269][ T1230] cp210x 2-1:0.0: cp210x converter detected [ 156.810883][ T1230] usb 2-1: cp210x converter now attached to ttyUSB0 [ 156.824923][ T6353] netlink: 212 bytes leftover after parsing attributes in process `syz.2.121'. [ 156.827085][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 157.406578][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 157.749140][ T44] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 157.749164][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.749178][ T44] usb 4-1: Product: syz [ 157.749188][ T44] usb 4-1: Manufacturer: syz [ 157.749198][ T44] usb 4-1: SerialNumber: syz [ 157.877439][ T5885] usb 2-1: USB disconnect, device number 3 [ 157.882562][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 157.882589][ T44] r8152-cfgselector 4-1: config 0 descriptor?? [ 158.046639][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.339177][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.361801][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 158.362379][ T44] r8152-cfgselector 4-1: bad CDC descriptors [ 158.375451][ T5885] cp210x 2-1:0.0: device disconnected [ 158.530217][ T6378] overlayfs: failed to clone upperpath [ 158.795508][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.950953][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.952384][ T44] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 159.104154][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.107458][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.156183][ T6403] netlink: 212 bytes leftover after parsing attributes in process `syz.2.133'. [ 160.724247][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.764771][ T6400] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 161.693568][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.150461][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.373764][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.614073][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.831357][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.143385][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.241068][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.333338][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.697609][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.853568][ T5885] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.853599][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.889950][ T5885] usb 4-1: config 0 descriptor?? [ 163.903531][ T5885] cp210x 4-1:0.0: cp210x converter detected [ 164.126263][ T5885] usb 4-1: cp210x converter now attached to ttyUSB0 [ 164.806063][ T5949] usb 4-1: USB disconnect, device number 3 [ 164.830089][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.830760][ T5949] cp210x 4-1:0.0: device disconnected [ 165.346091][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.539291][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.561892][ T1230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.682187][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.113565][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.339799][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.638614][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.661651][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.661702][ T1230] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 166.661726][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.720794][ T1230] usb 3-1: config 0 descriptor?? [ 166.872943][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.364820][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.586641][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.009969][ T1230] usbhid 3-1:0.0: can't add hid device: -71 [ 168.010485][ T1230] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.032024][ T1230] usb 3-1: USB disconnect, device number 3 [ 175.220561][ T6508] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 175.908121][ T6530] vivid-000: disconnect [ 176.901442][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.077592][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 177.232534][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.232589][ T5887] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 177.232612][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.288965][ T5887] usb 1-1: config 0 descriptor?? [ 177.338101][ T5949] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.472283][ T6522] vivid-000: reconnect [ 177.487229][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 177.567300][ T5949] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 177.567741][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.567766][ T5949] usb 2-1: Product: syz [ 177.567781][ T5949] usb 2-1: Manufacturer: syz [ 177.567796][ T5949] usb 2-1: SerialNumber: syz [ 177.792508][ T5949] usb 2-1: config 0 descriptor?? [ 177.986776][ T5887] usbhid 1-1:0.0: can't add hid device: -71 [ 177.987811][ T5887] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 178.180279][ T5887] usb 1-1: USB disconnect, device number 2 [ 178.230922][ T5949] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 178.234352][ T5949] gspca_sunplus: reg_w_riv err -71 [ 178.234436][ T5949] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 178.246288][ T5949] usb 2-1: USB disconnect, device number 4 [ 179.619576][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.008401][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.197187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.909446][ T6601] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 186.780228][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.499209][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.766775][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.988939][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.469605][ T6677] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 189.680348][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.802749][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.973121][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.421444][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.288507][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.518203][ T6676] syz.2.225 (6676): drop_caches: 2 [ 194.535357][ T6712] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 195.040071][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 195.207113][ T5886] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.207146][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.219656][ T5886] usb 3-1: config 0 descriptor?? [ 195.224538][ T5886] cp210x 3-1:0.0: cp210x converter detected [ 195.448078][ T5886] usb 3-1: cp210x converter now attached to ttyUSB0 [ 197.543620][ T5886] usb 3-1: USB disconnect, device number 4 [ 197.570583][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.582583][ T5886] cp210x 3-1:0.0: device disconnected [ 197.781539][ T6745] binder: 6742:6745 ioctl 4018620d 0 returned -22 [ 197.825920][ T6747] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 200.457946][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.458024][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.084005][ T6783] process 'syz.2.255' launched './file1' with NULL argv: empty string added [ 202.823857][ T6800] warning: `syz.0.261' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.734829][ T6800] tty tty21: ldisc open failed (-12), clearing slot 20 [ 206.708659][ T6836] binder: BINDER_SET_CONTEXT_MGR already set [ 206.708672][ T6836] binder: 6835:6836 ioctl 4018620d 2000000002c0 returned -16 [ 206.708945][ T6836] binder: 6835:6836 ioctl c0306201 0 returned -14 [ 207.219702][ T6807] syz.1.263 (6807): drop_caches: 2 [ 207.718766][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 207.992487][ T6853] batadv0: entered promiscuous mode [ 208.328116][ T6859] hub 9-0:1.0: USB hub found [ 208.343920][ T6859] hub 9-0:1.0: 1 port detected [ 208.698052][ T6853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.723565][ T6853] batadv0: left promiscuous mode [ 209.088212][ T6864] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 210.323543][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.859642][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.250302][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.367065][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 211.373126][ T5886] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 211.373159][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.373179][ T5886] usb 3-1: Product: syz [ 211.373193][ T5886] usb 3-1: Manufacturer: syz [ 211.373209][ T5886] usb 3-1: SerialNumber: syz [ 211.380144][ T5886] usb 3-1: config 0 descriptor?? [ 211.822040][ T5886] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 211.826808][ T5886] gspca_sunplus: reg_w_riv err -71 [ 211.847091][ T5886] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 211.865659][ T5886] usb 3-1: USB disconnect, device number 5 [ 214.202366][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.284286][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 214.347894][ T5810] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 214.449548][ T5885] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.449583][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.490872][ T5885] usb 4-1: config 0 descriptor?? [ 214.517609][ T5885] cp210x 4-1:0.0: cp210x converter detected [ 214.736357][ T5885] usb 4-1: cp210x converter now attached to ttyUSB0 [ 215.019196][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.142357][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.228256][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.526553][ T6920] lo speed is unknown, defaulting to 1000 [ 215.819472][ T5886] usb 4-1: USB disconnect, device number 4 [ 215.897618][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.898436][ T5886] cp210x 4-1:0.0: device disconnected [ 216.141571][ T6932] binder: 6931:6932 ioctl c0306201 0 returned -14 [ 217.757455][ T6924] Bluetooth: hci0: command 0x0406 tx timeout [ 217.757511][ T6924] Bluetooth: hci1: command 0x0406 tx timeout [ 217.757575][ T6924] Bluetooth: hci3: command 0x0406 tx timeout [ 217.757643][ T6924] Bluetooth: hci2: command 0x0406 tx timeout [ 217.757690][ T6924] Bluetooth: hci4: command 0x0406 tx timeout [ 222.347065][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 222.440185][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.506632][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 223.114482][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.220882][ T7004] tty tty23: ldisc open failed (-12), clearing slot 22 [ 223.258350][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 223.258385][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.261761][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 223.261790][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.261811][ T5885] usb 4-1: Product: syz [ 223.261826][ T5885] usb 4-1: Manufacturer: syz [ 223.261842][ T5885] usb 4-1: SerialNumber: syz [ 223.289761][ T5885] usb 4-1: config 0 descriptor?? [ 223.302635][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 223.302669][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 223.308710][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.500505][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.895981][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.679193][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.819691][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 224.853240][ T5885] em28xx 4-1:0.0: Config register raw data: 0x00 [ 225.006247][ T7023] loop7: detected capacity change from 0 to 16384 [ 225.573540][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.114687][ T5949] usb 4-1: USB disconnect, device number 5 [ 226.117561][ T5949] em28xx 4-1:0.0: Disconnecting em28xx [ 226.156308][ T5949] em28xx 4-1:0.0: Freeing device [ 226.282429][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 226.427060][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 226.436004][ T5887] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 226.436037][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.436058][ T5887] usb 3-1: Product: syz [ 226.436074][ T5887] usb 3-1: Manufacturer: syz [ 226.436089][ T5887] usb 3-1: SerialNumber: syz [ 226.519616][ T5887] usb 3-1: config 0 descriptor?? [ 226.800831][ T5887] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 226.827299][ T5887] gspca_sunplus: reg_w_riv err -71 [ 226.827397][ T5887] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 226.858069][ T5887] usb 3-1: USB disconnect, device number 6 [ 227.742160][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.458579][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.677752][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.463134][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.787935][ T7084] netlink: 'syz.1.350': attribute type 4 has an invalid length. [ 232.467250][ T1230] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 232.630043][ T1230] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.630077][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.640353][ T1230] usb 2-1: config 0 descriptor?? [ 232.650976][ T1230] cp210x 2-1:0.0: cp210x converter detected [ 232.743707][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.862554][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.956951][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.058323][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.152041][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.290041][ T1230] usb 2-1: cp210x converter now attached to ttyUSB0 [ 233.458368][ T5885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.465277][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.568503][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.669210][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.769823][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.866826][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.956335][ T7096] misc userio: No port type given on /dev/userio [ 233.975673][ T5886] usb 2-1: USB disconnect, device number 5 [ 234.034308][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.035088][ T5886] cp210x 2-1:0.0: device disconnected [ 234.077171][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 234.079822][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.079854][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.079896][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 234.079932][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.152906][ T5885] usb 4-1: config 0 descriptor?? [ 235.067787][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.231875][ T5885] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 235.308247][ T7128] syz.2.364 uses obsolete (PF_INET,SOCK_PACKET) [ 235.350890][ T1230] usb 4-1: USB disconnect, device number 6 [ 235.391464][ T7124] lo: entered allmulticast mode [ 235.416357][ T7124] tunl0: entered allmulticast mode [ 235.449104][ T7124] gre0: entered allmulticast mode [ 235.698655][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.726130][ T7124] gretap0: entered allmulticast mode [ 237.869072][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.945719][ T7126] fido_id[7126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 237.981261][ T7124] erspan0: entered allmulticast mode [ 238.044553][ T7124] ip_vti0: entered allmulticast mode [ 238.129432][ T7124] ip6_vti0: entered allmulticast mode [ 238.170453][ T7124] sit0: entered allmulticast mode [ 238.255049][ T7124] ip6tnl0: entered allmulticast mode [ 238.364512][ T7124] ip6gre0: entered allmulticast mode [ 238.517724][ T7124] syz_tun: entered allmulticast mode [ 238.690591][ T7124] ip6gretap0: entered allmulticast mode [ 238.733120][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.741618][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.751791][ T7124] bridge0: entered allmulticast mode [ 238.775915][ T7124] vcan0: entered allmulticast mode [ 238.792120][ T7124] bond0: entered allmulticast mode [ 238.792143][ T7124] bond_slave_0: entered allmulticast mode [ 238.792161][ T7124] bond_slave_1: entered allmulticast mode [ 238.803744][ T7124] team0: entered allmulticast mode [ 238.803771][ T7124] team_slave_0: entered allmulticast mode [ 238.803793][ T7124] team_slave_1: entered allmulticast mode [ 238.844530][ T7124] dummy0: entered allmulticast mode [ 238.889595][ T7124] nlmon0: entered allmulticast mode [ 238.906689][ T7124] caif0: entered allmulticast mode [ 238.913077][ T7124] batadv0: entered allmulticast mode [ 238.924583][ T7124] vxcan0: entered allmulticast mode [ 238.929639][ T7124] vxcan1: entered allmulticast mode [ 238.948837][ T7124] veth0: entered allmulticast mode [ 239.185675][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.241094][ T7124] veth1: entered allmulticast mode [ 239.349694][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.473319][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.857017][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.550249][ T7124] wg0: entered allmulticast mode [ 241.024475][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.277216][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.677920][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.900837][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.976725][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.093292][ T7124] wg1: entered allmulticast mode [ 242.250952][ T7124] wg2: entered allmulticast mode [ 242.254088][ T7124] veth0_to_bridge: entered allmulticast mode [ 242.310081][ T7124] veth1_to_bridge: entered allmulticast mode [ 242.326173][ T7124] veth0_to_bond: entered allmulticast mode [ 242.532876][ T5946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 242.562806][ T7124] veth1_to_bond: entered allmulticast mode [ 242.592275][ T7124] veth0_to_team: entered allmulticast mode [ 242.627971][ T7124] veth1_to_team: entered allmulticast mode [ 242.666785][ T7124] veth0_to_batadv: entered allmulticast mode [ 242.673527][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.674228][ T7124] batadv_slave_0: entered allmulticast mode [ 242.685171][ T7124] veth1_to_batadv: entered allmulticast mode [ 242.689723][ T5946] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.689759][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.699120][ T5946] usb 1-1: config 0 descriptor?? [ 242.733038][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.735415][ T7124] batadv_slave_1: entered allmulticast mode [ 242.753384][ T5946] cp210x 1-1:0.0: cp210x converter detected [ 242.778274][ T7124] xfrm0: entered allmulticast mode [ 242.799158][ T7124] veth0_to_hsr: entered allmulticast mode [ 242.820551][ T7124] hsr_slave_0: entered allmulticast mode [ 242.836688][ T7124] veth1_to_hsr: entered allmulticast mode [ 242.852063][ T7124] hsr_slave_1: entered allmulticast mode [ 242.868341][ T7124] hsr0: entered allmulticast mode [ 242.876190][ T7124] veth1_virt_wifi: entered allmulticast mode [ 242.915266][ T5946] usb 1-1: cp210x converter now attached to ttyUSB0 [ 242.918868][ T7124] veth0_virt_wifi: entered allmulticast mode [ 242.940032][ T7124] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 242.944256][ T7124] veth1_vlan: entered allmulticast mode [ 242.955600][ T7124] veth0_vlan: entered allmulticast mode [ 242.984525][ T7124] vlan0: entered allmulticast mode [ 242.984734][ T7124] vlan1: entered allmulticast mode [ 243.017896][ T7124] macvlan0: entered allmulticast mode [ 243.087035][ T7124] macvlan1: entered allmulticast mode [ 243.092712][ T7124] ipvlan0: entered allmulticast mode [ 243.092941][ T7124] ipvlan1: entered allmulticast mode [ 243.094081][ T7124] veth1_macvtap: entered allmulticast mode [ 243.196924][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.308906][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.543470][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.565042][ T7124] veth0_macvtap: entered allmulticast mode [ 243.606730][ T5946] usb 1-1: USB disconnect, device number 3 [ 243.631848][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.632656][ T5946] cp210x 1-1:0.0: device disconnected [ 243.668446][ T7124] macvtap0: entered allmulticast mode [ 243.676547][ T7124] macsec0: entered allmulticast mode [ 243.783367][ T7124] geneve0: entered allmulticast mode [ 243.909974][ T7124] geneve1: entered allmulticast mode [ 243.968383][ T7124] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 244.127148][ T44] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 244.157008][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.277443][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.349564][ T7124] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 244.373266][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.374177][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 244.377188][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.377214][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.420848][ T44] usb 4-1: string descriptor 0 read error: -22 [ 244.420966][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.420989][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.256287][ T7124] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 245.262524][ T44] usb 4-1: 0:2 : does not exist [ 245.398950][ T7124] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 245.711674][ T7124] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 246.022515][ T44] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 246.877144][ T44] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 246.895515][ T44] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 246.931616][ T7124] erspan1: entered allmulticast mode [ 246.964311][ T7124] mac80211_hwsim hwsim7 pimreg: entered allmulticast mode [ 246.964517][ T7124] syzkaller1: entered allmulticast mode [ 246.993374][ T5886] lo speed is unknown, defaulting to 1000 [ 246.993417][ T5886] syz0: Port: 1 Link DOWN [ 247.058374][ T44] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 247.098038][ T44] usb 4-1: USB disconnect, device number 7 [ 247.387063][ T4810] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.390567][ T4810] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.390635][ T4810] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.390673][ T4810] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.726580][ T7212] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 247.849436][ T7213] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 248.527115][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 248.718630][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 249.219170][ T44] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 249.219203][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.219224][ T44] usb 2-1: Product: syz [ 249.219239][ T44] usb 2-1: Manufacturer: syz [ 249.219254][ T44] usb 2-1: SerialNumber: syz [ 249.260799][ T44] usb 2-1: config 0 descriptor?? [ 249.289641][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 250.214501][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.626634][ T44] gspca_stk1135: reg_w 0xd err -71 [ 250.632660][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632678][ T44] gspca_stk1135: Sensor write failed [ 250.632715][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632726][ T44] gspca_stk1135: Sensor write failed [ 250.632762][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632772][ T44] gspca_stk1135: Sensor read failed [ 250.632808][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632818][ T44] gspca_stk1135: Sensor read failed [ 250.632826][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 250.632871][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632881][ T44] gspca_stk1135: Sensor read failed [ 250.632916][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632926][ T44] gspca_stk1135: Sensor read failed [ 250.632962][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.632971][ T44] gspca_stk1135: Sensor write failed [ 250.633007][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 250.633017][ T44] gspca_stk1135: Sensor write failed [ 250.633121][ T44] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 250.819874][ T1230] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 250.838571][ T44] usb 2-1: USB disconnect, device number 6 [ 250.996416][ T1230] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 250.996444][ T1230] usb 1-1: config 0 has no interface number 0 [ 250.996477][ T1230] usb 1-1: config 0 interface 113 has no altsetting 0 [ 251.032261][ T1230] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 251.032294][ T1230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.032314][ T1230] usb 1-1: Product: syz [ 251.032329][ T1230] usb 1-1: Manufacturer: syz [ 251.032344][ T1230] usb 1-1: SerialNumber: syz [ 251.078307][ T1230] usb 1-1: config 0 descriptor?? [ 251.241607][ T1230] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 251.607177][ T5859] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 251.825431][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.000279][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.572552][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.681600][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.681639][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.756681][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.762845][ T5859] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 252.762879][ T5859] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 252.762902][ T5859] usb 4-1: Manufacturer: syz [ 252.770009][ T5859] usb 4-1: config 0 descriptor?? [ 253.227595][ T5859] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 253.377059][ T1230] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 253.527769][ T1230] usb 2-1: Using ep0 maxpacket: 8 [ 253.532970][ T1230] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 253.532992][ T1230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.533006][ T1230] usb 2-1: Product: syz [ 253.533016][ T1230] usb 2-1: Manufacturer: syz [ 253.533026][ T1230] usb 2-1: SerialNumber: syz [ 253.579829][ T1230] usb 2-1: config 0 descriptor?? [ 253.802110][ T1230] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 254.458942][ T44] usb 4-1: USB disconnect, device number 8 [ 255.142151][ T1230] gspca_sunplus: reg_w_riv err -110 [ 255.142251][ T1230] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 255.182101][ T5859] usb 2-1: USB disconnect, device number 7 [ 255.480421][ T5949] usb 1-1: USB disconnect, device number 4 [ 261.197405][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.197480][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.187142][ T5886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 262.195078][ T7412] sctp: [Deprecated]: syz.0.475 (pid 7412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.195078][ T7412] Use struct sctp_sack_info instead [ 262.429415][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.429448][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.469180][ T5886] usb 2-1: config 0 descriptor?? [ 262.498544][ T5886] cp210x 2-1:0.0: cp210x converter detected [ 262.705486][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0 [ 262.874867][ T6014] usb 2-1: USB disconnect, device number 8 [ 262.899112][ T6014] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.900374][ T6014] cp210x 2-1:0.0: device disconnected [ 265.007303][ T7408] syz.3.472 (7408): drop_caches: 2 [ 265.116990][ T7443] overlayfs: failed to resolve './file0': -2 [ 267.811488][ T7471] IPVS: set_ctl: invalid protocol: 44 172.20.20.23:20001 [ 268.064790][ T7475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'. [ 270.547171][ T6014] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 270.710142][ T6014] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 270.710166][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.714162][ T6014] usb 4-1: config 0 descriptor?? [ 270.848448][ T6014] cp210x 4-1:0.0: cp210x converter detected [ 270.875536][ T7520] syz.1.511 (7520) used greatest stack depth: 18168 bytes left [ 271.033172][ T6014] usb 4-1: cp210x converter now attached to ttyUSB0 [ 271.213020][ T6014] usb 4-1: USB disconnect, device number 9 [ 271.230323][ T6014] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 271.231106][ T6014] cp210x 4-1:0.0: device disconnected [ 272.417549][ T6014] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 272.554255][ T7554] overlayfs: failed to resolve './file1': -2 [ 273.472264][ T6014] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 273.472294][ T6014] usb 2-1: config 0 has no interface number 0 [ 273.472343][ T6014] usb 2-1: config 0 interface 113 has no altsetting 0 [ 273.480157][ T6014] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 273.480180][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.480195][ T6014] usb 2-1: Product: syz [ 273.480205][ T6014] usb 2-1: Manufacturer: syz [ 273.480216][ T6014] usb 2-1: SerialNumber: syz [ 273.484613][ T6014] usb 2-1: config 0 descriptor?? [ 273.545029][ T6014] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 274.224910][ T7559] syz.3.525 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 275.184891][ T7573] overlayfs: failed to resolve './file0': -2 [ 278.105953][ T1230] usb 2-1: USB disconnect, device number 9 [ 278.766071][ T7609] overlayfs: failed to resolve './file0': -2 [ 282.839476][ T5949] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 283.282079][ T5949] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 283.282108][ T5949] usb 4-1: config 0 has no interface number 0 [ 283.283478][ T5949] usb 4-1: config 0 interface 113 has no altsetting 0 [ 283.293423][ T5949] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 283.293460][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.293484][ T5949] usb 4-1: Product: syz [ 283.293510][ T5949] usb 4-1: Manufacturer: syz [ 283.293528][ T5949] usb 4-1: SerialNumber: syz [ 283.401630][ T7654] overlayfs: failed to resolve './file0': -2 [ 284.131797][ T5949] usb 4-1: config 0 descriptor?? [ 284.170088][ T5949] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 284.915508][ T7637] syz.1.552 (7637) used greatest stack depth: 17552 bytes left [ 285.747173][ T6364] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 285.900554][ T6364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.901262][ T6364] usb 1-1: not running at top speed; connect to a high speed hub [ 285.902269][ T6364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.902291][ T6364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.905438][ T6364] usb 1-1: string descriptor 0 read error: -22 [ 285.905536][ T6364] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.905552][ T6364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.989487][ T6364] usb 1-1: 0:2 : does not exist [ 286.851631][ T6364] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 287.209425][ T6364] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 287.820117][ T6364] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 287.863118][ T6364] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 287.883991][ T6364] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 287.909454][ T6364] usb 1-1: USB disconnect, device number 5 [ 288.098995][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.367896][ T6364] usb 4-1: USB disconnect, device number 10 [ 288.960889][ T7699] syz.0.575 (7699): drop_caches: 2 [ 288.962824][ T7699] syz.0.575 (7699): drop_caches: 2 [ 292.531836][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.755080][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.249988][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.867057][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 294.021656][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.024588][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 294.026108][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.026131][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.034619][ T9] usb 1-1: string descriptor 0 read error: -22 [ 294.034785][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.034808][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.180880][ T9] usb 1-1: 0:2 : does not exist [ 294.210727][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.687650][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 295.708302][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 295.713337][ T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 295.769124][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 295.786182][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 295.801830][ T9] usb 1-1: USB disconnect, device number 6 [ 297.063541][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.097901][ T7803] syz.3.613 (7803): drop_caches: 2 [ 298.110390][ T7803] syz.3.613 (7803): drop_caches: 2 [ 298.267140][ T6014] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 298.397143][ T6014] usb 1-1: device descriptor read/64, error -71 [ 298.677036][ T6014] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 298.817072][ T6014] usb 1-1: device descriptor read/64, error -71 [ 298.927441][ T6014] usb usb1-port1: attempt power cycle [ 299.267813][ T6014] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 299.298570][ T6014] usb 1-1: device descriptor read/8, error -71 [ 299.577084][ T6014] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 299.598178][ T6014] usb 1-1: device descriptor read/8, error -71 [ 299.717089][ T6014] usb usb1-port1: unable to enumerate USB device [ 303.857033][ T6014] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 304.037031][ T6014] usb 2-1: Using ep0 maxpacket: 8 [ 304.039420][ T6014] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.039440][ T6014] usb 2-1: config 0 has no interfaces? [ 304.039461][ T6014] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.039478][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.043744][ T6014] usb 2-1: config 0 descriptor?? [ 304.343241][ T5886] usb 2-1: USB disconnect, device number 10 [ 305.687418][ T7888] nvme_fabrics: missing parameter 'transport=%s' [ 305.687436][ T7888] nvme_fabrics: missing parameter 'nqn=%s' [ 306.650230][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.029237][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.105405][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.589184][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.888391][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.994923][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.368616][ T5885] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 310.051703][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 310.058567][ T5885] usb 2-1: config 0 has no interfaces? [ 310.078695][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.078726][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.078748][ T5885] usb 2-1: Product: syz [ 310.078763][ T5885] usb 2-1: Manufacturer: syz [ 310.078778][ T5885] usb 2-1: SerialNumber: syz [ 310.090442][ T5885] usb 2-1: config 0 descriptor?? [ 312.154201][ T6014] usb 2-1: USB disconnect, device number 11 [ 313.721170][ T8010] IPVS: set_ctl: invalid protocol: 44 172.20.20.23:20001 [ 314.937073][ T5886] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 315.109483][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.109518][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.116395][ T5886] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 315.116427][ T5886] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 315.116449][ T5886] usb 1-1: Manufacturer: syz [ 315.165943][ T5886] usb 1-1: config 0 descriptor?? [ 315.273140][ T8044] IPVS: set_ctl: invalid protocol: 44 172.20.20.23:20001 [ 315.617507][ T5886] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 318.008909][ T6014] usb 1-1: USB disconnect, device number 11 [ 318.027096][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 318.105866][ T8087] 9pnet_fd: Insufficient options for proto=fd [ 318.177085][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 318.178859][ T9] usb 2-1: config 0 has no interfaces? [ 318.180853][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 318.180872][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.180886][ T9] usb 2-1: Product: syz [ 318.180896][ T9] usb 2-1: Manufacturer: syz [ 318.180906][ T9] usb 2-1: SerialNumber: syz [ 318.186186][ T9] usb 2-1: config 0 descriptor?? [ 318.363183][ T8092] netlink: 'syz.4.728': attribute type 4 has an invalid length. [ 321.021816][ T9] usb 2-1: USB disconnect, device number 12 [ 322.551541][ T8143] overlayfs: failed to clone lowerpath [ 322.867388][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.867472][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.136512][ T8166] netlink: 'syz.4.753': attribute type 4 has an invalid length. [ 325.427542][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.428229][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.756935][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.792810][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.987715][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.418478][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.830199][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.463017][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.783778][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.937084][ T5886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 332.088987][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 332.091550][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.091577][ T5886] usb 2-1: config 0 has no interfaces? [ 332.091608][ T5886] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.091632][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.148884][ T5886] usb 2-1: config 0 descriptor?? [ 332.375099][ T5886] usb 2-1: USB disconnect, device number 13 [ 332.778097][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.759226][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.293915][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.260817][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.492235][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.805772][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.710172][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.157016][ T5885] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 338.309539][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.309574][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.309619][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.309642][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.737106][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 338.737141][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 338.979780][ T5885] usb 1-1: USB disconnect, device number 12 [ 339.764998][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.544735][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.167616][ T8392] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 346.167635][ T8392] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8392, name: syz.3.836 [ 346.167648][ T8392] preempt_count: 1, expected: 0 [ 346.167659][ T8392] RCU nest depth: 2, expected: 2 [ 346.167671][ T8392] 5 locks held by syz.3.836/8392: [ 346.167679][ T8392] #0: ffff888036af0350 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 346.167745][ T8392] #1: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 346.167782][ T8392] #2: ffff8880b8832c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 346.167824][ T8392] #3: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 346.167865][ T8392] #4: ffff8880b883f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13f0 [ 346.167909][ T8392] Preemption disabled at: [ 346.167913][ T8392] [<0000000000000000>] 0x0 [ 346.167945][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.167962][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 346.167977][ T8392] Call Trace: [ 346.167986][ T8392] [ 346.167993][ T8392] dump_stack_lvl+0x189/0x250 [ 346.168016][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.168035][ T8392] ? __pfx__printk+0x10/0x10 [ 346.168057][ T8392] ? print_lock_name+0xde/0x100 [ 346.168081][ T8392] __might_resched+0x44b/0x5d0 [ 346.168110][ T8392] ? __pfx___might_resched+0x10/0x10 [ 346.168133][ T8392] ? ___slab_alloc+0x12f/0x13f0 [ 346.168156][ T8392] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 346.168181][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.168209][ T8392] rt_spin_lock+0xc7/0x3e0 [ 346.168231][ T8392] ? __pfx_rt_spin_lock+0x10/0x10 [ 346.168251][ T8392] ? __lock_acquire+0xab9/0xd20 [ 346.168273][ T8392] ___slab_alloc+0x12f/0x13f0 [ 346.168303][ T8392] ? __set_page_owner+0x25c/0x490 [ 346.168323][ T8392] __slab_alloc+0xc6/0x1f0 [ 346.168343][ T8392] ? __set_page_owner+0x25c/0x490 [ 346.168359][ T8392] __kmalloc_cache_noprof+0xec/0x6c0 [ 346.168376][ T8392] ? __set_page_owner+0x25c/0x490 [ 346.168394][ T8392] __set_page_owner+0x25c/0x490 [ 346.168412][ T8392] ? __pfx___set_page_owner+0x10/0x10 [ 346.168427][ T8392] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 346.168454][ T8392] post_alloc_hook+0x240/0x2a0 [ 346.168473][ T8392] get_page_from_freelist+0x28c0/0x2960 [ 346.168506][ T8392] ? lockdep_unlock+0x89/0x120 [ 346.168536][ T8392] ? __lock_acquire+0xab9/0xd20 [ 346.168566][ T8392] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 346.168595][ T8392] alloc_pages_nolock_noprof+0xa/0x30 [ 346.168617][ T8392] bpf_stream_page_replace+0x19/0x1e0 [ 346.168659][ T8392] __bpf_stream_push_str+0x35c/0xbe0 [ 346.168685][ T8392] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 346.168715][ T8392] bpf_stream_stage_printk+0x14e/0x1c0 [ 346.168735][ T8392] ? __pfx_find_from_stack_cb+0x10/0x10 [ 346.168752][ T8392] ? arch_bpf_stack_walk+0x112/0x170 [ 346.168775][ T8392] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 346.168801][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.168832][ T8392] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 346.168857][ T8392] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 346.168882][ T8392] ? irqentry_exit+0x74/0x90 [ 346.168898][ T8392] ? read_tsc+0x9/0x20 [ 346.168922][ T8392] bpf_check_timed_may_goto+0xaa/0xb0 [ 346.168947][ T8392] arch_bpf_timed_may_goto+0x21/0x40 [ 346.168972][ T8392] bpf_prog_262a74d054ad2993+0x53/0x5f [ 346.168987][ T8392] bpf_trace_run9+0x2de/0x500 [ 346.169004][ T8392] ? bpf_trace_run9+0x1ec/0x500 [ 346.169020][ T8392] ? __pfx_bpf_trace_run9+0x10/0x10 [ 346.169054][ T8392] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 346.169082][ T8392] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 346.169101][ T8392] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 346.169130][ T8392] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 346.169163][ T8392] virtio_transport_alloc_skb+0x10cc/0x1130 [ 346.169200][ T8392] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 346.169222][ T8392] ? rt_spin_unlock+0x150/0x200 [ 346.169250][ T8392] virtio_transport_send_pkt_info+0x6be/0x1100 [ 346.169279][ T8392] ? rt_spin_unlock+0x150/0x200 [ 346.169310][ T8392] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 346.169332][ T8392] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 346.169352][ T8392] ? rt_spin_lock+0x1c1/0x3e0 [ 346.169373][ T8392] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 346.169398][ T8392] ? rt_spin_unlock+0x150/0x200 [ 346.169422][ T8392] ? rt_spin_unlock+0x161/0x200 [ 346.169444][ T8392] vsock_connectible_sendmsg+0xabf/0x1040 [ 346.169487][ T8392] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 346.169515][ T8392] ? __pfx_woken_wake_function+0x10/0x10 [ 346.169538][ T8392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.169555][ T8392] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 346.169581][ T8392] __sock_sendmsg+0x21c/0x270 [ 346.169604][ T8392] ____sys_sendmsg+0x534/0x820 [ 346.169624][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.169647][ T8392] ? import_iovec+0x74/0xa0 [ 346.169667][ T8392] ___sys_sendmsg+0x21f/0x2a0 [ 346.169684][ T8392] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.169729][ T8392] ? __fget_files+0x2a/0x420 [ 346.169745][ T8392] ? __fget_files+0x3a6/0x420 [ 346.169770][ T8392] __sys_sendmmsg+0x22d/0x430 [ 346.169790][ T8392] ? __pfx___sys_sendmmsg+0x10/0x10 [ 346.169813][ T8392] ? __pfx_do_futex+0x10/0x10 [ 346.169862][ T8392] __x64_sys_sendmmsg+0xa0/0xc0 [ 346.169880][ T8392] do_syscall_64+0xfa/0xfa0 [ 346.169893][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.169917][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.169932][ T8392] ? clear_bhb_loop+0x60/0xb0 [ 346.169951][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.169966][ T8392] RIP: 0033:0x7f7d6bc0efc9 [ 346.169980][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.169993][ T8392] RSP: 002b:00007f7d69e4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.170008][ T8392] RAX: ffffffffffffffda RBX: 00007f7d6be66090 RCX: 00007f7d6bc0efc9 [ 346.170020][ T8392] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 346.170029][ T8392] RBP: 00007f7d6bc91f91 R08: 0000000000000000 R09: 0000000000000000 [ 346.170039][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.170047][ T8392] R13: 00007f7d6be66128 R14: 00007f7d6be66090 R15: 00007ffc76c90698 [ 346.170074][ T8392]