last executing test programs: 2m58.55601353s ago: executing program 1 (id=1290): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001ef3700893e3ab46b240e10bbd4f122b26674315cdcd3d090000008119", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) socket$inet6(0xa, 0x400000000001, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r3, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES64=r2], 0x78) 2m55.455569159s ago: executing program 1 (id=1295): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80401c1}, 0x400c005) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r1, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) 2m55.1075147s ago: executing program 1 (id=1300): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2ba, 0x0, &(0x7f0000000cc0)="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", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, 0x0) 2m54.790962043s ago: executing program 1 (id=1303): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg(r1, &(0x7f000000b640)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000000200)="0a0cbed687a805b6cdb05279ac658ba3f79c571164e84d1426cdeb5ae6af9b98df887583a0b697cf0d046f0fbc3e1d435ed3992276ca148018dfac9e24f120fd0a2833d325c48ddff092206552bf2a4686ae8589a243f3c2206e6c2a10fbd5ec454faaf00a21bd22e85e11ab46687e7144d4c185719a7b6e572a80553a11da5c1d0920e9ccbd0049a0204f612d3a303108e505a1955b662da0a3fc992225db3037a766277f6a2b9ced43ccaf700285cc1d1fdfa2f524ac5047a8004483a27504480df759a0d8d59b0f2ad717291a24f0dec269", 0xd3}, {&(0x7f0000000140)="7c2ca058cd778bcd7f6e4a8ac3a458067b4aa774d60e509632433f90207b68c4", 0x20}, {&(0x7f0000000440)="2cacc77e9bd1ce9e3f72ae85eb6e880645030451f5ed4313291cdcc1253834de243da5c6d25555d65723efaba5db88ec595f7aaa52af8f26c41c62e53708cbbfb948a5136182cf12ad70d6b1a41f0148d91f583e9347edb168a02d4dd6aee65c247638514faf470b35295ccfa0cd19bb694df6ca68c17b366acf7a4bc298c7def44f61bdc746c75683c974d0ebeb4e3d1983f6", 0x93}, {&(0x7f0000000500)="ebc419191e2f02155ff0816f306057441c8d56b00737df62040fcde1710b72000b9156c3439091439ec523029821932875afe93d92894f79d61da850ef4a3d8bef0b83bb3bd78b6d87be961c4604167fe50ac9f01c7a1f33108860af1018896f0a07a44f98024038de97c7e96482768e4ba573664d8df7a5a8ca6b2aa6e355f01da8f1f3f0f0bcf8104702e4d3e0977666b3df93f89438fa3e62b2dc014b623c3b24c832d1972c2142582120b4820f9ed48e6a3d4c72f290df939205559c6b2e824272033d822dbfab0174a76652fa6f3e28d6538c7c96af9d239dddf3a7e463478e451db4f4e7a7c334a66601a003acee7030e392a5cc4e", 0xf8}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="b1a201eb6ed35cbf98ec0671ca2f324b4bd625e1942b437c790b032f93ee5364f4132f1a3d5328c1e09f9f575d2f63d4f3dcdddd082de18b44c731c3fdf761eb7a7b174cff4d0f876aa0d35463f6f333c9ff0753f23320a5a14d47216d8755f62764200fd4a739af525e14f3186d22aa1d520bc757e45ee6b4dd4d43f63b2f7d910e099219e7388c5532385bcc015ef3c1ec37399d5f9e632e90f442577dcb1e05212a963cd84adbc4203f03adac7369ca60bfc97ed235b3e90438c63ef3cac2de053f228ed5e8b307f157cb4f232926a49306a977", 0xd5}, {&(0x7f0000002140)="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", 0xa87}], 0x8, &(0x7f0000000980)=[{0x20, 0x114, 0x2, "53d2c7d751589b9fb41ebe32c50f33"}, {0x38, 0x101, 0xe4, "086f2398bfa0912649514cce8b04c66da9776611eee2d0afdf4be10b9cde41f8fd9eb36ed2d05a"}], 0x58}}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2m54.36336914s ago: executing program 1 (id=1306): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80401c1}, 0x400c005) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) connect$l2tp(r0, &(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010101, 0x1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000faff8000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x31}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = open(0x0, 0x1431c2, 0x0) pwrite64(r9, 0x0, 0x0, 0x2600000fff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000099447740970401c07a67010203010902120001440000000904dc01000ec41d01"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x88) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000002c0)=0x10) fallocate(0xffffffffffffffff, 0x0, 0x800003d, 0x7ff) 2m50.925668216s ago: executing program 1 (id=1315): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fcdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c000300376e3f510da99e1d14"], 0x5c}, 0x1, 0x0, 0x0, 0x929c1f6559b1a90b}, 0x4004090) 2m34.996396594s ago: executing program 32 (id=1315): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fcdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c000300376e3f510da99e1d14"], 0x5c}, 0x1, 0x0, 0x0, 0x929c1f6559b1a90b}, 0x4004090) 29.40384012s ago: executing program 5 (id=1631): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) 21.253983275s ago: executing program 5 (id=1648): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x2, 0xffffffff00772d46, 0xfffc, 0x400, 0x200, 0x5, 0x0, 0x0, 0x12, 0x7fffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a000b0049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b", 0x71, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}, 0x1, 0x0, 0x0, 0x200080d5}, 0x4044010) 20.86100574s ago: executing program 2 (id=1653): openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) 17.933709702s ago: executing program 2 (id=1655): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x408, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 16.340442795s ago: executing program 0 (id=1663): r0 = getpid() mkdir(0x0, 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x84000, 0x0) 16.144781829s ago: executing program 0 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x2], [0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 12.876629918s ago: executing program 0 (id=1669): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff], 0x1) 12.74998674s ago: executing program 5 (id=1670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x32) 12.542111814s ago: executing program 0 (id=1671): socket(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 12.377218907s ago: executing program 4 (id=1672): unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x8, 0x10000, 0x22, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3ff, 0x7}}) semop(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 11.707611783s ago: executing program 4 (id=1673): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00004e1560254722cb"]) 11.662796045s ago: executing program 0 (id=1674): r0 = getpid() mkdir(0x0, 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x84000, 0x0) 11.640357679s ago: executing program 3 (id=1675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0x9, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x1, 0x4, 0xf8, 0x3, 0x68, 0x2, 0x7, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x10, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0x5, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x2, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 11.403576319s ago: executing program 5 (id=1676): openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) 9.434039427s ago: executing program 0 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="100100003bba7618", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf25080000001c000380060007004e240000060007004e23000005000800020000001400018006000100020000000800090047000000080005000104000008000500030000005800028006000b0002000000080003000100000014000100ac1e0101000000000000000000000000080009000600000006000e004e2200000800030003000000080003000000000006000e004e24000008000900000400003400038008000300020000000800030003000000080005000a010100080003000000000008000500e000000108000300040000001400028006000e004e24000008000900ff0100001c00018008000b007369700008000800000001000800090017000000"], 0x110}, 0x1, 0x0, 0x0, 0x15}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {r2}, 0xfffffffc, 0x80000001}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) 9.433353117s ago: executing program 5 (id=1678): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) 9.173723928s ago: executing program 3 (id=1679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x2], [0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 8.874284328s ago: executing program 2 (id=1680): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7545, 0x20, 0x0, 0x0, 0x0) 7.615835632s ago: executing program 2 (id=1681): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) socket$inet6(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0xfdef) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) 6.586163955s ago: executing program 4 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c0002800800"], 0x7c}}, 0x0) 6.054465906s ago: executing program 4 (id=1683): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0) 6.026313632s ago: executing program 3 (id=1684): socket(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.252432075s ago: executing program 3 (id=1685): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r4 = dup(r3) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x14004004) 5.152534111s ago: executing program 5 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x32) 5.105989111s ago: executing program 4 (id=1687): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80401c1}, 0x400c005) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) connect$l2tp(r0, &(0x7f00000006c0)={0x2, 0x0, @rand_addr=0x64010101, 0x1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000099447740970401c07a67010203010902120001440000000904dc01000ec41d01"], 0x0) 5.104746259s ago: executing program 2 (id=1688): openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@local, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) getpid() 3.812769526s ago: executing program 3 (id=1689): openat$vsock(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20) 2.153317161s ago: executing program 2 (id=1690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0x9, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x1, 0x4, 0xf8, 0x3, 0x68, 0x2, 0x7, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x10, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0x5, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x2, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 196.302476ms ago: executing program 3 (id=1691): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000100)={0x1, 0x1, 0x8001, 0xfff, r0}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) r5 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf32(r5, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x8, 0xa6, 0x9, 0x2, 0x6, 0x357, 0x3e5, 0x38, 0x2ec, 0x9, 0x3, 0x20, 0x3, 0x101, 0xa0, 0x4}, [{0x1, 0x9, 0x0, 0x4, 0xfffffffe, 0x5, 0x2a, 0x4}, {0x5, 0xbd9, 0x4, 0x8001, 0x8, 0x100, 0x9, 0x7cf}, {0x5, 0xf, 0xea7, 0x8, 0x40, 0x9cd8, 0x7, 0x5}], "7e5db4cf949f4f8009a93f0dbb47fbeee6820c41218c5bf3cc34b9bee011d602ea8a8cdd46ac5a9a1643700e17bd8b7b5549df0dbf8fd693d2e9025b2c0bc4af457d5ff44eacb82ead05682e058bca43d2d8737a37e185bd5cd117d6e3e6f3f59c1e08097b1b3f3657c75957d6c1a41fe36354a2bfb3cc635cc1602872931c483d638346b689e0d2658252884a15e49c2028f173f91d86257dd723daf8e04e18d07827ea400a6342ded409bc"}, 0x144) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r6, 0x0, 0x880) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000300)={{0x2b, @local, 0x4e24, 0x2, 'ovf\x00', 0x28, 0xcc2, 0x1d}, {@empty, 0x3, 0x1, 0x6e, 0x7, 0xa3}}, 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts. [ 88.828769][ T5785] cgroup: Unknown subsys name 'net' [ 89.080599][ T5785] cgroup: Unknown subsys name 'cpuset' [ 89.135637][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.103246][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.998668][ T809] cfg80211: failed to load regulatory.db [ 93.545076][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.548793][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.550778][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.551557][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.578893][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.588858][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.597483][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.597825][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.599233][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.603187][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.662346][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.682580][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.692380][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.693836][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.708975][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.743586][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.747360][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.757124][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.758933][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.763793][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.790687][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.791430][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.805839][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.820499][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.828479][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.729966][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 94.747056][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 94.764920][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 94.809126][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 94.914220][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 95.219686][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.220649][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.221049][ T5798] bridge_slave_0: entered allmulticast mode [ 95.223019][ T5798] bridge_slave_0: entered promiscuous mode [ 95.234576][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.234712][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.234954][ T5799] bridge_slave_0: entered allmulticast mode [ 95.273607][ T5799] bridge_slave_0: entered promiscuous mode [ 95.307052][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.307179][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.307353][ T5803] bridge_slave_0: entered allmulticast mode [ 95.309514][ T5803] bridge_slave_0: entered promiscuous mode [ 95.311439][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.311565][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.311732][ T5798] bridge_slave_1: entered allmulticast mode [ 95.313740][ T5798] bridge_slave_1: entered promiscuous mode [ 95.368506][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.368606][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.368935][ T5799] bridge_slave_1: entered allmulticast mode [ 95.370708][ T5799] bridge_slave_1: entered promiscuous mode [ 95.417147][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.417298][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.417496][ T5804] bridge_slave_0: entered allmulticast mode [ 95.419786][ T5804] bridge_slave_0: entered promiscuous mode [ 95.421747][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.421883][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.422049][ T5803] bridge_slave_1: entered allmulticast mode [ 95.424110][ T5803] bridge_slave_1: entered promiscuous mode [ 95.507330][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.507479][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.507657][ T5804] bridge_slave_1: entered allmulticast mode [ 95.509664][ T5804] bridge_slave_1: entered promiscuous mode [ 95.574274][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.574536][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.574909][ T5807] bridge_slave_0: entered allmulticast mode [ 95.576693][ T5807] bridge_slave_0: entered promiscuous mode [ 95.638514][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.641716][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.642063][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.642190][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.642363][ T5807] bridge_slave_1: entered allmulticast mode [ 95.646009][ T5807] bridge_slave_1: entered promiscuous mode [ 95.676886][ T61] Bluetooth: hci0: command tx timeout [ 95.703493][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.713195][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.727451][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.754967][ T61] Bluetooth: hci1: command tx timeout [ 95.755091][ T61] Bluetooth: hci2: command tx timeout [ 95.755446][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.791568][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.829890][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.835812][ T5117] Bluetooth: hci3: command tx timeout [ 95.890508][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.915976][ T5117] Bluetooth: hci4: command tx timeout [ 95.916293][ T5798] team0: Port device team_slave_0 added [ 95.940927][ T5799] team0: Port device team_slave_0 added [ 95.944219][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.978682][ T5798] team0: Port device team_slave_1 added [ 95.980760][ T5803] team0: Port device team_slave_0 added [ 95.982930][ T5799] team0: Port device team_slave_1 added [ 96.022782][ T5804] team0: Port device team_slave_0 added [ 96.046855][ T5803] team0: Port device team_slave_1 added [ 96.066482][ T5804] team0: Port device team_slave_1 added [ 96.141634][ T5807] team0: Port device team_slave_0 added [ 96.142985][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.143002][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.143037][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.199254][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.199272][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.199301][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.250369][ T5807] team0: Port device team_slave_1 added [ 96.251201][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.251212][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.251232][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.252340][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.252350][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.252369][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.253893][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.253911][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.253931][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.259330][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.259370][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.259436][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.365386][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.365429][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.365502][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.368792][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.368824][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.368883][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.505026][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.505077][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.505151][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.562170][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.562230][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.562304][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.052767][ T5798] hsr_slave_0: entered promiscuous mode [ 97.054013][ T5798] hsr_slave_1: entered promiscuous mode [ 97.114710][ T5803] hsr_slave_0: entered promiscuous mode [ 97.116070][ T5803] hsr_slave_1: entered promiscuous mode [ 97.117115][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 97.117237][ T5803] Cannot create hsr debugfs directory [ 97.166058][ T5804] hsr_slave_0: entered promiscuous mode [ 97.167031][ T5804] hsr_slave_1: entered promiscuous mode [ 97.167831][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 97.167849][ T5804] Cannot create hsr debugfs directory [ 97.211105][ T5799] hsr_slave_0: entered promiscuous mode [ 97.212114][ T5799] hsr_slave_1: entered promiscuous mode [ 97.212794][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 97.212811][ T5799] Cannot create hsr debugfs directory [ 97.289042][ T5807] hsr_slave_0: entered promiscuous mode [ 97.290038][ T5807] hsr_slave_1: entered promiscuous mode [ 97.290738][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 97.290756][ T5807] Cannot create hsr debugfs directory [ 97.756173][ T5117] Bluetooth: hci0: command tx timeout [ 97.834483][ T5117] Bluetooth: hci2: command tx timeout [ 97.834519][ T5117] Bluetooth: hci1: command tx timeout [ 97.914476][ T61] Bluetooth: hci3: command tx timeout [ 97.995048][ T61] Bluetooth: hci4: command tx timeout [ 98.190009][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.220775][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.251173][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.292140][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.423485][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.451199][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.489519][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.549696][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.678581][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.723592][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.771373][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.816764][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.952293][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.994683][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.065924][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.105321][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.249362][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.285403][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.333528][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.350896][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.396210][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.497770][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.547411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.548188][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.583919][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.603615][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.603711][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.686275][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.710567][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.738588][ T2376] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.738747][ T2376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.780857][ T2376] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.781029][ T2376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.830761][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.836549][ T61] Bluetooth: hci0: command tx timeout [ 99.867929][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.902412][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.902563][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.924403][ T5117] Bluetooth: hci2: command tx timeout [ 99.924485][ T61] Bluetooth: hci1: command tx timeout [ 99.982287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.982694][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.994619][ T61] Bluetooth: hci3: command tx timeout [ 100.059001][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.061824][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.079091][ T61] Bluetooth: hci4: command tx timeout [ 100.122159][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.122383][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.191717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.192596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.232754][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.291255][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.291516][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.349556][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.350418][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.534165][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.799196][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.866478][ T5798] veth0_vlan: entered promiscuous mode [ 100.898060][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.942442][ T5798] veth1_vlan: entered promiscuous mode [ 101.115626][ T5803] veth0_vlan: entered promiscuous mode [ 101.138839][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.152449][ T5798] veth0_macvtap: entered promiscuous mode [ 101.182984][ T5798] veth1_macvtap: entered promiscuous mode [ 101.198174][ T5803] veth1_vlan: entered promiscuous mode [ 101.210204][ T5804] veth0_vlan: entered promiscuous mode [ 101.270208][ T5804] veth1_vlan: entered promiscuous mode [ 101.301698][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.332525][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.349515][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.423428][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.440998][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.448058][ T5803] veth0_macvtap: entered promiscuous mode [ 101.459405][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486259][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.498326][ T5803] veth1_macvtap: entered promiscuous mode [ 101.636863][ T5804] veth0_macvtap: entered promiscuous mode [ 101.708451][ T5804] veth1_macvtap: entered promiscuous mode [ 101.730404][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.773712][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.813995][ T5807] veth0_vlan: entered promiscuous mode [ 101.855819][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.888780][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.893000][ T2376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.893022][ T2376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.918190][ T61] Bluetooth: hci0: command tx timeout [ 101.931777][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.941731][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.973209][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.995198][ T61] Bluetooth: hci1: command tx timeout [ 101.995232][ T61] Bluetooth: hci2: command tx timeout [ 101.995927][ T5807] veth1_vlan: entered promiscuous mode [ 102.000107][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.074632][ T5117] Bluetooth: hci3: command tx timeout [ 102.103564][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.115206][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.115851][ T5799] veth0_vlan: entered promiscuous mode [ 102.117577][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.117595][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.118927][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.154453][ T5117] Bluetooth: hci4: command tx timeout [ 102.200642][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.305999][ T5799] veth1_vlan: entered promiscuous mode [ 102.427118][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.427142][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.551529][ T5807] veth0_macvtap: entered promiscuous mode [ 102.618511][ T5807] veth1_macvtap: entered promiscuous mode [ 102.632540][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 102.660636][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.660659][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.796442][ T5799] veth0_macvtap: entered promiscuous mode [ 102.798401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.798422][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.838516][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.861250][ T5799] veth1_macvtap: entered promiscuous mode [ 102.887335][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.941850][ T5914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.989907][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.989930][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.024174][ T1504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.038153][ T1504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.041241][ T1504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.062600][ T1504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.107595][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.223538][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.380504][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.391298][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.412679][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.429080][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.755779][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 103.755971][ T5923] netlink: 'syz.0.8': attribute type 7 has an invalid length. [ 103.755987][ T5923] netlink: 'syz.0.8': attribute type 8 has an invalid length. [ 103.756000][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 104.231775][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.231798][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.442179][ T5933] Zero length message leads to an empty skb [ 104.488212][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.488236][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.620409][ T5935] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 104.669002][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.669024][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.846877][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.846901][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.325704][ T5944] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 105.343477][ T5946] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17'. [ 105.343546][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 105.636532][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19'. [ 105.728877][ T5953] tipc: Started in network mode [ 105.728913][ T5953] tipc: Node identity ce411d3e6699, cluster identity 4711 [ 105.729461][ T5953] tipc: Enabled bearer , priority 0 [ 106.103264][ T5953] tipc: Resetting bearer [ 106.141085][ T5964] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 106.141110][ T5964] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20'. [ 106.377732][ T5943] tipc: Disabling bearer [ 106.452441][ T5978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21'. [ 106.670247][ T5967] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 106.761392][ T5967] bond1 (unregistering): Released all slaves [ 107.746471][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 108.354442][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.39'. [ 108.489472][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 108.489518][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 108.563247][ T6019] gretap0: entered promiscuous mode [ 108.646227][ T6019] gretap0: left promiscuous mode [ 109.420994][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 109.761587][ T6052] netlink: 156 bytes leftover after parsing attributes in process `syz.3.54'. [ 110.278030][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 110.315339][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.398548][ T6069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.550083][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 110.835957][ T6067] bond0: (slave bond_slave_0): Releasing backup interface [ 110.912548][ T6090] netlink: 156 bytes leftover after parsing attributes in process `syz.0.68'. [ 111.027380][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 111.161425][ T6077] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 111.474617][ T6106] netlink: 'syz.1.75': attribute type 7 has an invalid length. [ 111.474650][ T6106] netlink: 'syz.1.75': attribute type 8 has an invalid length. [ 111.702140][ T6112] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 112.121957][ T6127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.231508][ T6131] openvswitch: netlink: Flow key attr not present in new flow. [ 112.793791][ T6150] __nla_validate_parse: 6 callbacks suppressed [ 112.793813][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 112.793842][ T6150] netlink: 'syz.2.95': attribute type 7 has an invalid length. [ 112.793856][ T6150] netlink: 'syz.2.95': attribute type 8 has an invalid length. [ 112.793869][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 113.082160][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 113.082186][ T6160] openvswitch: netlink: Flow key attr not present in new flow. [ 113.106659][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 113.422820][ T6169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.732047][ T6178] netlink: 156 bytes leftover after parsing attributes in process `syz.2.107'. [ 113.822136][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 113.822177][ T6182] netlink: 'syz.2.109': attribute type 7 has an invalid length. [ 113.822191][ T6182] netlink: 'syz.2.109': attribute type 8 has an invalid length. [ 113.822214][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 114.110886][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'. [ 114.110913][ T6191] openvswitch: netlink: Flow actions attr not present in new flow. [ 114.386193][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.117'. [ 114.419059][ T6204] netlink: 156 bytes leftover after parsing attributes in process `syz.2.119'. [ 114.745269][ T6213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.807403][ T6217] netlink: 'syz.2.125': attribute type 7 has an invalid length. [ 114.807425][ T6217] netlink: 'syz.2.125': attribute type 8 has an invalid length. [ 115.127957][ T6228] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.965887][ T6259] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.653977][ T6282] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.957045][ T6298] __nla_validate_parse: 7 callbacks suppressed [ 117.957098][ T6298] netlink: 156 bytes leftover after parsing attributes in process `syz.4.160'. [ 121.349529][ T6312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.659348][ T6319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 124.843150][ T6263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.130413][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.184325][ T6324] bond0: (slave rose0): Enslaving as an active interface with an up link [ 125.253767][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.169'. [ 125.750596][ T6347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.171'. [ 126.646966][ T6383] netlink: 256 bytes leftover after parsing attributes in process `syz.0.183'. [ 126.646993][ T6383] netlink: 56 bytes leftover after parsing attributes in process `syz.0.183'. [ 126.805753][ T6389] netlink: 136 bytes leftover after parsing attributes in process `syz.3.185'. [ 127.360634][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.395054][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.648927][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 128.182717][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.208909][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.204136][ T161] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.229537][ T161] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.229650][ T161] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.229693][ T161] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.453640][ T6445] netlink: 136 bytes leftover after parsing attributes in process `syz.2.196'. [ 130.291694][ T6413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.578547][ T6477] netlink: 136 bytes leftover after parsing attributes in process `syz.0.211'. [ 132.436920][ T6538] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 132.500075][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 132.656572][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.677125][ T6544] veth0_to_batadv: entered allmulticast mode [ 132.796371][ T6548] bond1: (slave dummy0): making interface the new active one [ 132.798014][ T6548] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 133.555455][ T6586] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 133.639970][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.711784][ T6586] bond1: (slave dummy0): making interface the new active one [ 133.739604][ T6586] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 133.904116][ T6597] tipc: Started in network mode [ 133.904150][ T6597] tipc: Node identity 0e610a397e02, cluster identity 4711 [ 133.919348][ T6597] tipc: Enabled bearer , priority 0 [ 133.920667][ T6597] syzkaller0: entered promiscuous mode [ 133.920691][ T6597] syzkaller0: entered allmulticast mode [ 134.094629][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'. [ 134.125559][ T6604] tipc: Resetting bearer [ 134.325755][ T6610] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 134.826470][ T6596] tipc: Resetting bearer [ 135.226425][ T6596] tipc: Disabling bearer [ 135.327347][ T6642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.283'. [ 135.398120][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.398157][ T6647] netlink: 'syz.4.288': attribute type 7 has an invalid length. [ 135.398171][ T6647] netlink: 'syz.4.288': attribute type 8 has an invalid length. [ 135.398184][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 135.442375][ T808] tipc: Node number set to 1885538873 [ 136.128716][ T6671] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 136.415126][ T6678] tipc: Started in network mode [ 136.415157][ T6678] tipc: Node identity 8e053ab2471c, cluster identity 4711 [ 136.415341][ T6678] tipc: Enabled bearer , priority 0 [ 136.416587][ T6678] syzkaller0: entered promiscuous mode [ 136.416608][ T6678] syzkaller0: entered allmulticast mode [ 136.498120][ T6675] tipc: Resetting bearer [ 136.663407][ T6675] tipc: Disabling bearer [ 137.341007][ T6709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.775648][ T6715] tipc: Started in network mode [ 137.775682][ T6715] tipc: Node identity 8a1883bc7d6f, cluster identity 4711 [ 137.775881][ T6715] tipc: Enabled bearer , priority 0 [ 137.776848][ T6715] syzkaller0: entered promiscuous mode [ 137.776872][ T6715] syzkaller0: entered allmulticast mode [ 137.834796][ T6722] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 137.884960][ T6714] tipc: Resetting bearer [ 138.103053][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.103149][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.170596][ T6714] tipc: Disabling bearer [ 138.358334][ T6728] syzkaller0: entered promiscuous mode [ 138.358362][ T6728] syzkaller0: entered allmulticast mode [ 138.380063][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 138.380099][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 139.219149][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.372253][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 139.452029][ T6777] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 140.180463][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.228687][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 140.666634][ T6822] tipc: Enabled bearer , priority 0 [ 140.667477][ T6822] syzkaller0: entered promiscuous mode [ 140.667501][ T6822] syzkaller0: entered allmulticast mode [ 141.274323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.462445][ T6822] tipc: Resetting bearer [ 141.538222][ T6820] tipc: Resetting bearer [ 141.777743][ T6820] tipc: Disabling bearer [ 141.977840][ T10] tipc: Node number set to 3373873842 [ 142.147615][ T6853] tipc: Enabled bearer , priority 0 [ 142.149907][ T6853] syzkaller0: entered promiscuous mode [ 142.149932][ T6853] syzkaller0: entered allmulticast mode [ 142.567594][ T6851] tipc: Resetting bearer [ 142.706908][ T6851] tipc: Disabling bearer [ 143.458241][ T6907] syzkaller0: entered promiscuous mode [ 143.458268][ T6907] syzkaller0: entered allmulticast mode [ 143.522523][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 143.522560][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 143.919805][ T6925] syzkaller0: entered promiscuous mode [ 143.919834][ T6925] syzkaller0: entered allmulticast mode [ 145.302380][ T6863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.604749][ T7028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 147.670605][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 147.670751][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 148.172824][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 148.172861][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 148.638772][ T7064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 150.455094][ T7077] syzkaller0: entered promiscuous mode [ 150.455123][ T7077] syzkaller0: entered allmulticast mode [ 150.700445][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.457'. [ 150.700488][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.457'. [ 151.095695][ T7110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 151.684318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.484759][ T7136] tipc: Enabled bearer , priority 0 [ 152.485726][ T7136] syzkaller0: entered promiscuous mode [ 152.485751][ T7136] syzkaller0: entered allmulticast mode [ 152.751427][ T7135] tipc: Resetting bearer [ 152.844181][ T7149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 153.065815][ T7135] tipc: Disabling bearer [ 153.884328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.014319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.104351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.264333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.294329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.414340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.544319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.516955][ T7196] tipc: Enabled bearer , priority 0 [ 156.517790][ T7196] syzkaller0: entered promiscuous mode [ 156.517812][ T7196] syzkaller0: entered allmulticast mode [ 156.674768][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 156.899162][ T10] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 156.899198][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 156.899226][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 156.899369][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.933631][ T7194] tipc: Resetting bearer [ 156.937248][ T7204] capability: warning: `syz.4.493' uses 32-bit capabilities (legacy support in use) [ 156.974896][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.974930][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.974951][ T10] usb 3-1: Product: syz [ 156.974965][ T10] usb 3-1: Manufacturer: syz [ 156.974980][ T10] usb 3-1: SerialNumber: syz [ 157.021833][ T10] usb 3-1: config 0 descriptor?? [ 157.041955][ T7187] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.091964][ T10] usb 3-1: selecting invalid altsetting 0 [ 157.304575][ T7187] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 157.347843][ T7194] tipc: Disabling bearer [ 157.414656][ T31] usb 3-1: USB disconnect, device number 2 [ 157.604669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 157.647201][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 158.574707][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 159.508439][ T7252] tipc: Enabled bearer , priority 0 [ 159.509323][ T7252] syzkaller0: entered promiscuous mode [ 159.509345][ T7252] syzkaller0: entered allmulticast mode [ 160.556237][ T7251] tipc: Resetting bearer [ 160.563139][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 160.675758][ T7269] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 160.739316][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 160.779505][ T7251] tipc: Disabling bearer [ 161.039763][ T7269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.041112][ T5787] tipc: Node number set to 4151804860 [ 161.041899][ T7272] lo: entered allmulticast mode [ 161.100898][ T7274] bond1: (slave dummy0): Releasing active interface [ 161.163633][ T7274] bond2: (slave dummy0): making interface the new active one [ 161.206740][ T7274] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 161.338498][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.523'. [ 162.015935][ T7310] tipc: Enabled bearer , priority 0 [ 162.016806][ T7310] syzkaller0: entered promiscuous mode [ 162.016830][ T7310] syzkaller0: entered allmulticast mode [ 162.147967][ T7318] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 162.206765][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 162.336174][ T7318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.391370][ T7308] tipc: Resetting bearer [ 162.539261][ T7308] tipc: Disabling bearer [ 162.690788][ T7320] bond1: (slave dummy0): making interface the new active one [ 162.693807][ T7320] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 162.970452][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 164.574160][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 164.906700][ T7370] tipc: Enabled bearer , priority 0 [ 165.220291][ T7383] netlink: 84 bytes leftover after parsing attributes in process `syz.0.560'. [ 165.238226][ T7364] tipc: Disabling bearer [ 165.407683][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 166.905594][ T7397] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 166.905627][ T7397] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 168.677890][ T7411] program syz.3.570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.829002][ T7419] netlink: 84 bytes leftover after parsing attributes in process `syz.3.574'. [ 168.985850][ T7408] tipc: Enabled bearer , priority 0 [ 168.988920][ T7413] syzkaller0: entered promiscuous mode [ 168.988947][ T7413] syzkaller0: entered allmulticast mode [ 169.091061][ T7408] tipc: Resetting bearer [ 169.152359][ T7406] tipc: Resetting bearer [ 169.326117][ T7406] tipc: Disabling bearer [ 171.432476][ T7456] bridge: RTM_NEWNEIGH with invalid ether address [ 171.433147][ T7460] bridge: RTM_NEWNEIGH with invalid ether address [ 172.395684][ T7477] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 174.114888][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 174.210274][ T7527] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.438331][ T5117] Bluetooth: hci3: link tx timeout [ 174.438609][ T5117] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.572086][ T61] Bluetooth: hci3: link tx timeout [ 174.572110][ T61] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.607439][ T61] Bluetooth: hci3: link tx timeout [ 174.607461][ T61] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.667739][ T61] Bluetooth: hci3: link tx timeout [ 174.667759][ T61] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.902438][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 175.078488][ T61] Bluetooth: hci3: link tx timeout [ 175.080636][ T61] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.077116][ T61] Bluetooth: hci3: command 0x0405 tx timeout [ 177.341874][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 177.402136][ T7573] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.764679][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 177.875355][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'. [ 178.008584][ T7591] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 178.008616][ T7591] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 178.178864][ T7598] program syz.4.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.972041][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.648'. [ 181.762945][ T7628] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 181.762978][ T7628] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 181.924201][ T7630] bond0: (slave bond_slave_1): Releasing backup interface [ 185.866330][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'. [ 185.866364][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'. [ 186.043502][ T7654] tipc: Enabled bearer , priority 0 [ 186.059597][ T7654] syzkaller0: entered promiscuous mode [ 186.059624][ T7654] syzkaller0: entered allmulticast mode [ 186.088660][ T7654] tipc: Resetting bearer [ 186.175527][ T7653] tipc: Resetting bearer [ 186.699799][ T7653] tipc: Disabling bearer [ 186.981474][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 188.799700][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 188.799740][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 189.027237][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'. [ 189.154412][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.315799][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 189.320404][ T5881] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 189.320470][ T5881] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.320494][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.320521][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.320545][ T5881] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.320588][ T5881] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.320613][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.694971][ T5881] usb 1-1: usb_control_msg returned -32 [ 189.695024][ T5881] usbtmc 1-1:16.0: can't read capabilities [ 189.814448][ T5882] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.646074][ T7734] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 190.648497][ T7734] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 192.087605][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 192.106449][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.106485][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.106508][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 192.106607][ T5882] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 192.106632][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.165461][ T7735] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 192.207616][ T6024] usb 1-1: USB disconnect, device number 2 [ 192.276489][ T5882] usb 3-1: config 0 descriptor?? [ 192.534461][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 192.534683][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 192.641894][ T5882] usb 3-1: USB disconnect, device number 3 [ 193.163051][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'. [ 193.574115][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 193.574155][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 194.565246][ T7768] tipc: Enabled bearer , priority 0 [ 194.566397][ T7779] syzkaller0: entered promiscuous mode [ 194.566422][ T7779] syzkaller0: entered allmulticast mode [ 194.602823][ T7782] tipc: Resetting bearer [ 194.688677][ T7767] tipc: Resetting bearer [ 195.595413][ T7767] tipc: Disabling bearer [ 196.978421][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'. [ 197.257836][ T7820] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 197.350938][ T7820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.416800][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 197.462025][ T7820] bond3: entered allmulticast mode [ 199.631091][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.632447][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.099031][ T7861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 200.510378][ T7872] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 200.597848][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'. [ 200.650764][ T7872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.762960][ T7876] bond1: entered allmulticast mode [ 202.241618][ T7897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 202.293779][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'. [ 203.538393][ T7918] netlink: 128 bytes leftover after parsing attributes in process `syz.1.734'. [ 203.538455][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 203.572784][ T7919] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 203.657423][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 205.698816][ T7919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.758971][ T7939] 9p: Bad value for 'wfdno' [ 206.030424][ T7922] bond2: entered allmulticast mode [ 206.105374][ T7926] bond1: (slave dummy0): Releasing active interface [ 206.533506][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.745'. [ 206.749495][ T7959] netlink: 212 bytes leftover after parsing attributes in process `syz.1.748'. [ 206.774981][ T7957] netlink: 128 bytes leftover after parsing attributes in process `syz.3.747'. [ 206.775049][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 207.006832][ T7967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 208.034558][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 208.034598][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 208.197873][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 208.684702][ T7989] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.757742][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 208.789771][ T7984] gtp0: entered promiscuous mode [ 208.980194][ T7993] netlink: 128 bytes leftover after parsing attributes in process `syz.2.762'. [ 208.980278][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 209.211076][ T8001] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 210.778194][ T8001] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 211.142750][ T8025] gtp0: entered promiscuous mode [ 211.185920][ T8025] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.255100][ T37] audit: type=1800 audit(1770508839.872:2): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.790" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 214.608985][ T8072] gtp0: entered promiscuous mode [ 214.635484][ T8076] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.832332][ T8081] tipc: Enabled bearer , priority 0 [ 214.833208][ T8081] syzkaller0: entered promiscuous mode [ 214.833234][ T8081] syzkaller0: entered allmulticast mode [ 214.894731][ T8081] tipc: Resetting bearer [ 214.934835][ T8080] tipc: Resetting bearer [ 215.115666][ T8080] tipc: Disabling bearer [ 215.347364][ T8092] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 215.444704][ T8094] __nla_validate_parse: 3 callbacks suppressed [ 215.444727][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 215.506229][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 215.564087][ T8092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.618287][ T8094] bond2: entered allmulticast mode [ 215.713119][ T8101] fuse: root generation should be zero [ 216.679612][ T8131] tipc: Started in network mode [ 216.679644][ T8131] tipc: Node identity ce22d8eac2a3, cluster identity 4711 [ 216.679846][ T8131] tipc: Enabled bearer , priority 0 [ 216.680710][ T8131] syzkaller0: entered promiscuous mode [ 216.680733][ T8131] syzkaller0: entered allmulticast mode [ 216.749132][ T8131] tipc: Resetting bearer [ 216.751973][ T8137] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 216.837626][ T8144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 216.938745][ T8146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 216.954402][ T8084] Bluetooth: hci2: command 0x0406 tx timeout [ 216.954752][ T8084] Bluetooth: hci0: command 0x0406 tx timeout [ 216.954843][ T8084] Bluetooth: hci1: command 0x0406 tx timeout [ 216.954930][ T8084] Bluetooth: hci4: command 0x0406 tx timeout [ 217.055270][ T8137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.158433][ T8130] tipc: Resetting bearer [ 217.214211][ T8151] netlink: 52 bytes leftover after parsing attributes in process `syz.1.818'. [ 217.306868][ T8130] tipc: Disabling bearer [ 217.496482][ T8144] bond4: entered allmulticast mode [ 217.867487][ T8169] gtp0: entered promiscuous mode [ 217.937990][ T8169] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.004711][ T8173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.827'. [ 218.717263][ T8193] program syz.4.834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.840797][ T8197] tipc: Enabled bearer , priority 0 [ 218.841728][ T8197] syzkaller0: entered promiscuous mode [ 218.841752][ T8197] syzkaller0: entered allmulticast mode [ 218.872100][ T8197] tipc: Resetting bearer [ 218.972409][ T8196] tipc: Resetting bearer [ 219.195304][ T8196] tipc: Disabling bearer [ 219.793284][ T8228] program syz.4.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.887485][ T8230] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 219.887645][ T8230] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 219.893886][ T8230] fuse: Bad value for 'fd' [ 220.200229][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 220.200269][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 220.358265][ T8238] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 221.253865][ T8249] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 221.254212][ T8249] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 222.511108][ T8255] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.885116][ T8253] gtp0: entered promiscuous mode [ 222.955628][ T8256] tipc: Enabled bearer , priority 0 [ 222.956343][ T8257] syzkaller0: entered promiscuous mode [ 222.956368][ T8257] syzkaller0: entered allmulticast mode [ 223.074605][ T8251] tipc: Resetting bearer [ 223.148501][ T8267] program syz.3.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.297581][ T8251] tipc: Disabling bearer [ 225.134785][ T8296] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 225.134807][ T8296] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 225.754469][ T5787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 226.680412][ T8301] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 226.680694][ T8301] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 227.702299][ T5787] usb 2-1: device descriptor read/64, error -71 [ 228.258944][ T8314] program syz.0.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.570801][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.873'. [ 232.564837][ T8342] tipc: Enabled bearer , priority 0 [ 232.587453][ T8342] syzkaller0: entered promiscuous mode [ 232.587480][ T8342] syzkaller0: entered allmulticast mode [ 233.507754][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.707594][ T8346] tipc: Resetting bearer [ 233.754370][ T5881] usb 2-1: device descriptor read/64, error -71 [ 233.821177][ T8345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.866'. [ 233.875071][ T8339] tipc: Resetting bearer [ 234.617008][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 235.164821][ T8358] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 235.164843][ T8358] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 235.845014][ T8339] tipc: Disabling bearer [ 240.020674][ T5805] Bluetooth: hci3: link tx timeout [ 240.020697][ T5805] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.204479][ T5809] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 242.084274][ T5809] Bluetooth: hci3: command 0x0405 tx timeout [ 247.364402][ T5805] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 250.482183][ T8492] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 250.482504][ T8492] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 251.980919][ T5805] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 255.609670][ T5805] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 259.420220][ T5805] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 261.682666][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.682769][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.674365][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 262.825317][ T31] usb 4-1: no configurations [ 262.825338][ T31] usb 4-1: can't read configurations, error -22 [ 263.014379][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 263.168413][ T31] usb 4-1: no configurations [ 263.168437][ T31] usb 4-1: can't read configurations, error -22 [ 263.173262][ T31] usb usb4-port1: attempt power cycle [ 265.084500][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 265.105930][ T31] usb 4-1: no configurations [ 265.105950][ T31] usb 4-1: can't read configurations, error -22 [ 265.234390][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 265.272168][ T31] usb 4-1: no configurations [ 265.272191][ T31] usb 4-1: can't read configurations, error -22 [ 265.309278][ T31] usb usb4-port1: unable to enumerate USB device [ 266.163420][ T8704] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 266.187507][ T8704] tipc: Enabled bearer , priority 10 [ 266.938388][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 267.106299][ T31] usb 1-1: no configurations [ 267.106320][ T31] usb 1-1: can't read configurations, error -22 [ 267.284761][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.875694][ T31] usb 1-1: no configurations [ 267.875976][ T31] usb 1-1: can't read configurations, error -22 [ 268.004545][ T31] usb usb1-port1: attempt power cycle [ 268.394385][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 268.419627][ T31] usb 1-1: no configurations [ 268.419648][ T31] usb 1-1: can't read configurations, error -22 [ 268.547210][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 268.568207][ T31] usb 1-1: no configurations [ 268.568231][ T31] usb 1-1: can't read configurations, error -22 [ 268.571011][ T31] usb usb1-port1: unable to enumerate USB device [ 272.404008][ T8814] syzkaller0: entered promiscuous mode [ 272.404036][ T8814] syzkaller0: entered allmulticast mode [ 272.767648][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 272.938966][ T5881] usb 5-1: no configurations [ 272.938997][ T5881] usb 5-1: can't read configurations, error -22 [ 273.084943][ T5881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 273.266827][ T5881] usb 5-1: no configurations [ 273.266850][ T5881] usb 5-1: can't read configurations, error -22 [ 273.267247][ T5881] usb usb5-port1: attempt power cycle [ 275.517117][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 275.999671][ T5881] usb 5-1: device descriptor read/8, error -71 [ 279.666925][ T5881] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 280.218433][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.218462][ T5881] usb 5-1: config 0 has no interfaces? [ 280.223686][ T5881] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 280.223721][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.223742][ T5881] usb 5-1: Product: syz [ 280.223758][ T5881] usb 5-1: Manufacturer: syz [ 280.223773][ T5881] usb 5-1: SerialNumber: syz [ 280.361341][ T5881] usb 5-1: config 0 descriptor?? [ 280.957477][ T5881] usb 5-1: USB disconnect, device number 6 [ 281.013064][ T8902] random: crng reseeded on system resumption [ 284.050931][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 286.927405][ T8937] syzkaller0: entered promiscuous mode [ 286.927432][ T8937] syzkaller0: entered allmulticast mode [ 288.004639][ T5805] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 289.485676][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 293.435438][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1071'. [ 294.516367][ T5805] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 296.275062][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1087'. [ 299.019862][ T9072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1100'. [ 299.022876][ T9072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1100'. [ 299.055206][ T9072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1100'. [ 299.379369][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 305.360186][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 305.896419][ T9125] 9p: Bad value for 'wfdno' [ 306.596162][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 306.731157][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 306.991657][ T9151] 9p: Bad value for 'wfdno' [ 307.631723][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 307.843390][ T9183] 9p: Bad value for 'wfdno' [ 308.085127][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 308.494017][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 308.543437][ T9213] 9p: Bad value for 'rfdno' [ 308.731728][ T9217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1163'. [ 309.094107][ T9230] tipc: Enabling of bearer rejected, already enabled [ 309.296909][ T9241] 9p: Bad value for 'rfdno' [ 309.334125][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 309.654955][ T9252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1179'. [ 310.330843][ T9282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1194'. [ 310.504471][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 310.657765][ T31] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 310.657795][ T31] usb 5-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 310.687796][ T31] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 310.687829][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.687859][ T31] usb 5-1: Product: syz [ 310.687879][ T31] usb 5-1: Manufacturer: syz [ 310.687889][ T31] usb 5-1: SerialNumber: syz [ 310.948722][ T5787] usb 5-1: USB disconnect, device number 7 [ 311.175007][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 311.324376][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 311.327638][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.327672][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.327716][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 311.327733][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.332067][ T31] usb 3-1: config 0 descriptor?? [ 311.393449][ T31] hub 3-1:0.0: USB hub found [ 311.652840][ T9314] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1205'. [ 312.557434][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.560476][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.610141][ T9324] ceph: No mds server is up or the cluster is laggy [ 312.656619][ T9325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.712988][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 313.271948][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 313.555602][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 313.582135][ T9338] fuse: Bad value for 'fd' [ 314.084450][ T5844] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 314.116527][ T9352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1219'. [ 314.268895][ T5844] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 314.276941][ T5844] usb 5-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 314.314115][ T5844] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 314.314675][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.314758][ T5844] usb 5-1: Product: syz [ 314.314775][ T5844] usb 5-1: Manufacturer: syz [ 314.314790][ T5844] usb 5-1: SerialNumber: syz [ 314.400121][ T9360] tipc: Enabled bearer , priority 0 [ 314.547763][ T31] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 314.570747][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 314.570878][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.598276][ T9360] tipc: Resetting bearer [ 314.617325][ T31] usb 3-1: USB disconnect, device number 4 [ 314.659955][ T9366] fuse: Bad value for 'fd' [ 315.585958][ T10] usb 5-1: USB disconnect, device number 8 [ 315.844158][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 315.900956][ T9356] tipc: Disabling bearer [ 317.105568][ T5787] tipc: Node number set to 2832735550 [ 317.515407][ T9396] fuse: Bad value for 'fd' [ 317.783027][ T9403] 9p: Bad value for 'wfdno' [ 318.504369][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 318.664318][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 318.666868][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.666903][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.666943][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.666968][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.727224][ T31] usb 2-1: config 0 descriptor?? [ 318.747392][ T31] hub 2-1:0.0: USB hub found [ 318.898133][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 318.944473][ T31] hub 2-1:0.0: 1 port detected [ 319.110500][ T9418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1247'. [ 319.145909][ T31] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 319.145937][ T31] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 319.170672][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 319.170803][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 319.196120][ T6024] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 319.217736][ T31] usb 2-1: USB disconnect, device number 6 [ 319.349910][ T6024] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 319.349945][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.349968][ T6024] usb 1-1: Product: syz [ 319.349983][ T6024] usb 1-1: Manufacturer: syz [ 319.349999][ T6024] usb 1-1: SerialNumber: syz [ 319.391035][ T6024] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.551094][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 321.043644][ T5882] usb 1-1: USB disconnect, device number 7 [ 321.834454][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 321.835640][ T10] ath9k_htc: Failed to initialize the device [ 321.917119][ T5882] usb 1-1: ath9k_htc: USB layer deinitialized [ 322.933715][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.933789][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.443024][ T9468] overlayfs: missing 'lowerdir' [ 325.009332][ T9473] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 325.009399][ T9473] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 325.054083][ T9432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.683790][ T9483] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1270'. [ 327.765679][ T9504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1278'. [ 329.492628][ T9515] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 329.492826][ T9515] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 331.123119][ T5805] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 331.740014][ T9526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1285'. [ 333.642581][ T9543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1291'. [ 334.618379][ T9546] ======================================================= [ 334.618379][ T9546] WARNING: The mand mount option has been deprecated and [ 334.618379][ T9546] and is ignored by this kernel. Remove the mand [ 334.618379][ T9546] option from the mount to silence this warning. [ 334.618379][ T9546] ======================================================= [ 336.197516][ T9549] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 336.197538][ T9549] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 336.758501][ T9563] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1297'. [ 336.848936][ T9566] program syz.1.1300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.985329][ T9586] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 338.985351][ T9586] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 339.464586][ T808] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 339.654801][ T808] usb 2-1: config 68 has an invalid interface number: 220 but max is 0 [ 339.654832][ T808] usb 2-1: config 68 has no interface number 0 [ 339.654866][ T808] usb 2-1: config 68 interface 220 has no altsetting 0 [ 339.696707][ T808] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 339.696740][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.696761][ T808] usb 2-1: Product: syz [ 339.696775][ T808] usb 2-1: Manufacturer: syz [ 339.696789][ T808] usb 2-1: SerialNumber: syz [ 339.927265][ T9597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1313'. [ 339.972514][ T808] gspca_main: spca501-2.14.0 probing 0497:c001 [ 339.981964][ T808] gspca_spca501: reg write: error -71 [ 339.981981][ T808] spca501 2-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 339.982091][ T808] spca501 2-1:68.220: probe with driver spca501 failed with error -22 [ 340.015915][ T808] usb 2-1: USB disconnect, device number 7 [ 340.688489][ T5805] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 343.864330][ T6024] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 344.104409][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 344.106955][ T6024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.106992][ T6024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.107034][ T6024] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.107059][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.174091][ T6024] usb 1-1: config 0 descriptor?? [ 344.236816][ T6024] hub 1-1:0.0: USB hub found [ 344.398089][ T6024] hub 1-1:0.0: 1 port detected [ 344.600987][ T6024] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 344.601015][ T6024] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 344.626227][ T6024] usbhid 1-1:0.0: can't add hid device: -71 [ 344.626354][ T6024] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 344.688043][ T6024] usb 1-1: USB disconnect, device number 8 [ 344.737329][ T9628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1326'. [ 346.053755][ T9629] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 346.053776][ T9629] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 346.819048][ T9646] 9pnet_fd: Insufficient options for proto=fd [ 348.682145][ T9659] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 348.682168][ T9659] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 350.864004][ T5805] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 356.475727][ T9692] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 356.475748][ T9692] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 357.835832][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.839366][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.840616][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.842247][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.843046][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.964884][ T5805] Bluetooth: hci5: command tx timeout [ 361.994802][ T5805] Bluetooth: hci5: command tx timeout [ 364.074325][ T5805] Bluetooth: hci5: command tx timeout [ 365.063186][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.549570][ T5805] Bluetooth: hci5: command tx timeout [ 367.248087][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.498492][ T9753] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 368.498515][ T9753] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 373.554350][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 373.763604][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.764621][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 373.777812][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.777909][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.778021][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.778088][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.846988][ T31] usb 1-1: config 0 descriptor?? [ 373.868215][ T31] hub 1-1:0.0: USB hub found [ 373.995847][ T9707] chnl_net:caif_netlink_parms(): no params data found [ 374.086381][ T31] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 374.128000][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 374.128090][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 374.152964][ T31] usb 1-1: USB disconnect, device number 9 [ 374.444859][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.741489][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.747198][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.747458][ T9707] bridge_slave_0: entered allmulticast mode [ 374.750356][ T9707] bridge_slave_0: entered promiscuous mode [ 374.815337][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.815424][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.815615][ T9707] bridge_slave_1: entered allmulticast mode [ 374.817487][ T9707] bridge_slave_1: entered promiscuous mode [ 375.073455][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.127865][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.017738][ T9707] team0: Port device team_slave_0 added [ 376.052475][ T9707] team0: Port device team_slave_1 added [ 377.900190][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.900209][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.900238][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.918051][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.918095][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.918170][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.079957][ T58] bridge_slave_1: left allmulticast mode [ 378.080170][ T58] bridge_slave_1: left promiscuous mode [ 378.080933][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.328110][ T58] bridge_slave_0: left allmulticast mode [ 378.328144][ T58] bridge_slave_0: left promiscuous mode [ 378.330188][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.608585][ T9798] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 379.608608][ T9798] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 384.257568][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.257643][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.534874][ T9850] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 388.534906][ T9850] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 389.204418][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 389.614312][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 390.443923][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.443960][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.444001][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 390.444024][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.523428][ T10] usb 3-1: config 0 descriptor?? [ 390.609219][ T10] usb 3-1: can't set config #0, error -71 [ 390.624081][ T10] usb 3-1: USB disconnect, device number 5 [ 393.025050][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.105725][ T58] bond0 (unregistering): Released all slaves [ 395.745695][ T58] bond1 (unregistering): (slave dummy0): Releasing active interface [ 395.801194][ T58] bond1 (unregistering): Released all slaves [ 396.685648][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 396.710555][ T9707] hsr_slave_0: entered promiscuous mode [ 396.711468][ T9707] hsr_slave_1: entered promiscuous mode [ 396.712153][ T9707] debugfs: 'hsr0' already exists in 'hsr' [ 396.712172][ T9707] Cannot create hsr debugfs directory [ 396.712737][ T58] tipc: Left network mode [ 396.854445][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 396.859595][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.859633][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.859671][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 396.859688][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.916468][ T5844] usb 1-1: config 0 descriptor?? [ 398.394860][ T9904] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 398.394892][ T9904] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 398.880986][ T5844] hub 1-1:0.0: USB hub found [ 400.892706][ T5844] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 400.990688][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 400.990823][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 401.025351][ T5844] usb 1-1: USB disconnect, device number 10 [ 401.271889][ T9921] IPVS: Error connecting to the multicast addr [ 402.907317][ T9941] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1421'. [ 403.800346][ T9933] bond1: left allmulticast mode [ 403.804510][ T9933] bond2: left allmulticast mode [ 404.973097][ T9956] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 404.973447][ T9956] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 406.478228][ T58] hsr_slave_0: left promiscuous mode [ 406.546229][ T58] hsr_slave_1: left promiscuous mode [ 406.547250][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.547436][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.622079][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.622103][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.820684][ T58] veth1_macvtap: left promiscuous mode [ 406.820870][ T58] veth0_macvtap: left promiscuous mode [ 406.821054][ T58] veth1_vlan: left promiscuous mode [ 406.821275][ T58] veth0_vlan: left promiscuous mode [ 407.325166][ T9978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1432'. [ 407.934365][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 408.375552][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 408.420009][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.420046][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.420087][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.420112][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.470352][ T5873] usb 3-1: config 0 descriptor?? [ 408.498000][ T5873] hub 3-1:0.0: USB hub found [ 410.850967][ T5873] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 410.865740][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 410.884692][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 410.935234][ T5873] usb 3-1: USB disconnect, device number 6 [ 411.746539][ T9995] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 411.746856][ T9995] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 414.285169][ T58] team0 (unregistering): Port device team_slave_1 removed [ 414.536003][ T58] team0 (unregistering): Port device team_slave_0 removed [ 416.451069][ T9968] IPVS: Error connecting to the multicast addr [ 416.957744][T10005] kvm: Disabled LAPIC found during irq injection [ 417.164466][ T5881] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 417.314342][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 417.317055][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.317098][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.317139][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 417.317164][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.408483][ T5881] usb 3-1: config 0 descriptor?? [ 417.428495][ T5881] hub 3-1:0.0: USB hub found [ 417.619545][ T5881] hub 3-1:0.0: 1 port detected [ 417.648770][T10020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1442'. [ 417.834130][ T5881] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 417.834191][ T5881] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 417.860188][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 417.860326][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 417.905389][ T5881] usb 3-1: USB disconnect, device number 7 [ 418.036549][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.059102][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.067521][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.070483][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.099001][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 418.644324][ T5881] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 418.834540][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 418.844489][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.844588][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.844885][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.844975][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.496541][ T5881] usb 1-1: config 0 descriptor?? [ 419.529696][ T5881] hub 1-1:0.0: USB hub found [ 420.179387][ T5809] Bluetooth: hci4: command tx timeout [ 420.352791][T10043] overlayfs: missing 'workdir' [ 420.520373][T10046] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1448'. [ 420.938295][T10049] IPVS: Error connecting to the multicast addr [ 421.288436][ T5881] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 421.308098][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 421.308230][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.402638][ T5881] usb 1-1: USB disconnect, device number 11 [ 422.234678][ T5809] Bluetooth: hci4: command tx timeout [ 422.571977][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'. [ 424.189179][T10085] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1459'. [ 424.261328][T10025] chnl_net:caif_netlink_parms(): no params data found [ 424.314241][ T5809] Bluetooth: hci4: command tx timeout [ 424.560304][T10095] IPVS: Error connecting to the multicast addr [ 424.995255][ T5844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 425.101718][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.170429][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.189900][T10025] bridge_slave_0: entered allmulticast mode [ 425.315163][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 425.390113][T10025] bridge_slave_0: entered promiscuous mode [ 425.513699][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.513737][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.513779][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 425.513804][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.561858][ T5844] usb 4-1: config 0 descriptor?? [ 425.572396][ T5844] hub 4-1:0.0: USB hub found [ 425.839039][T10110] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 425.839062][T10110] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 426.169313][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.169555][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.170680][T10025] bridge_slave_1: entered allmulticast mode [ 426.202469][T10025] bridge_slave_1: entered promiscuous mode [ 426.394401][ T5809] Bluetooth: hci4: command tx timeout [ 426.805464][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.637559][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.833034][T10127] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1469'. [ 428.173164][ T5844] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 428.181113][ T5844] usbhid 4-1:0.0: can't add hid device: -71 [ 428.183599][ T5844] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 428.283725][ T5844] usb 4-1: USB disconnect, device number 6 [ 428.388663][T10135] IPVS: Error connecting to the multicast addr [ 428.598967][T10025] team0: Port device team_slave_0 added [ 428.621250][T10025] team0: Port device team_slave_1 added [ 428.756176][ T58] bridge_slave_1: left allmulticast mode [ 428.756207][ T58] bridge_slave_1: left promiscuous mode [ 428.756486][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.870936][ T58] bridge_slave_0: left allmulticast mode [ 428.870967][ T58] bridge_slave_0: left promiscuous mode [ 428.871243][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.176106][T10144] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 429.176175][T10144] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 429.527720][T10146] overlayfs: missing 'lowerdir' [ 431.324988][ T5844] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 431.639733][T10171] overlayfs: failed to resolve './file1': -2 [ 431.776155][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.794381][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 431.800491][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.800526][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.800568][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 431.800595][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.853006][ T5844] usb 3-1: config 0 descriptor?? [ 431.869598][ T5844] hub 3-1:0.0: USB hub found [ 431.956259][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.055629][ T58] bond0 (unregistering): Released all slaves [ 432.091847][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1486'. [ 432.091888][T10178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1486'. [ 432.494474][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.494494][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.494523][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.769836][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.769856][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.769887][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.105656][T10186] overlayfs: missing 'lowerdir' [ 433.477689][ T58] hsr_slave_0: left promiscuous mode [ 433.514445][ T58] hsr_slave_1: left promiscuous mode [ 433.516376][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.450472][T10208] overlayfs: failed to resolve './file1': -2 [ 434.506326][ T5844] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 434.513256][ T5844] usbhid 3-1:0.0: can't add hid device: -71 [ 434.518979][ T5844] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.572170][ T5844] usb 3-1: USB disconnect, device number 8 [ 434.584096][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.061206][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1497'. [ 436.061245][T10224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1497'. [ 436.495269][ T58] team0 (unregistering): Port device team_slave_1 removed [ 436.675317][ T58] team0 (unregistering): Port device team_slave_0 removed [ 437.365887][T10197] syzkaller0: entered promiscuous mode [ 437.365915][T10197] syzkaller0: entered allmulticast mode [ 437.519059][T10233] overlayfs: missing 'lowerdir' [ 437.972842][T10025] hsr_slave_0: entered promiscuous mode [ 437.973847][T10025] hsr_slave_1: entered promiscuous mode [ 438.086519][ T5787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 438.556655][T10025] debugfs: 'hsr0' already exists in 'hsr' [ 438.556688][T10025] Cannot create hsr debugfs directory [ 438.637556][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 438.640346][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.640383][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.640425][ T5787] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 438.640458][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.649401][ T5787] usb 3-1: config 0 descriptor?? [ 438.673512][ T5787] hub 3-1:0.0: USB hub found [ 439.280929][T10246] overlayfs: failed to resolve './file1': -2 [ 439.733793][ T5787] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 439.782330][ T5787] usbhid 3-1:0.0: can't add hid device: -71 [ 439.782454][ T5787] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 439.868537][ T5787] usb 3-1: USB disconnect, device number 9 [ 442.022036][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1510'. [ 442.022113][T10277] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1510'. [ 442.357464][T10281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 442.357530][T10281] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 444.144359][ T5844] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 444.210897][T10295] syzkaller0: entered promiscuous mode [ 444.210926][T10295] syzkaller0: entered allmulticast mode [ 444.305515][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 444.315271][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.315364][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.315465][ T5844] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 444.315531][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.416159][ T5844] usb 5-1: config 0 descriptor?? [ 444.461276][ T5844] hub 5-1:0.0: USB hub found [ 446.715230][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.715310][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.755377][ T5844] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 446.890013][ T5844] usbhid 5-1:0.0: can't add hid device: -71 [ 446.890147][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 447.025358][ T5844] usb 5-1: USB disconnect, device number 9 [ 447.259246][T10318] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1522'. [ 448.993541][T10330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 448.993602][T10330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 450.909518][T10333] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 452.516567][T10025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.664712][T10025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 452.993122][T10025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.064319][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 453.079014][T10025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 453.214440][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 453.216861][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.216885][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.216913][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.216930][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.222670][ T5873] usb 4-1: config 0 descriptor?? [ 453.230754][ T5873] hub 4-1:0.0: USB hub found [ 454.757479][ T5873] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 454.786336][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 454.786470][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 454.835523][ T5873] usb 4-1: USB disconnect, device number 7 [ 455.176531][ T5787] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 455.190307][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.307736][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.324329][ T5787] usb 1-1: Using ep0 maxpacket: 32 [ 455.326617][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.326650][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.326691][ T5787] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 455.326715][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.343679][ T5787] usb 1-1: config 0 descriptor?? [ 455.431176][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.431389][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.449482][ T5787] hub 1-1:0.0: USB hub found [ 455.488837][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.489020][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.632431][ T5787] hub 1-1:0.0: 1 port detected [ 455.837334][ T5787] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 455.837361][ T5787] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 455.906884][ T5787] usbhid 1-1:0.0: can't add hid device: -71 [ 455.906996][ T5787] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 455.980805][ T5787] usb 1-1: USB disconnect, device number 12 [ 456.614949][T10386] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 456.615012][T10386] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 456.846285][T10392] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1534'. [ 457.803501][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.545271][ T5809] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 459.960023][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 460.031017][T10025] veth0_vlan: entered promiscuous mode [ 460.089022][T10025] veth1_vlan: entered promiscuous mode [ 460.114312][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 460.121735][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.121771][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.121813][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.121829][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.181385][ T5844] usb 1-1: config 0 descriptor?? [ 460.208823][ T5844] hub 1-1:0.0: USB hub found [ 460.615873][T10025] veth0_macvtap: entered promiscuous mode [ 460.652062][T10025] veth1_macvtap: entered promiscuous mode [ 460.720368][ T5844] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 460.771931][ T5844] usbhid 1-1:0.0: can't add hid device: -71 [ 460.772058][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 460.813604][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.845167][ T5844] usb 1-1: USB disconnect, device number 13 [ 460.897860][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.988876][T10438] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1553'. [ 461.010292][ T8742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.051746][ T8742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.060414][ T8742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.103956][ T8742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.104493][ T5882] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 461.348441][ T5882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.348476][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.348499][ T5882] usb 5-1: Product: syz [ 461.348514][ T5882] usb 5-1: Manufacturer: syz [ 461.348530][ T5882] usb 5-1: SerialNumber: syz [ 461.485061][ T5882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 461.521784][ T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 461.914469][ T5881] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 461.967224][ T5873] usb 5-1: USB disconnect, device number 10 [ 461.984353][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.984375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.129309][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.129331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.177090][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 462.195821][ T5881] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 462.195851][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.195872][ T5881] usb 1-1: config 0 has no interface number 0 [ 462.195921][ T5881] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 462.195951][ T5881] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 462.195976][ T5881] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 462.196007][ T5881] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 462.196023][ T5881] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 462.196039][ T5881] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 462.284921][ T5881] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 462.285007][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.285062][ T5881] usb 1-1: Product: syz [ 462.285105][ T5881] usb 1-1: Manufacturer: syz [ 462.285148][ T5881] usb 1-1: SerialNumber: syz [ 462.372121][ T5881] usb 1-1: config 0 descriptor?? [ 462.373155][T10442] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.373284][T10442] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.556699][ T5809] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 462.730947][ T5881] usb 1-1: NFC: intf ffff88805cc19000 id ffffffff8e53a6a0 [ 462.805497][ T31] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 462.805693][ T31] ath9k_htc: Failed to initialize the device [ 462.806350][ T5873] usb 5-1: ath9k_htc: USB layer deinitialized [ 462.860225][T10461] tipc: Started in network mode [ 462.860260][T10461] tipc: Node identity d22741c3595d, cluster identity 4711 [ 462.860905][T10461] tipc: Enabled bearer , priority 0 [ 462.913470][T10455] tipc: Resetting bearer [ 463.010056][ T5881] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 463.572742][ T5881] usb 1-1: USB disconnect, device number 14 [ 463.626425][ T5881] usb 1-1: NFC: intf ffff88805cc19000 [ 463.867862][T10452] tipc: Disabling bearer [ 464.117770][ T5873] tipc: Node number set to 2340045251 [ 464.405278][T10482] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1563'. [ 466.643445][T10498] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 466.904410][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 467.078793][ T5882] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 467.078829][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.078851][ T5882] usb 6-1: Product: syz [ 467.078866][ T5882] usb 6-1: Manufacturer: syz [ 467.078881][ T5882] usb 6-1: SerialNumber: syz [ 467.158648][ T5882] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 467.313371][T10506] fuse: Unknown parameter 'group_i00000000000000000000' [ 467.333311][ T5882] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 467.788060][ T6024] usb 6-1: USB disconnect, device number 2 [ 467.861406][T10510] tipc: Enabled bearer , priority 0 [ 467.884617][T10510] tipc: Resetting bearer [ 468.111958][T10509] tipc: Disabling bearer [ 468.926411][ T5882] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 468.926624][ T5882] ath9k_htc: Failed to initialize the device [ 468.927617][ T6024] usb 6-1: ath9k_htc: USB layer deinitialized [ 472.194815][T10535] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1578'. [ 473.034967][T10553] fuse: Unknown parameter 'group_id00000000000000000000' [ 473.432818][T10566] tipc: Enabled bearer , priority 0 [ 473.448692][T10564] tipc: Resetting bearer [ 474.225265][T10562] tipc: Disabling bearer [ 474.534438][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 474.695395][ T31] usb 4-1: config 68 has an invalid interface number: 220 but max is 0 [ 474.695429][ T31] usb 4-1: config 68 has no interface number 0 [ 474.695467][ T31] usb 4-1: config 68 interface 220 has no altsetting 0 [ 474.700745][ T31] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 474.700768][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.700783][ T31] usb 4-1: Product: syz [ 474.700793][ T31] usb 4-1: Manufacturer: syz [ 474.700804][ T31] usb 4-1: SerialNumber: syz [ 474.994531][ T31] gspca_main: spca501-2.14.0 probing 0497:c001 [ 475.020114][ T31] gspca_spca501: reg write: error -71 [ 475.020133][ T31] spca501 4-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 475.020219][ T31] spca501 4-1:68.220: probe with driver spca501 failed with error -22 [ 475.140459][ T31] usb 4-1: USB disconnect, device number 8 [ 475.511970][T10599] fuse: Unknown parameter 'group_id00000000000000000000' [ 476.963937][T10622] tipc: Enabled bearer , priority 0 [ 477.033770][T10629] tipc: Resetting bearer [ 477.386590][T10619] tipc: Disabling bearer [ 480.289648][T10651] fuse: Unknown parameter 'group_id00000000000000000000' [ 481.602551][T10677] syzkaller0: entered promiscuous mode [ 481.602581][T10677] syzkaller0: entered allmulticast mode [ 488.680381][T10742] syzkaller0: entered promiscuous mode [ 488.680408][T10742] syzkaller0: entered allmulticast mode [ 488.832590][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 491.975978][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 498.884296][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 498.986334][ T5882] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 500.124246][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 500.126365][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.126399][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.126440][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 500.126465][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.206463][ T5882] usb 3-1: config 0 descriptor?? [ 500.220245][ T5882] hub 3-1:0.0: USB hub found [ 500.424274][ T5882] hub 3-1:0.0: 1 port detected [ 500.464409][ T5873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 502.232448][ T5882] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 502.232487][ T5882] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 502.272714][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 502.272843][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 502.365471][ T5882] usb 3-1: USB disconnect, device number 10 [ 502.400316][ T5873] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 502.400349][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.400369][ T5873] usb 5-1: Product: syz [ 502.400385][ T5873] usb 5-1: Manufacturer: syz [ 502.400400][ T5873] usb 5-1: SerialNumber: syz [ 502.466863][ T5873] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 502.529634][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.744364][ T5873] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 502.914331][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 502.918320][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.919196][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.919243][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 502.919268][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.912894][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 503.913083][ T10] ath9k_htc: Failed to initialize the device [ 503.933113][ T5873] usb 1-1: config 0 descriptor?? [ 503.950107][ T5859] usb 5-1: USB disconnect, device number 11 [ 504.000072][ T5873] hub 1-1:0.0: USB hub found [ 504.083911][ T5859] usb 5-1: ath9k_htc: USB layer deinitialized [ 505.296382][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 505.987675][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 506.724748][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.724888][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.074424][ T5873] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 510.083025][ T5873] usbhid 1-1:0.0: can't add hid device: -32 [ 510.083152][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 510.208408][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 511.714709][ T10] usb 5-1: device descriptor read/all, error -71 [ 511.776563][ T2839] ------------[ cut here ]------------ [ 511.776580][ T2839] in_task() && kcov_mode_enabled(mode) [ 511.776598][ T2839] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:14/2839 [ 511.776665][ T2839] Modules linked in: [ 511.776710][ T2839] CPU: 0 UID: 0 PID: 2839 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 511.776740][ T2839] Tainted: [L]=SOFTLOCKUP [ 511.776748][ T2839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 511.776762][ T2839] Workqueue: events_unbound cfg80211_wiphy_work [ 511.776799][ T2839] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 511.776834][ T2839] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 511.776855][ T2839] RSP: 0018:ffffc9000d70f978 EFLAGS: 00010202 [ 511.776873][ T2839] RAX: 0000000000000002 RBX: ffff88802fa3dac0 RCX: 0000000000000000 [ 511.776889][ T2839] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 511.776904][ T2839] RBP: ffff888032515780 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 511.776927][ T2839] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff888029a35d08 [ 511.776944][ T2839] R13: ffff88804bd107c0 R14: 0000000000000000 R15: ffff888029a35d20 [ 511.776960][ T2839] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 511.776979][ T2839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.776995][ T2839] CR2: 0000555590d81a28 CR3: 000000002b588000 CR4: 00000000003526f0 [ 511.777015][ T2839] Call Trace: [ 511.777024][ T2839] [ 511.777044][ T2839] ieee80211_iface_work+0x211/0x12b0 [ 511.777087][ T2839] cfg80211_wiphy_work+0x2ab/0x450 [ 511.777116][ T2839] ? process_scheduled_works+0xa0f/0x17a0 [ 511.777141][ T2839] process_scheduled_works+0xaec/0x17a0 [ 511.777193][ T2839] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.777213][ T2839] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.777250][ T2839] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.777280][ T2839] ? schedule+0x90/0x360 [ 511.777318][ T2839] worker_thread+0xda6/0x1360 [ 511.777375][ T2839] ? __kthread_parkme+0x19c/0x1f0 [ 511.777407][ T2839] kthread+0x726/0x8b0 [ 511.777439][ T2839] ? __pfx_worker_thread+0x10/0x10 [ 511.777462][ T2839] ? __pfx_kthread+0x10/0x10 [ 511.777486][ T2839] ? rt_spin_unlock+0x14f/0x200 [ 511.777515][ T2839] ? rt_spin_unlock+0x160/0x200 [ 511.777537][ T2839] ? __pfx_kthread+0x10/0x10 [ 511.777565][ T2839] ret_from_fork+0x51b/0xa40 [ 511.777592][ T2839] ? __pfx_ret_from_fork+0x10/0x10 [ 511.777615][ T2839] ? __switch_to+0xc82/0x1410 [ 511.777652][ T2839] ? __pfx_kthread+0x10/0x10 [ 511.777680][ T2839] ret_from_fork_asm+0x1a/0x30 [ 511.777732][ T2839] [ 511.777753][ T2839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 511.777773][ T2839] CPU: 0 UID: 0 PID: 2839 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 511.777805][ T2839] Tainted: [L]=SOFTLOCKUP [ 511.777813][ T2839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 511.777828][ T2839] Workqueue: events_unbound cfg80211_wiphy_work [ 511.777857][ T2839] Call Trace: [ 511.777866][ T2839] [ 511.777875][ T2839] vpanic+0x1e0/0x670 [ 511.777912][ T2839] panic+0xc5/0xd0 [ 511.777951][ T2839] ? __pfx_panic+0x10/0x10 [ 511.777994][ T2839] ? ret_from_fork_asm+0x1a/0x30 [ 511.778035][ T2839] __warn+0x315/0x4a0 [ 511.778064][ T2839] ? kcov_remote_start+0x5d8/0x710 [ 511.778096][ T2839] ? kcov_remote_start+0x5d8/0x710 [ 511.778128][ T2839] __report_bug+0x29a/0x540 [ 511.778165][ T2839] ? kcov_remote_start+0x5d8/0x710 [ 511.778198][ T2839] ? __pfx___report_bug+0x10/0x10 [ 511.778228][ T2839] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.778264][ T2839] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 511.778295][ T2839] ? rt_spin_lock+0x1e0/0x400 [ 511.778320][ T2839] ? rt_spin_lock+0x1e0/0x400 [ 511.778344][ T2839] ? kcov_remote_start+0x5d8/0x710 [ 511.778374][ T2839] report_bug+0x16a/0x220 [ 511.778404][ T2839] ? kcov_remote_start+0x5d8/0x710 [ 511.778433][ T2839] ? kcov_remote_start+0x5da/0x710 [ 511.778463][ T2839] handle_bug+0x98/0x200 [ 511.778498][ T2839] exc_invalid_op+0x1a/0x50 [ 511.778531][ T2839] asm_exc_invalid_op+0x1a/0x20 [ 511.778553][ T2839] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 511.778583][ T2839] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 511.778603][ T2839] RSP: 0018:ffffc9000d70f978 EFLAGS: 00010202 [ 511.778621][ T2839] RAX: 0000000000000002 RBX: ffff88802fa3dac0 RCX: 0000000000000000 [ 511.778636][ T2839] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 511.778651][ T2839] RBP: ffff888032515780 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 511.778667][ T2839] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff888029a35d08 [ 511.778684][ T2839] R13: ffff88804bd107c0 R14: 0000000000000000 R15: ffff888029a35d20 [ 511.778708][ T2839] ? rt_spin_lock+0x1e0/0x400 [ 511.778740][ T2839] ? kcov_remote_start+0xe0/0x710 [ 511.778774][ T2839] ieee80211_iface_work+0x211/0x12b0 [ 511.778815][ T2839] cfg80211_wiphy_work+0x2ab/0x450 [ 511.778845][ T2839] ? process_scheduled_works+0xa0f/0x17a0 [ 511.778871][ T2839] process_scheduled_works+0xaec/0x17a0 [ 511.778934][ T2839] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.778955][ T2839] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.778993][ T2839] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.779026][ T2839] ? schedule+0x90/0x360 [ 511.779065][ T2839] worker_thread+0xda6/0x1360 [ 511.779106][ T2839] ? __kthread_parkme+0x19c/0x1f0 [ 511.779137][ T2839] kthread+0x726/0x8b0 [ 511.779169][ T2839] ? __pfx_worker_thread+0x10/0x10 [ 511.779191][ T2839] ? __pfx_kthread+0x10/0x10 [ 511.779215][ T2839] ? rt_spin_unlock+0x14f/0x200 [ 511.779245][ T2839] ? rt_spin_unlock+0x160/0x200 [ 511.779267][ T2839] ? __pfx_kthread+0x10/0x10 [ 511.779298][ T2839] ret_from_fork+0x51b/0xa40 [ 511.779326][ T2839] ? __pfx_ret_from_fork+0x10/0x10 [ 511.779348][ T2839] ? __switch_to+0xc82/0x1410 [ 511.779386][ T2839] ? __pfx_kthread+0x10/0x10 [ 511.779416][ T2839] ret_from_fork_asm+0x1a/0x30 [ 511.779471][ T2839] [ 511.779646][ T2839] Kernel Offset: disabled