last executing test programs: 17m56.770271246s ago: executing program 32 (id=173): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 16m36.360950485s ago: executing program 33 (id=299): mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) setresuid(0xee01, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0) chdir(&(0x7f0000000080)='./file1\x00') 3m3.546931988s ago: executing program 34 (id=2119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000f8dbdf2506"], 0x14}}, 0x20006004) 2m34.003949666s ago: executing program 35 (id=2479): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x2, 0x4, 0x3, 0x7, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0xa00f, 0x75, 0x7, 0x8000000c, 0x7b, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x19) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 2m28.42155078s ago: executing program 36 (id=2537): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 2m17.470699636s ago: executing program 37 (id=2682): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r2, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x8000000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r2, r2, 0x9d, 0x0, 0x3ffe}) 2m8.689700402s ago: executing program 9 (id=2952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) 1m52.6219834s ago: executing program 38 (id=2952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) 1m49.837583439s ago: executing program 39 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) 1m40.431677595s ago: executing program 40 (id=3053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000000000000000030000000002c000000080a01030000000000000000020000000900020073797a32000000000900010073797a30"], 0xa0}}, 0x0) 1m37.101272963s ago: executing program 41 (id=3102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="93", 0x1}], 0x1, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045) 1m17.39367616s ago: executing program 3 (id=3509): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000b0b000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1m16.996131135s ago: executing program 3 (id=3515): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x2, 0x4, 0x3, 0x7, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0xa00f, 0x75, 0x7, 0x8000000c, 0x7b, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x19) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 1m14.944646061s ago: executing program 3 (id=3525): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 1m11.840502889s ago: executing program 3 (id=3549): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 1m11.616925099s ago: executing program 3 (id=3552): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x5, 0x0, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x8000000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r5, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, 0x0, 0x0, 0x9d, 0x0, 0x3ffe}) 1m10.840374045s ago: executing program 3 (id=3558): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="54b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}], 0x1, 0x20000000) 1m7.646113609s ago: executing program 5 (id=3630): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) 1m7.521319708s ago: executing program 5 (id=3633): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x84, 0x7b, 0xfffffffffffffffe, &(0x7f0000000280)) 1m7.436605653s ago: executing program 5 (id=3635): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 1m7.187139857s ago: executing program 5 (id=3641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.872737465s ago: executing program 5 (id=3648): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r2, r2, 0x9d, 0x0, 0x3ffe}) 1m4.960291654s ago: executing program 5 (id=3655): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 58.635774357s ago: executing program 7 (id=3759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) 58.584759069s ago: executing program 7 (id=3762): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee00) ioctl$KDGKBMETA(r0, 0x4b32, 0x0) 58.472210797s ago: executing program 7 (id=3764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 58.37934419s ago: executing program 7 (id=3766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x40, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}]}, 0x40}}, 0x20004800) 58.312078778s ago: executing program 7 (id=3768): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r2, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x8000000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r2, r2, 0x9d, 0x0, 0x3ffe}) 57.33406549s ago: executing program 7 (id=3780): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x18, 0x29, 0x32}}], 0x18}, 0x20048855) 57.149303097s ago: executing program 42 (id=3542): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 54.804392505s ago: executing program 43 (id=3558): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="54b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}], 0x1, 0x20000000) 49.179872463s ago: executing program 4 (id=3914): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}}, 0x0) 49.057457776s ago: executing program 4 (id=3916): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x8, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 48.919811962s ago: executing program 4 (id=3918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000101, 0x0, 0x8000000000000000}]}) 48.852295503s ago: executing program 44 (id=3655): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) 48.441997842s ago: executing program 4 (id=3923): r0 = socket(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x70bd2e, 0x0, {0x2, 0x0, 0x0, r2, 0x40, 0x10, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 48.279572722s ago: executing program 4 (id=3926): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r2, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x8000000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r2, r2, 0x9d, 0x0, 0x3ffe}) 47.541470641s ago: executing program 4 (id=3929): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 44.690737992s ago: executing program 9 (id=3831): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) 44.462072752s ago: executing program 9 (id=3980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 44.343388091s ago: executing program 9 (id=3983): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 44.215692068s ago: executing program 9 (id=3985): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r2, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x8000000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r2, r2, 0x9d, 0x0, 0x3ffe}) 43.19695195s ago: executing program 9 (id=4000): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 41.260303735s ago: executing program 45 (id=3780): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x18, 0x29, 0x32}}], 0x18}, 0x20048855) 31.430604035s ago: executing program 46 (id=3929): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 27.099553419s ago: executing program 47 (id=4000): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 26.004001099s ago: executing program 0 (id=4285): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@dstopts_2292={{0x18, 0x29, 0x34}}], 0x18}, 0x400c8c0) 25.839472674s ago: executing program 0 (id=4287): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 24.31848979s ago: executing program 0 (id=4302): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000800000005000600000000000604030000000000000000008501c35dfcaae742a2c500000001000000020000000500000001800000000000000400000006000000100000000000000b05000000005f002e612e5f"], &(0x7f0000000640)=""/160, 0x68, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x1, 0x2021, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24.071747112s ago: executing program 0 (id=4306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.063332009s ago: executing program 0 (id=4307): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r2, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x8000000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x202) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r6, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x10, 0xde, 0x6, 0x7f}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r2, r2, 0x9d, 0x0, 0x3ffe}) 23.076020225s ago: executing program 0 (id=4312): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 7.01316038s ago: executing program 48 (id=4312): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 3.743938182s ago: executing program 6 (id=4520): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0xd, 0x9, 0x9, 0xfffffffffffffff4, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 3.496618337s ago: executing program 6 (id=4524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @discrete={0x3, 0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001e80)={'lo\x00', &(0x7f0000001e40)=@ethtool_eeprom={0xc, 0x4, 0x1}}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x20000000}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd28, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda9, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968c18e}, 0x8006) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xbc, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1c, 0xa8, @random="ee4b4c73a701eaa9f30900c9dc32d2656ad3a4fc42c19248"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x23, 0xa8, @random="ebc932f8357d4456ea5d0ba499df7a2307cb7219b6182d6aba99f521969cfd"}]}, 0xbc}}, 0xc000) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x38, 0x1, 0x7fffd, 0x0, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd0714", 0x173, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/11, 0xb, 0x101, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2f) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1514) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c10000000000000007000000850000002900000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbfc0000cf000000", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r8, 0x0, &(0x7f00000000c0), 0x80000) 2.108336778s ago: executing program 6 (id=4538): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) 1.711805622s ago: executing program 2 (id=4542): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) 1.710796572s ago: executing program 6 (id=4543): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 1.511769825s ago: executing program 2 (id=4546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.312901933s ago: executing program 6 (id=4549): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) 1.111923187s ago: executing program 8 (id=4552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x6e34, 0x4, 0x10, 0xffffffa4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x15}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.028404286s ago: executing program 2 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x6008040) 934.802141ms ago: executing program 1 (id=4555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) 924.694306ms ago: executing program 2 (id=4556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0)=0xa, 0x4) 883.365262ms ago: executing program 8 (id=4557): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000040)=0x6) 711.730938ms ago: executing program 1 (id=4559): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 704.489519ms ago: executing program 2 (id=4560): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x4d, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 548.80856ms ago: executing program 8 (id=4561): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) close(r0) 496.081886ms ago: executing program 1 (id=4562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 423.34517ms ago: executing program 1 (id=4563): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)="5ab371", 0x3}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) 417.474379ms ago: executing program 8 (id=4564): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 251.793377ms ago: executing program 1 (id=4565): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000140)={0x2, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13, 0x0}}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8982) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) preadv2(r6, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) close(0x3) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000002c40)={@local, @random="a6c686666e8b", @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x9, 0x6, "a405de", 0x10, 0x21, 0x1, @mcast2, @remote, {[], {{0x4e23, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, "5588ec", 0x7f, "41d722"}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000140000000000000081000000bcca08000012000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r8 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x70, 0x47, 0x99, 0x40, 0x4a5, 0x3035, 0xb8ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xd4, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000086a0803004000010203010902c20003010e00f70904000000010100000a2401030040000201020924070500007e1af81324060602060a00050008000a00040006000809240601060101000e112406030505020002000300060005000509040100000c24020102020601be8b06a8122402020600590040c9cc762e7cdd866bac0905010910000001080725010c09040009040200000102000009040201010102000007240108ff0480072401072f0200090582090800040e0707250108080300"], &(0x7f00000006c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xe0, 0x1, 0x7, 0x20, 0x7}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x5, 0x97, 0x2, 0x0, 0x9}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x1c, &(0x7f0000000c00)=@string={0x1c, 0x3, "3ceb9cd198f4f1870be1f9c8b6cd1ea62e185e01be730802fbbe"}}, {0x0, 0x0}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0a}}, {0xa3, &(0x7f0000000540)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44f}}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0xb5b, 0x0, 0xf4d}]}) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) 251.673787ms ago: executing program 2 (id=4566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) 185.556445ms ago: executing program 6 (id=4567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @discrete={0x3, 0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001e80)={'lo\x00', &(0x7f0000001e40)=@ethtool_eeprom={0xc, 0x4, 0x1}}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x20000000}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd28, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda9, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968c18e}, 0x8006) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xbc, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1c, 0xa8, @random="ee4b4c73a701eaa9f30900c9dc32d2656ad3a4fc42c19248"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x23, 0xa8, @random="ebc932f8357d4456ea5d0ba499df7a2307cb7219b6182d6aba99f521969cfd"}]}, 0xbc}}, 0xc000) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x38, 0x1, 0x7fffd, 0x0, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$inet(r0, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/11, 0xb, 0x101, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2f) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1514) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c10000000000000007000000850000002900000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbfc0000cf000000", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r8, 0x0, &(0x7f00000000c0), 0x80000) 56.703875ms ago: executing program 8 (id=4568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) 0s ago: executing program 1 (id=4569): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) kernel console output (not intermixed with test programs): (1772457747.719:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14213 comm="syz.1.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd36dac799 code=0x7ffc0000 [ 1057.736513][T14216] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1969'. [ 1058.319126][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1974'. [ 1058.342872][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 1059.748665][T14268] binder: 14267:14268 ioctl c00c6211 ffffffffffffffff returned -14 [ 1059.806581][ T36] audit: type=1804 audit(1772457749.954:829): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.1987" name="/newroot/198/file1" dev="fuse" ino=1 res=1 errno=0 [ 1060.543831][ T5958] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1060.565185][ T31] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1060.781176][ T31] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1060.781205][ T31] usb 6-1: config 0 has no interface number 0 [ 1060.781252][ T31] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1060.784309][ T31] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1060.784337][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.784479][ T31] usb 6-1: Product: syz [ 1060.784493][ T31] usb 6-1: Manufacturer: syz [ 1060.784507][ T31] usb 6-1: SerialNumber: syz [ 1060.789803][ T5958] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1060.789831][ T5958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.789851][ T5958] usb 7-1: Product: syz [ 1060.789865][ T5958] usb 7-1: Manufacturer: syz [ 1060.789878][ T5958] usb 7-1: SerialNumber: syz [ 1060.796839][ T31] usb 6-1: config 0 descriptor?? [ 1060.867778][ T5958] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1061.366954][ T31] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1061.367212][ T31] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1061.401832][ T31] usb 6-1: USB disconnect, device number 12 [ 1061.408941][ T5812] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1061.511194][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 1061.511273][T14304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2003'. [ 1061.887570][ T5883] usb 7-1: USB disconnect, device number 11 [ 1062.358142][T14322] bridge0: port 1(hsr0) entered disabled state [ 1062.596541][ T5958] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1062.695623][ T5812] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1062.696319][ T5812] ath9k_htc: Failed to initialize the device [ 1062.702668][ T5883] usb 7-1: ath9k_htc: USB layer deinitialized [ 1062.792106][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.792190][ T5958] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1062.792213][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.797094][ T5958] usb 4-1: config 0 descriptor?? [ 1063.018479][ T5883] usb 4-1: USB disconnect, device number 17 [ 1063.091834][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 1063.091850][ T36] audit: type=1804 audit(1772457752.984:832): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2025" name="/newroot/203/file1" dev="fuse" ino=1 res=1 errno=0 [ 1063.450639][T14322] batadv_slave_0: left promiscuous mode [ 1063.499086][ T5812] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1063.682940][ T5812] usb 4-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 1063.683025][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.683045][ T5812] usb 4-1: Product: syz [ 1063.683059][ T5812] usb 4-1: Manufacturer: syz [ 1063.683073][ T5812] usb 4-1: SerialNumber: syz [ 1063.714607][ T5812] usb 4-1: config 0 descriptor?? [ 1063.736837][ T5812] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1064.817945][T14322] macsec1: left promiscuous mode [ 1064.817965][T14322] macsec1: left allmulticast mode [ 1064.884816][ T135] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.948734][ T135] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.956246][ T135] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.956295][ T135] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.956934][T14331] usb 4-1: USB disconnect, device number 18 [ 1065.000476][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 1065.145421][ T36] audit: type=1804 audit(1772457754.939:833): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2038" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 1065.516653][T14331] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1065.679859][T14331] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1065.679889][T14331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.696350][T14331] usb 2-1: config 0 descriptor?? [ 1065.782305][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'. [ 1066.067975][ T36] audit: type=1804 audit(1772457755.809:834): pid=14423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2055" name="/newroot/475/file1" dev="fuse" ino=1 res=1 errno=0 [ 1066.162503][T14331] usb 2-1: Cannot set MAC address [ 1066.162777][T14331] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1066.233861][T14331] usb 2-1: USB disconnect, device number 29 [ 1066.937427][ T5883] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1067.097676][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 1067.099860][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.099922][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.099948][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.099970][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1067.100010][ T5883] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1067.100032][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.179146][ T5883] usb 7-1: config 0 descriptor?? [ 1067.613820][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.614656][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.716560][ T36] audit: type=1804 audit(1772457757.343:835): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.2068" name="/newroot/491/file1" dev="fuse" ino=1 res=1 errno=0 [ 1068.048232][ T5883] usbhid 7-1:0.0: can't add hid device: -71 [ 1068.048308][ T5883] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1068.076341][ T5883] usb 7-1: USB disconnect, device number 12 [ 1068.691036][ T5812] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1068.862284][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 1068.865939][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.865982][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.865995][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.866007][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1068.866029][ T5812] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1068.866040][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.871553][ T5812] usb 4-1: config 0 descriptor?? [ 1069.111802][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.112276][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.005711][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.013981][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.405308][ T36] audit: type=1804 audit(1772457759.868:836): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2083" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 1070.471325][ T5812] usbhid 4-1:0.0: can't add hid device: -71 [ 1070.471447][ T5812] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1070.499833][ T5812] usb 4-1: USB disconnect, device number 19 [ 1070.832425][T14511] openvswitch: netlink: Invalid VLAN frame [ 1070.976863][T14517] usb usb8: usbfs: process 14517 (syz.5.2093) did not claim interface 0 before use [ 1070.983368][T14517] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1070.985151][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2093'. [ 1070.993971][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 1071.084659][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2093'. [ 1072.310556][ T5812] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1072.478367][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.478426][ T5812] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1072.478449][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.488913][ T5812] usb 7-1: config 0 descriptor?? [ 1072.724370][ T5883] usb 7-1: USB disconnect, device number 13 [ 1072.748742][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2099'. [ 1073.448794][ T5883] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1074.461466][ T5883] usb 7-1: string descriptor 0 read error: -71 [ 1074.461605][ T5883] usb 7-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 1074.461628][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.497464][ T5883] usb 7-1: config 0 descriptor?? [ 1074.499667][ T5883] usb 7-1: can't set config #0, error -71 [ 1074.520750][ T5883] usb 7-1: USB disconnect, device number 14 [ 1074.551881][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1075.576764][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1077.704190][ T810] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1077.866854][ T810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.866927][ T810] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1077.866950][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.872722][ T810] usb 2-1: config 0 descriptor?? [ 1078.094196][ T810] usb 2-1: USB disconnect, device number 30 [ 1079.884722][T14638] bridge3: entered promiscuous mode [ 1080.492940][T14641] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2140'. [ 1080.492968][T14641] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2140'. [ 1080.492984][T14641] netlink: 'syz.6.2140': attribute type 5 has an invalid length. [ 1080.492997][T14641] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2140'. [ 1081.232504][T14331] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1081.393850][T14691] netlink: 'syz.5.2165': attribute type 7 has an invalid length. [ 1081.434996][T14331] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.435053][T14331] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1081.435076][T14331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.456763][T14331] usb 7-1: config 0 descriptor?? [ 1081.656536][T14703] netlink: 'syz.4.2171': attribute type 46 has an invalid length. [ 1081.689302][T14331] usb 7-1: USB disconnect, device number 15 [ 1081.884754][ T5812] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1082.045422][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 1082.047229][ T5812] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.049737][ T5812] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1082.049762][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.049781][ T5812] usb 6-1: Product: syz [ 1082.049794][ T5812] usb 6-1: Manufacturer: syz [ 1082.049803][ T5812] usb 6-1: SerialNumber: syz [ 1082.054011][ T5812] usb 6-1: config 0 descriptor?? [ 1082.116801][ T5812] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1082.116859][ T5812] gspca_stv06xx: st6422 sensor detected [ 1082.184168][ T101] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1082.361295][ T101] usb 7-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef [ 1082.361326][ T101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.361345][ T101] usb 7-1: Product: syz [ 1082.361359][ T101] usb 7-1: Manufacturer: syz [ 1082.361372][ T101] usb 7-1: SerialNumber: syz [ 1082.400817][ T101] usb 7-1: config 0 descriptor?? [ 1082.406989][ T101] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1082.611044][ T5812] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 1082.643547][T14331] usb 7-1: USB disconnect, device number 16 [ 1082.652868][ T5812] usb 6-1: USB disconnect, device number 13 [ 1083.544384][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2222'. [ 1085.078234][T14823] usb usb8: usbfs: process 14823 (syz.5.2229) did not claim interface 0 before use [ 1085.078444][T14823] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1085.110114][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2229'. [ 1086.087444][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2238'. [ 1086.385453][T14799] kexec: Could not allocate control_code_buffer [ 1086.506556][T14864] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1086.745913][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1087.935004][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2267'. [ 1087.935026][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2267'. [ 1089.165064][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2282'. [ 1089.705342][T14975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2297'. [ 1089.711029][T14975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2297'. [ 1090.088431][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2304'. [ 1090.140300][T14989] gtp0: entered promiscuous mode [ 1090.140326][T14989] gtp0: entered allmulticast mode [ 1090.487633][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1090.591771][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 1091.603764][T15058] netlink: 'syz.4.2338': attribute type 16 has an invalid length. [ 1091.603780][T15058] netlink: 'syz.4.2338': attribute type 17 has an invalid length. [ 1091.635812][ T5812] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1091.796173][ T5812] usb 7-1: Using ep0 maxpacket: 16 [ 1091.812836][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.812901][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.812926][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.812947][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1091.812984][ T5812] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1091.813004][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.883344][ T5812] usb 7-1: config 0 descriptor?? [ 1091.947388][T15074] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2344'. [ 1092.124657][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.125587][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.165142][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1092.184987][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1092.191931][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1092.197571][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1092.199855][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1092.299654][T15083] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1092.342827][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.345448][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.414471][T15089] netlink: 'syz.5.2352': attribute type 13 has an invalid length. [ 1092.485981][T15089] gretap0: refused to change device tx_queue_len [ 1092.486577][T15089] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1092.760470][T15104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2358'. [ 1092.808062][ T5812] usbhid 7-1:0.0: can't add hid device: -71 [ 1092.808194][ T5812] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1092.853929][ T5812] usb 7-1: USB disconnect, device number 17 [ 1093.133471][T15079] chnl_net:caif_netlink_parms(): no params data found [ 1093.508297][T15079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.508426][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.508633][T15079] bridge_slave_0: entered allmulticast mode [ 1093.516247][T15079] bridge_slave_0: entered promiscuous mode [ 1093.552607][T15079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.552805][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.553340][T15079] bridge_slave_1: entered allmulticast mode [ 1093.555892][T15079] bridge_slave_1: entered promiscuous mode [ 1093.627849][T15135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2371'. [ 1093.694111][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.709618][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.830384][T15079] team0: Port device team_slave_0 added [ 1093.832397][T15079] team0: Port device team_slave_1 added [ 1093.838647][T15143] netlink: 'syz.5.2375': attribute type 3 has an invalid length. [ 1093.838665][T15143] netlink: 'syz.5.2375': attribute type 1 has an invalid length. [ 1093.865046][ T5812] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1093.954147][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.954164][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.954186][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.965081][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.965096][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.965121][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.030807][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 1094.045071][ T5812] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1094.057937][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.057985][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1094.060381][ T5812] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1094.060409][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.060428][ T5812] usb 7-1: Product: syz [ 1094.060441][ T5812] usb 7-1: Manufacturer: syz [ 1094.060455][ T5812] usb 7-1: SerialNumber: syz [ 1094.119628][ T5812] usb 7-1: config 0 descriptor?? [ 1094.141946][ T5812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1094.232073][ T5812] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1094.328284][T13355] udevd[13355]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1094.517370][ T5806] Bluetooth: hci5: command tx timeout [ 1095.365499][T11507] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1095.434414][T15079] hsr_slave_0: entered promiscuous mode [ 1095.435757][T15079] hsr_slave_1: entered promiscuous mode [ 1095.542527][T11507] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.542555][T11507] usb 6-1: config 0 has no interfaces? [ 1095.542581][T11507] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1095.542593][T11507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.553451][T11507] usb 6-1: config 0 descriptor?? [ 1095.816692][T11507] usb 6-1: USB disconnect, device number 14 [ 1095.993600][T15079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1096.041076][ T36] audit: type=1326 audit(1772457783.839:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15189 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253edc799 code=0x7ffc0000 [ 1096.041126][ T36] audit: type=1326 audit(1772457783.839:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15189 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253edc799 code=0x7ffc0000 [ 1096.042083][T15079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1096.045929][ T36] audit: type=1326 audit(1772457783.848:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15189 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f0253edc799 code=0x7ffc0000 [ 1096.046070][ T36] audit: type=1326 audit(1772457783.848:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15189 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253edc799 code=0x7ffc0000 [ 1096.046220][ T36] audit: type=1326 audit(1772457783.848:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15189 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0253edc799 code=0x7ffc0000 [ 1096.211160][T15079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1096.248484][T15079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1096.466949][T15079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.530942][T15079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.569750][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.570493][T10960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.580887][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.581014][T10960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.725127][ T5806] Bluetooth: hci5: command tx timeout [ 1096.826737][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1096.877849][ T5958] usb 7-1: USB disconnect, device number 18 [ 1098.119831][T15241] netlink: 'syz.5.2416': attribute type 1 has an invalid length. [ 1098.272666][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2418'. [ 1098.510491][T15079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.700701][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'. [ 1098.818391][ T36] audit: type=1804 audit(1772457786.439:842): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2426" name="/newroot/284/file1" dev="fuse" ino=1 res=1 errno=0 [ 1098.949397][ T5806] Bluetooth: hci5: command tx timeout [ 1099.021092][T15079] veth0_vlan: entered promiscuous mode [ 1099.050718][T15079] veth1_vlan: entered promiscuous mode [ 1099.180166][T15079] veth0_macvtap: entered promiscuous mode [ 1099.218914][T15079] veth1_macvtap: entered promiscuous mode [ 1099.309974][T15079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.342723][T15079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.400685][ T1301] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.400732][ T1301] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.400766][ T1301] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.400798][ T1301] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.022632][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.022654][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.349293][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.349316][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.861428][T15312] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1100.862024][T15312] bridge2: entered promiscuous mode [ 1100.862048][T15312] bridge2: entered allmulticast mode [ 1101.174681][ T5806] Bluetooth: hci5: command tx timeout [ 1101.192964][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2444'. [ 1102.876348][T15352] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2456'. [ 1103.212991][T15360] syz_tun (unregistering): left allmulticast mode [ 1103.989329][T15389] usb usb8: usbfs: process 15389 (syz.5.2474) did not claim interface 0 before use [ 1103.989630][T15389] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1103.991092][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2474'. [ 1105.307323][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2474'. [ 1107.549874][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1107.780618][ T810] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1107.835089][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1107.953486][ T810] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 1107.953509][ T810] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.953520][ T810] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 1107.953533][ T810] usb 7-1: config 150 has no interface number 0 [ 1107.953553][ T810] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1107.955474][ T810] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1107.955491][ T810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.955500][ T810] usb 7-1: Product: syz [ 1107.955508][ T810] usb 7-1: Manufacturer: syz [ 1107.955515][ T810] usb 7-1: SerialNumber: syz [ 1108.457280][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1108.502208][ T810] usb 7-1: USB disconnect, device number 19 [ 1108.623535][T15456] pim6reg: entered allmulticast mode [ 1108.868370][T15467] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2504'. [ 1109.426854][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2520'. [ 1109.820375][T15515] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2527'. [ 1111.062303][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1111.646020][T15566] usb usb8: usbfs: process 15566 (syz.6.2548) did not claim interface 0 before use [ 1111.646325][T15566] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1111.647853][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2548'. [ 1111.982357][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2548'. [ 1113.227366][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2548'. [ 1117.248411][T15674] netlink: 'syz.4.2595': attribute type 62 has an invalid length. [ 1118.477639][T15756] 9p: Bad value for 'rfdno' [ 1118.650142][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2640'. [ 1118.674585][T15768] vxlan0: entered promiscuous mode [ 1118.674613][T15768] vxlan0: entered allmulticast mode [ 1118.683553][T10960] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.686049][T10960] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.686091][T10960] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.686131][T10960] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1119.138672][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2655'. [ 1120.178126][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2655'. [ 1120.210359][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2658'. [ 1120.507905][ T5806] Bluetooth: hci5: command tx timeout [ 1120.578918][T11507] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1120.743598][T11507] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1120.743637][T11507] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1120.743660][T11507] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1120.746001][T11507] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1120.746027][T11507] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1120.746047][T11507] usb 7-1: Product: syz [ 1120.746061][T11507] usb 7-1: Manufacturer: syz [ 1120.746075][T11507] usb 7-1: SerialNumber: syz [ 1120.760329][T11507] usb 7-1: config 0 descriptor?? [ 1120.800047][T11507] usb 7-1: selecting invalid altsetting 0 [ 1121.108096][T11507] usb 7-1: USB disconnect, device number 20 [ 1121.408550][T15817] udevd[15817]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.598174][T12634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1121.603508][T12634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1121.621711][T12634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1121.639278][T12634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1121.640133][T12634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1122.146887][T15857] chnl_net:caif_netlink_parms(): no params data found [ 1122.401990][T15857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.402186][T15857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.402833][T15857] bridge_slave_0: entered allmulticast mode [ 1122.405565][T15857] bridge_slave_0: entered promiscuous mode [ 1122.410264][T15857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.410454][T15857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.410693][T15857] bridge_slave_1: entered allmulticast mode [ 1122.413322][T15857] bridge_slave_1: entered promiscuous mode [ 1122.485503][T15857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.532183][T15857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.674048][T15857] team0: Port device team_slave_0 added [ 1122.690478][T15857] team0: Port device team_slave_1 added [ 1122.756617][T15857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.756630][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.756643][T15857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.758138][T15857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.758147][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.758160][T15857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.908548][T15857] hsr_slave_0: entered promiscuous mode [ 1122.910777][T15857] hsr_slave_1: entered promiscuous mode [ 1122.911623][T15857] debugfs: 'hsr0' already exists in 'hsr' [ 1122.911645][T15857] Cannot create hsr debugfs directory [ 1123.102181][ T5967] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1123.275595][ T5967] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1123.275626][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.298746][ T5967] usb 7-1: config 0 descriptor?? [ 1123.555708][ T5967] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1123.842282][T12634] Bluetooth: hci6: command tx timeout [ 1123.900085][ T5967] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1123.900109][ T5967] [drm] Initialized udl on minor 2 [ 1123.934554][T15857] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1123.989798][T15857] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1123.990398][ T5967] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1124.026523][ T5967] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1124.060633][ T5967] usb 7-1: USB disconnect, device number 21 [ 1124.083181][ T101] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1124.084604][ T101] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1124.123480][T15857] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1124.164392][T15857] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1124.346361][T15857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.383094][T15857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.409493][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.409711][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.436174][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.449272][T10960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.839980][T15857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.148368][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2733'. [ 1125.299652][T15857] veth0_vlan: entered promiscuous mode [ 1125.325637][T15857] veth1_vlan: entered promiscuous mode [ 1125.383107][T15857] veth0_macvtap: entered promiscuous mode [ 1125.417140][T15857] veth1_macvtap: entered promiscuous mode [ 1125.463204][T15857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.483479][T15857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.511120][T10960] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.511343][T10960] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.513985][T10960] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.518518][T10960] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.070300][T12634] Bluetooth: hci6: command tx timeout [ 1126.106791][T10950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.106811][T10950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.224370][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.224390][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.530997][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2674'. [ 1126.551010][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2751'. [ 1127.268613][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1127.293890][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1127.295514][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1127.296822][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1127.297566][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1127.975169][T16062] chnl_net:caif_netlink_parms(): no params data found [ 1128.137462][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.137672][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.137886][T16062] bridge_slave_0: entered allmulticast mode [ 1128.162922][T16062] bridge_slave_0: entered promiscuous mode [ 1128.166351][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.166548][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.166829][T16062] bridge_slave_1: entered allmulticast mode [ 1128.169465][T16062] bridge_slave_1: entered promiscuous mode [ 1128.253940][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.259230][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.287864][T12634] Bluetooth: hci6: command tx timeout [ 1128.369156][T16062] team0: Port device team_slave_0 added [ 1128.371309][T16062] team0: Port device team_slave_1 added [ 1128.426538][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.426554][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.426580][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.434124][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2776'. [ 1128.481798][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.481814][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.481841][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.605023][T16062] hsr_slave_0: entered promiscuous mode [ 1128.606323][T16062] hsr_slave_1: entered promiscuous mode [ 1128.607247][T16062] debugfs: 'hsr0' already exists in 'hsr' [ 1128.607268][T16062] Cannot create hsr debugfs directory [ 1129.565138][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2789'. [ 1129.659037][T12634] Bluetooth: hci7: command tx timeout [ 1130.230355][T16062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1130.444793][T16062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1130.522588][T12634] Bluetooth: hci6: command tx timeout [ 1130.576470][T16062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1130.677078][T16062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1131.001668][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.069034][T16062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.094098][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.097489][T10960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.124674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.125578][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.890629][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.891312][T12634] Bluetooth: hci7: command tx timeout [ 1132.758305][T16062] veth0_vlan: entered promiscuous mode [ 1132.785632][T16062] veth1_vlan: entered promiscuous mode [ 1132.852446][T16062] veth0_macvtap: entered promiscuous mode [ 1132.948375][T16062] veth1_macvtap: entered promiscuous mode [ 1132.990035][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.033580][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.075997][T10956] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.121254][T10956] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.127452][T10956] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.131057][T10956] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.580492][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.580509][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.661887][T10956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.661900][T10956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.104548][T12634] Bluetooth: hci7: command tx timeout [ 1134.198124][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2836'. [ 1134.291350][T16253] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2839'. [ 1134.291863][T16253] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2839'. [ 1134.612201][T16267] usb usb8: usbfs: process 16267 (syz.8.2845) did not claim interface 0 before use [ 1134.613388][T16267] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1134.614902][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2845'. [ 1135.982523][T16281] netlink: 'syz.9.2849': attribute type 58 has an invalid length. [ 1135.982544][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2849'. [ 1136.328402][T12634] Bluetooth: hci7: command tx timeout [ 1138.297315][ T5806] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1138.323770][ T5806] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1138.339358][ T5806] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1138.360169][ T5806] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1138.360997][ T5806] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1138.744633][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2878'. [ 1138.744902][T16343] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2878'. [ 1139.073455][ T5967] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1139.094383][T16329] chnl_net:caif_netlink_parms(): no params data found [ 1139.257694][ T5967] usb 10-1: Using ep0 maxpacket: 32 [ 1139.276100][ T5967] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1139.276128][ T5967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.298819][ T5967] usb 10-1: config 0 descriptor?? [ 1139.356771][T16329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.357091][T16329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.357437][T16329] bridge_slave_0: entered allmulticast mode [ 1139.387216][T16329] bridge_slave_0: entered promiscuous mode [ 1139.404805][T16329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.404966][T16329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.405217][T16329] bridge_slave_1: entered allmulticast mode [ 1139.414092][T16329] bridge_slave_1: entered promiscuous mode [ 1139.439791][T14331] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1139.523435][ T5967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1139.525526][T16329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.537105][T16329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.599313][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1139.599875][T14331] usb 9-1: Using ep0 maxpacket: 16 [ 1139.616548][T14331] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.616598][T14331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.616623][T14331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.616644][T14331] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1139.616685][T14331] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1139.616706][T14331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.617674][ T5967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1139.617818][ T5967] usb 10-1: media controller created [ 1139.676375][T14331] usb 9-1: config 0 descriptor?? [ 1139.713612][T16367] IPVS: Error connecting to the multicast addr [ 1139.735618][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1139.906193][T16350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.909006][T16350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.026213][T16329] team0: Port device team_slave_0 added [ 1140.042949][T16329] team0: Port device team_slave_1 added [ 1140.070303][ T5967] az6027: usb out operation failed. (-71) [ 1140.070322][ T5967] stb0899_attach: Driver disabled by Kconfig [ 1140.070332][ T5967] az6027: no front-end attached [ 1140.070332][ T5967] [ 1140.070840][ T5967] az6027: usb out operation failed. (-71) [ 1140.070853][ T5967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1140.075486][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input16 [ 1140.147316][T16350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.155440][T16350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.176218][ T5967] dvb-usb: schedule remote query interval to 400 msecs. [ 1140.176240][ T5967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1140.209033][ T5967] usb 10-1: USB disconnect, device number 2 [ 1140.432480][T16329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.432497][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.432519][T16329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.503773][T16329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.503790][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.503814][T16329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.607104][ T5806] Bluetooth: hci8: command tx timeout [ 1140.611608][ T5967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1140.702947][T14331] usbhid 9-1:0.0: can't add hid device: -71 [ 1140.703072][T14331] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1140.727584][T14331] usb 9-1: USB disconnect, device number 2 [ 1140.753019][T16329] hsr_slave_0: entered promiscuous mode [ 1140.765886][T16329] hsr_slave_1: entered promiscuous mode [ 1140.766812][T16329] debugfs: 'hsr0' already exists in 'hsr' [ 1140.766834][T16329] Cannot create hsr debugfs directory [ 1142.155480][ T810] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1142.390643][ T810] usb 9-1: Using ep0 maxpacket: 32 [ 1142.395468][ T810] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1142.395497][ T810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.395515][ T810] usb 9-1: Product: syz [ 1142.395528][ T810] usb 9-1: Manufacturer: syz [ 1142.395541][ T810] usb 9-1: SerialNumber: syz [ 1142.400781][ T810] usb 9-1: config 0 descriptor?? [ 1142.412687][ T810] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1142.413576][ T810] dvb-usb: bulk message failed: -22 (2/0) [ 1142.427026][ T810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1142.427814][ T810] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1142.427865][ T810] usb 9-1: media controller created [ 1142.442719][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1142.481185][ T810] usb 9-1: selecting invalid altsetting 7 [ 1142.481205][ T810] cxusb: set interface failed [ 1142.481216][ T810] dvb-usb: bulk message failed: -22 (1/0) [ 1142.622589][ T810] DVB: Unable to find symbol lgdt330x_attach() [ 1142.622605][ T810] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1142.648972][T16412] cxusb: i2c wr: len=79 is too big! [ 1142.648972][T16412] [ 1142.829274][ T5806] Bluetooth: hci8: command tx timeout [ 1142.864629][ T810] rc_core: IR keymap rc-dvico-portable not found [ 1142.864648][ T810] Registered IR keymap rc-empty [ 1142.866482][ T810] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1142.898252][ T810] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input17 [ 1142.950747][ T810] dvb-usb: schedule remote query interval to 100 msecs. [ 1142.950768][ T810] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1142.995206][ T810] usb 9-1: USB disconnect, device number 3 [ 1143.310491][ T810] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1143.454187][ T1791] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1143.673589][ T1791] usb 10-1: Using ep0 maxpacket: 16 [ 1143.691117][ T1791] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.691181][ T1791] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 1143.698884][ T1791] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.698912][ T1791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.698930][ T1791] usb 10-1: Product: syz [ 1143.698944][ T1791] usb 10-1: Manufacturer: syz [ 1143.698957][ T1791] usb 10-1: SerialNumber: syz [ 1143.724514][T16442] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1143.728315][ T1791] usb 10-1: selecting invalid altsetting 1 [ 1144.194574][ T1791] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1144.194751][ T1791] cdc_ncm 10-1:1.0: bind() failure [ 1144.277101][ T1791] usb 10-1: USB disconnect, device number 3 [ 1145.053364][ T5806] Bluetooth: hci8: command tx timeout [ 1145.209993][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2942'. [ 1145.460341][T16514] nbd: must specify at least one socket [ 1146.474576][T16329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1146.535066][T16329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1146.610567][T16329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1146.709081][T16329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1147.278421][ T5806] Bluetooth: hci8: command tx timeout [ 1147.452061][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.544543][T16329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.577303][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.579069][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.616485][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.616726][T10032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.904924][T16329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.471891][T16329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.731128][T16329] veth0_vlan: entered promiscuous mode [ 1150.000265][T16329] veth1_vlan: entered promiscuous mode [ 1150.132394][T16329] veth0_macvtap: entered promiscuous mode [ 1150.139144][T16329] veth1_macvtap: entered promiscuous mode [ 1150.208487][T16329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.251979][T16329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.283391][ T1287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.285885][ T1287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.286077][ T1287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.286112][ T1287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.779538][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.779557][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.898359][ T7223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.898378][ T7223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.530948][ T5958] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1155.691278][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 1155.698793][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.698825][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.698860][ T5958] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1155.698888][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.723357][ T1791] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1155.759375][ T5958] usb 1-1: config 0 descriptor?? [ 1155.889718][ T1791] usb 9-1: config 7 has an invalid interface number: 209 but max is 0 [ 1155.889745][ T1791] usb 9-1: config 7 has no interface number 0 [ 1155.889775][ T1791] usb 9-1: config 7 interface 209 has no altsetting 0 [ 1155.893088][ T1791] usb 9-1: string descriptor 0 read error: -22 [ 1155.893227][ T1791] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=7c.f2 [ 1155.893249][ T1791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.125276][ T5812] usb 9-1: USB disconnect, device number 4 [ 1156.191665][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.296210][ T5958] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1156.429391][ T1791] usb 1-1: USB disconnect, device number 3 [ 1156.454561][T16802] fido_id[16802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1157.948897][ T1791] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1158.139773][ T1791] usb 9-1: Using ep0 maxpacket: 16 [ 1158.142044][ T1791] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 1158.142092][ T1791] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1158.142117][ T1791] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1158.142155][ T1791] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1158.142177][ T1791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.210561][ T1791] usb 9-1: config 0 descriptor?? [ 1158.281122][ T1791] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input18 [ 1158.742593][ T5958] usb 9-1: USB disconnect, device number 5 [ 1158.742702][ C1] pxrc 9-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1160.026457][T16940] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3072'. [ 1161.224449][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3095'. [ 1161.224510][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3095'. [ 1162.871378][T12634] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1162.879267][T12634] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1162.883889][T12634] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1162.885440][T12634] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1162.886182][T12634] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1163.264869][T17058] chnl_net:caif_netlink_parms(): no params data found [ 1163.414434][T17058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.419839][T17058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.420474][T17058] bridge_slave_0: entered allmulticast mode [ 1163.448253][T17058] bridge_slave_0: entered promiscuous mode [ 1163.451553][T17058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.451757][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.452300][T17058] bridge_slave_1: entered allmulticast mode [ 1163.481513][T17058] bridge_slave_1: entered promiscuous mode [ 1163.554848][T17058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.559122][T17058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.622411][T17058] team0: Port device team_slave_0 added [ 1163.634759][T17058] team0: Port device team_slave_1 added [ 1163.684225][T17058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.684243][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.684268][T17058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.686509][T17058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.686522][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.686547][T17058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.847038][T17058] hsr_slave_0: entered promiscuous mode [ 1163.855589][T17058] hsr_slave_1: entered promiscuous mode [ 1163.856716][T17058] debugfs: 'hsr0' already exists in 'hsr' [ 1163.856740][T17058] Cannot create hsr debugfs directory [ 1165.153796][T12634] Bluetooth: hci9: command tx timeout [ 1165.786266][ T5806] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1165.827493][ T5806] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1165.830768][ T5806] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1165.891435][ T5806] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1165.896457][ T5806] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1166.887648][T17181] chnl_net:caif_netlink_parms(): no params data found [ 1167.034736][T17058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1167.086192][T17058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1167.148520][T17058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1167.198311][T17058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1167.351013][T17181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.359974][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.360273][T17181] bridge_slave_0: entered allmulticast mode [ 1167.368796][T17181] bridge_slave_0: entered promiscuous mode [ 1167.377671][ T5806] Bluetooth: hci9: command tx timeout [ 1167.390923][T17181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.391051][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.391337][T17181] bridge_slave_1: entered allmulticast mode [ 1167.392872][T17181] bridge_slave_1: entered promiscuous mode [ 1167.517618][T17181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.532009][T17181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.650729][T17181] team0: Port device team_slave_0 added [ 1167.664252][T17181] team0: Port device team_slave_1 added [ 1167.758235][T17181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.758253][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.758279][T17181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.769059][T17181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.769075][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.769100][T17181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.918459][T17181] hsr_slave_0: entered promiscuous mode [ 1167.923988][T17181] hsr_slave_1: entered promiscuous mode [ 1167.930312][T17181] debugfs: 'hsr0' already exists in 'hsr' [ 1167.930336][T17181] Cannot create hsr debugfs directory [ 1168.147381][ T5806] Bluetooth: hci10: command tx timeout [ 1168.420865][T17058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.601445][T17058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.643037][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.643244][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.052028][T17181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.137814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.138027][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.531303][T17181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.601477][ T5806] Bluetooth: hci9: command tx timeout [ 1169.990522][T17181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.312537][T17181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.371480][ T5806] Bluetooth: hci10: command tx timeout [ 1170.410877][T17058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.536603][T17058] veth0_vlan: entered promiscuous mode [ 1170.553652][T17058] veth1_vlan: entered promiscuous mode [ 1170.630581][T17058] veth0_macvtap: entered promiscuous mode [ 1170.737156][T17058] veth1_macvtap: entered promiscuous mode [ 1170.919686][T17058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.975350][T17058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.061670][ T1301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.062492][T17181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1171.123068][ T1287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.123608][T17181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1171.157034][ T1287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.160434][ T1287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.160709][T17181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1171.248950][T17181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1171.785206][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.785228][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.825615][ T5806] Bluetooth: hci9: command tx timeout [ 1172.048381][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.048401][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.286098][T17181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.336797][T17181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.382729][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.382903][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.418404][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.418608][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.595921][ T5806] Bluetooth: hci10: command tx timeout [ 1174.021174][T17181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.173035][T17181] veth0_vlan: entered promiscuous mode [ 1174.208588][T17181] veth1_vlan: entered promiscuous mode [ 1174.261621][T17181] veth0_macvtap: entered promiscuous mode [ 1174.275289][T17181] veth1_macvtap: entered promiscuous mode [ 1174.330686][T17181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.371626][T17181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.421689][ T6748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.422512][ T6748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.422779][ T6748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.422817][ T6748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.820920][ T5806] Bluetooth: hci10: command tx timeout [ 1174.964435][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.964456][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.124537][T12634] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1175.143624][T12634] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1175.157970][T12634] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1175.164487][T12634] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1175.176852][T12634] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1175.297795][ T6748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.297816][ T6748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.851580][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 1176.947120][T17483] chnl_net:caif_netlink_parms(): no params data found [ 1177.213893][T17483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.215867][T17483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.216096][T17483] bridge_slave_0: entered allmulticast mode [ 1177.218839][T17483] bridge_slave_0: entered promiscuous mode [ 1177.222903][T17483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.223131][T17483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.223333][T17483] bridge_slave_1: entered allmulticast mode [ 1177.232290][T17483] bridge_slave_1: entered promiscuous mode [ 1177.385815][ T5806] Bluetooth: hci11: command tx timeout [ 1177.435102][T17483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.482138][T17483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.674047][T17483] team0: Port device team_slave_0 added [ 1177.686175][T17483] team0: Port device team_slave_1 added [ 1177.858079][T17483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.858097][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.858123][T17483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.872058][T17483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.872072][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.872098][T17483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.887792][ T1791] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1178.054185][ T1791] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1178.054217][ T1791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.054236][ T1791] usb 4-1: Product: syz [ 1178.054249][ T1791] usb 4-1: Manufacturer: syz [ 1178.054263][ T1791] usb 4-1: SerialNumber: syz [ 1178.060994][ T1791] usb 4-1: config 0 descriptor?? [ 1178.096447][ T1791] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1178.123788][ T1791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1178.124640][ T1791] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1178.124739][ T1791] usb 4-1: media controller created [ 1178.141524][ T1791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.210237][T14333] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1178.297314][T17538] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1178.368850][T14333] usb 3-1: Using ep0 maxpacket: 16 [ 1178.372026][T14333] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7 [ 1178.375088][T14333] usb 3-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 1178.375116][T14333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.375136][T14333] usb 3-1: Product: syz [ 1178.375148][T14333] usb 3-1: Manufacturer: syz [ 1178.375161][T14333] usb 3-1: SerialNumber: syz [ 1178.393012][ T1791] DVB: Unable to find symbol mt352_attach() [ 1178.524737][T12634] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1178.537707][T12634] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1178.539500][T12634] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1178.551451][T12634] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1178.557159][T12634] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1178.706651][T17483] hsr_slave_0: entered promiscuous mode [ 1178.708135][T17483] hsr_slave_1: entered promiscuous mode [ 1178.709107][T17483] debugfs: 'hsr0' already exists in 'hsr' [ 1178.709129][T17483] Cannot create hsr debugfs directory [ 1178.712829][ T1791] DVB: Unable to find symbol nxt6000_attach() [ 1178.712842][ T1791] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1178.717437][ T1791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 1178.719820][ T1791] dvb-usb: schedule remote query interval to 1000 msecs. [ 1178.719840][ T1791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1178.719857][ T1791] dvb-usb: bulk message failed: -22 (7/0) [ 1178.719872][ T1791] dvb-usb: bulk message failed: -22 (7/0) [ 1178.728625][ T1791] usb 4-1: USB disconnect, device number 20 [ 1178.863605][T14333] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1178.864098][T14333] usb 3-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 1179.450964][ T1791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1179.500251][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1179.601550][T14333] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1179.609611][ T5806] Bluetooth: hci11: command tx timeout [ 1179.721246][T17572] udevd[17572]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.723994][T14333] usb 3-1: USB disconnect, device number 6 [ 1180.879832][T17483] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.892356][ T5806] Bluetooth: hci12: command tx timeout [ 1181.448704][T17483] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.833939][ T5806] Bluetooth: hci11: command tx timeout [ 1181.867051][T17483] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.943522][T17566] chnl_net:caif_netlink_parms(): no params data found [ 1181.960433][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3323'. [ 1182.413109][T17483] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.874604][T17566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.880153][T17566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.880442][T17566] bridge_slave_0: entered allmulticast mode [ 1182.883639][T17566] bridge_slave_0: entered promiscuous mode [ 1182.892831][T17566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.893032][T17566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.893633][T17566] bridge_slave_1: entered allmulticast mode [ 1182.896169][T17566] bridge_slave_1: entered promiscuous mode [ 1183.023580][T17566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.026360][T17566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.116276][ T5806] Bluetooth: hci12: command tx timeout [ 1183.249629][T17566] team0: Port device team_slave_0 added [ 1183.273107][T17566] team0: Port device team_slave_1 added [ 1183.409308][T17566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.409324][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.409350][T17566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.411619][T17566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.411633][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.411658][T17566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.824144][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1183.935941][T17757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3355'. [ 1184.057566][ T5806] Bluetooth: hci11: command tx timeout [ 1184.180719][T17566] hsr_slave_0: entered promiscuous mode [ 1184.203620][T17566] hsr_slave_1: entered promiscuous mode [ 1184.215662][T17566] debugfs: 'hsr0' already exists in 'hsr' [ 1184.215690][T17566] Cannot create hsr debugfs directory [ 1184.469619][T17483] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1184.500905][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1184.539335][T17483] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1184.597809][T17483] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1184.670212][T17483] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1184.813289][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1185.340211][ T5806] Bluetooth: hci12: command tx timeout [ 1185.383052][T11507] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1185.492000][T17566] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.550090][T11507] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1185.551458][T11507] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.551484][T11507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1185.551504][T11507] usb 3-1: SerialNumber: syz [ 1185.794212][T17826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3387'. [ 1185.794369][T17826] netlink: 'syz.3.3387': attribute type 2 has an invalid length. [ 1185.978232][T17566] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.096942][T17483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.427248][T17566] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.554389][T17483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.596088][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.603283][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.887637][T17566] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.008779][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.008904][T10956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.574786][ T5806] Bluetooth: hci12: command tx timeout [ 1187.959047][T17566] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1188.018991][T17566] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1188.095942][T17566] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1188.155615][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3411'. [ 1188.174668][T17566] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1188.326383][T11507] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1188.406338][T11507] usb 3-1: USB disconnect, device number 7 [ 1188.425180][T17483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.335583][T17566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.414145][T17566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.436810][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.438448][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.474045][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.476235][T10955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.826752][T17922] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1189.837440][T17483] veth0_vlan: entered promiscuous mode [ 1189.875754][T17483] veth1_vlan: entered promiscuous mode [ 1190.586322][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.586631][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.586764][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.586891][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.587151][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.588355][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.588508][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.588649][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.588789][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.588926][T17929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1190.759633][T17483] veth0_macvtap: entered promiscuous mode [ 1190.883989][T17483] veth1_macvtap: entered promiscuous mode [ 1191.013531][T17483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.054194][T17483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.078059][T17566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.117807][T10960] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.139613][T10960] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.144524][T10960] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.197839][T10960] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.709276][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.709297][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.855511][T10955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.855532][T10955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.172413][T17566] veth0_vlan: entered promiscuous mode [ 1192.223065][T17566] veth1_vlan: entered promiscuous mode [ 1192.371273][T17566] veth0_macvtap: entered promiscuous mode [ 1192.381476][T17983] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3447'. [ 1192.382148][T17983] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3447'. [ 1192.395229][T17566] veth1_macvtap: entered promiscuous mode [ 1192.505429][T17989] program syz.7.3450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1192.511091][T17987] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1192.511091][T17987] program syz.3.3449 not setting count and/or reply_len properly [ 1192.518600][T17566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.531802][T17566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.576081][T10956] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.577416][T10956] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.612234][T10956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.617472][T10956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.769870][T17997] sctp: [Deprecated]: syz.3.3454 (pid 17997) Use of int in maxseg socket option. [ 1192.769870][T17997] Use struct sctp_assoc_value instead [ 1193.584521][T10955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.584543][T10955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.699767][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3466'. [ 1193.732548][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1193.782964][T17449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.782986][T17449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.448253][T18047] sctp: [Deprecated]: syz.7.3475 (pid 18047) Use of int in max_burst socket option. [ 1195.448253][T18047] Use struct sctp_assoc_value instead [ 1197.150538][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3498'. [ 1198.197311][T18125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1198.319585][T18131] usb usb8: usbfs: process 18131 (syz.3.3515) did not claim interface 0 before use [ 1198.329704][T18131] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1198.340045][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1200.402861][T18154] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1201.982848][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1202.325906][T18199] usb usb8: usbfs: process 18199 (syz.5.3546) did not claim interface 0 before use [ 1202.340920][T18199] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1202.343000][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1203.457746][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1206.192555][T18309] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3594'. [ 1207.294848][T18361] batadv_slave_0: entered promiscuous mode [ 1207.298459][T18361] batman_adv: batadv0: Adding interface: macvtap1 [ 1207.298476][T18361] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.298507][T18361] batman_adv: batadv0: Interface activated: macvtap1 [ 1207.690159][T18379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.885030][T18390] pim6reg: entered allmulticast mode [ 1207.901298][T18389] pim6reg: left allmulticast mode [ 1208.410640][T18412] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 1212.085391][T18519] usb usb8: usbfs: process 18519 (syz.7.3698) did not claim interface 0 before use [ 1212.085742][T18519] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1212.087204][T18519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3698'. [ 1214.419261][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1215.921039][T18618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.299767][T12634] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1218.340410][T12634] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1218.342139][T12634] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1218.356821][T12634] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1218.367604][T12634] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1218.713142][T18704] chnl_net:caif_netlink_parms(): no params data found [ 1218.881863][T18704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.881937][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.882090][T18704] bridge_slave_0: entered allmulticast mode [ 1218.883586][T18704] bridge_slave_0: entered promiscuous mode [ 1218.885345][T18704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.885408][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.885536][T18704] bridge_slave_1: entered allmulticast mode [ 1218.887029][T18704] bridge_slave_1: entered promiscuous mode [ 1218.987929][T18704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.991569][T18704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.054712][T18704] team0: Port device team_slave_0 added [ 1219.061039][T18704] team0: Port device team_slave_1 added [ 1219.108071][T18704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.108087][T18704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.108107][T18704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.110283][T18704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.110296][T18704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.110321][T18704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.289758][T18704] hsr_slave_0: entered promiscuous mode [ 1219.291238][T18704] hsr_slave_1: entered promiscuous mode [ 1219.292195][T18704] debugfs: 'hsr0' already exists in 'hsr' [ 1219.292217][T18704] Cannot create hsr debugfs directory [ 1219.649479][T18704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.180710][T18704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.379409][T18704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.580646][ T5806] Bluetooth: hci13: command tx timeout [ 1220.606575][T18704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.705565][T12634] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1220.742956][T12634] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1220.750974][T12634] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1220.766257][T12634] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1220.773300][T12634] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1221.281163][T18704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1221.338875][T18704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1221.393368][T18704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1221.431160][T18704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1221.596663][T18805] chnl_net:caif_netlink_parms(): no params data found [ 1221.809349][T18805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.809543][T18805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.810693][T18805] bridge_slave_0: entered allmulticast mode [ 1221.813359][T18805] bridge_slave_0: entered promiscuous mode [ 1221.843674][T18805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.843813][T18805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.844123][T18805] bridge_slave_1: entered allmulticast mode [ 1221.845705][T18805] bridge_slave_1: entered promiscuous mode [ 1221.880578][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1222.031080][T18805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.063834][T18805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.111037][T18704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.117033][T18805] team0: Port device team_slave_0 added [ 1222.126013][T18805] team0: Port device team_slave_1 added [ 1222.327291][T18805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.327304][T18805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.327317][T18805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.373149][T18704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.374712][T18805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.374726][T18805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.374752][T18805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.536304][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.551339][T17449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.603003][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.603206][T17449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.610253][T18805] hsr_slave_0: entered promiscuous mode [ 1222.611237][T18805] hsr_slave_1: entered promiscuous mode [ 1222.611866][T18805] debugfs: 'hsr0' already exists in 'hsr' [ 1222.614138][T18805] Cannot create hsr debugfs directory [ 1222.804486][ T5806] Bluetooth: hci13: command tx timeout [ 1222.975685][ T5806] Bluetooth: hci14: command tx timeout [ 1223.347789][T18805] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.504004][T18704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.754399][T18805] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.137273][T18805] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.525437][T18805] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.666905][T18704] veth0_vlan: entered promiscuous mode [ 1224.675202][T18704] veth1_vlan: entered promiscuous mode [ 1224.755118][T18704] veth0_macvtap: entered promiscuous mode [ 1224.760727][T18704] veth1_macvtap: entered promiscuous mode [ 1224.791175][T18704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.832725][T18704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.933306][ T1481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.936449][ T1481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.939830][ T1481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.003198][ T1481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.032907][ T5806] Bluetooth: hci13: command tx timeout [ 1225.199720][ T5806] Bluetooth: hci14: command tx timeout [ 1225.337563][T18805] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1225.425728][T18805] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1225.492735][T18805] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1225.549258][T18805] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1225.610497][T17449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.610519][T17449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.729392][T17449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.729414][T17449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.886470][T18805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.939042][T18805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.946513][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.947354][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.985053][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.985192][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.528382][T18805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.717060][T12634] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1226.745097][T12634] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1226.748920][T12634] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1226.764936][T12634] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1226.765603][T12634] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1227.325444][ T5806] Bluetooth: hci13: command tx timeout [ 1227.540589][ T5806] Bluetooth: hci14: command tx timeout [ 1228.093555][T19019] chnl_net:caif_netlink_parms(): no params data found [ 1228.138481][T18805] veth0_vlan: entered promiscuous mode [ 1228.270674][T18805] veth1_vlan: entered promiscuous mode [ 1228.294860][T19019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.298777][T19019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.299063][T19019] bridge_slave_0: entered allmulticast mode [ 1228.323561][T19019] bridge_slave_0: entered promiscuous mode [ 1228.328604][T19019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.346689][T19019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.346951][T19019] bridge_slave_1: entered allmulticast mode [ 1228.348505][T19019] bridge_slave_1: entered promiscuous mode [ 1228.435326][T19019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.451815][T19019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.510007][T19019] team0: Port device team_slave_0 added [ 1228.522901][T19019] team0: Port device team_slave_1 added [ 1228.754650][T19019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.754663][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.754677][T19019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.758145][T19019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.758155][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.758169][T19019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.759644][T18805] veth0_macvtap: entered promiscuous mode [ 1228.825602][T18805] veth1_macvtap: entered promiscuous mode [ 1228.906037][T19019] hsr_slave_0: entered promiscuous mode [ 1228.906942][T19019] hsr_slave_1: entered promiscuous mode [ 1228.908199][T19019] debugfs: 'hsr0' already exists in 'hsr' [ 1228.908214][T19019] Cannot create hsr debugfs directory [ 1228.947044][T18805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.964022][ T5806] Bluetooth: hci15: command tx timeout [ 1229.073106][T18805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.107432][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.108550][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.133859][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.162319][T10032] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.733107][ T5806] Bluetooth: hci14: command tx timeout [ 1229.921505][T19019] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.021182][T10955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.022294][T10955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.328458][T19019] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.413367][T10032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.413387][T10032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.712546][T19019] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.062329][T19019] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.187801][ T5806] Bluetooth: hci15: command tx timeout [ 1231.608549][T19019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1231.641774][T19019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1231.704629][T19019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1231.739332][T19019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1231.962210][T19019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.014414][T19019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.044058][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.049846][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.082882][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.084124][T10955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.567455][T19019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.937140][T19019] veth0_vlan: entered promiscuous mode [ 1232.947745][T19019] veth1_vlan: entered promiscuous mode [ 1232.992383][T19019] veth0_macvtap: entered promiscuous mode [ 1233.010874][T19019] veth1_macvtap: entered promiscuous mode [ 1233.038470][T19019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.048920][T19019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.084136][ T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.084334][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.084520][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.090541][ T135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.414970][ T5806] Bluetooth: hci15: command tx timeout [ 1233.593532][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.593555][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.678104][T10960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.678124][T10960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.231571][T12634] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1234.251743][T12634] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1234.256657][T12634] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1234.273040][T12634] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1234.273898][T12634] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1234.491571][ T5812] kernel read not supported for file /dsp (pid: 5812 comm: kworker/1:5) [ 1234.793256][T19266] chnl_net:caif_netlink_parms(): no params data found [ 1235.028305][T19301] program syz.6.4042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.106015][T19266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.106134][T19266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.106474][T19266] bridge_slave_0: entered allmulticast mode [ 1235.109324][T19266] bridge_slave_0: entered promiscuous mode [ 1235.138842][T19266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.138953][T19266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.139268][T19266] bridge_slave_1: entered allmulticast mode [ 1235.142072][T19266] bridge_slave_1: entered promiscuous mode [ 1235.223952][T19266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.234098][T19266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.318806][T19266] team0: Port device team_slave_0 added [ 1235.321346][T19266] team0: Port device team_slave_1 added [ 1235.393497][T19266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.393509][T19266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.393523][T19266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.394921][T19266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.394930][T19266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.394943][T19266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.530424][T19266] hsr_slave_0: entered promiscuous mode [ 1235.531436][T19266] hsr_slave_1: entered promiscuous mode [ 1235.532046][T19266] debugfs: 'hsr0' already exists in 'hsr' [ 1235.532061][T19266] Cannot create hsr debugfs directory [ 1235.624160][T11507] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1235.639340][ T5806] Bluetooth: hci15: command tx timeout [ 1235.788664][T11507] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1235.788695][T11507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.794242][T11507] usb 7-1: config 0 descriptor?? [ 1235.825441][T11507] cp210x 7-1:0.0: cp210x converter detected [ 1236.235730][T11507] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1236.276583][T11507] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1236.492021][ T5806] Bluetooth: hci16: command tx timeout [ 1236.514524][T12261] usb 7-1: USB disconnect, device number 22 [ 1236.522773][T12261] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1236.564203][T19266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.667202][T12261] cp210x 7-1:0.0: device disconnected [ 1236.890751][T19266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.188272][T19266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.649984][T19266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.132783][T19266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1238.171214][T19266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1238.194865][T19266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1238.240063][T19266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1238.449092][T19266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.474439][T19266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.488869][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.495221][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.518868][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.527805][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.714664][ T5806] Bluetooth: hci16: command tx timeout [ 1238.954413][T19266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.149304][T19266] veth0_vlan: entered promiscuous mode [ 1239.176078][T19266] veth1_vlan: entered promiscuous mode [ 1239.257528][T19266] veth0_macvtap: entered promiscuous mode [ 1239.283449][T19266] veth1_macvtap: entered promiscuous mode [ 1239.319282][T19266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.383805][T19266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.411028][T10960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.418926][T10960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.419178][T10960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.419214][T10960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.010029][T10032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.010052][T10032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.156081][T10960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.156102][T10960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.938669][ T5806] Bluetooth: hci16: command tx timeout [ 1240.991582][T11507] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1241.155212][T11507] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.155237][T11507] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1241.156461][T11507] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1241.156488][T11507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1241.156507][T11507] usb 1-1: SerialNumber: syz [ 1241.460383][T11507] usb 1-1: 0:2 : does not exist [ 1241.471982][T11507] usb 1-1: 0:0: failed to get current value for ch 0 (-22) [ 1241.541696][T11507] usb 1-1: USB disconnect, device number 4 [ 1241.621867][T19024] udevd[19024]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.654605][T12261] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1241.846949][T12261] usb 7-1: Using ep0 maxpacket: 32 [ 1241.852683][T12261] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1241.854515][T12261] usb 7-1: config 196 has an invalid interface number: 242 but max is 0 [ 1241.854540][T12261] usb 7-1: config 196 has no interface number 0 [ 1241.854583][T12261] usb 7-1: config 196 interface 242 altsetting 9 endpoint 0x1 has invalid maxpacket 5647, setting to 64 [ 1241.854609][T12261] usb 7-1: config 196 interface 242 altsetting 9 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1241.854633][T12261] usb 7-1: config 196 interface 242 altsetting 9 endpoint 0x83 has invalid maxpacket 35642, setting to 1024 [ 1241.854658][T12261] usb 7-1: config 196 interface 242 altsetting 9 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1241.854680][T12261] usb 7-1: config 196 interface 242 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1241.854701][T12261] usb 7-1: config 196 interface 242 has no altsetting 0 [ 1241.857053][T12261] usb 7-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=25.65 [ 1241.857078][T12261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.857089][T12261] usb 7-1: Product: syz [ 1241.857096][T12261] usb 7-1: Manufacturer: syz [ 1241.857103][T12261] usb 7-1: SerialNumber: syz [ 1241.901272][T19529] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1242.144029][T12261] keyspan 7-1:196.242: Keyspan 1 port adapter converter detected [ 1242.144232][T12261] keyspan 7-1:196.242: found no endpoint descriptor for endpoint 84 [ 1242.145403][T12261] keyspan 7-1:196.242: found no endpoint descriptor for endpoint 81 [ 1242.145449][T12261] keyspan 7-1:196.242: found no endpoint descriptor for endpoint 82 [ 1242.145493][T12261] keyspan 7-1:196.242: unsupported endpoint type 0 [ 1242.145536][T12261] keyspan 7-1:196.242: found no endpoint descriptor for endpoint 2 [ 1242.145597][T12261] keyspan 7-1:196.242: found no endpoint descriptor for endpoint 3 [ 1242.166340][T12261] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1242.259979][T12261] usb 7-1: USB disconnect, device number 23 [ 1242.278439][T12261] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1242.279495][T12261] keyspan 7-1:196.242: device disconnected [ 1243.162357][ T5806] Bluetooth: hci16: command tx timeout [ 1243.707416][ T5812] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1243.867674][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1243.870556][ T5812] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1243.870582][ T5812] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1243.870604][ T5812] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1243.870627][ T5812] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.870666][ T5812] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1243.870686][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.119650][T12634] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1244.140016][T12634] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1244.157628][T12634] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1244.159215][ T5812] usb 1-1: GET_CAPABILITIES returned 0 [ 1244.159258][ T5812] usbtmc 1-1:16.0: can't read capabilities [ 1244.175775][T12634] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1244.186705][T12634] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1244.387706][T11507] usb 1-1: USB disconnect, device number 5 [ 1244.909753][T19630] chnl_net:caif_netlink_parms(): no params data found [ 1245.263353][T19630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.263639][T19630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.263881][T19630] bridge_slave_0: entered allmulticast mode [ 1245.266705][T19630] bridge_slave_0: entered promiscuous mode [ 1245.298922][T19630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.299128][T19630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.299399][T19630] bridge_slave_1: entered allmulticast mode [ 1245.322976][T19630] bridge_slave_1: entered promiscuous mode [ 1245.407691][T19630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.412059][T19630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.483665][T19630] team0: Port device team_slave_0 added [ 1245.487866][T19630] team0: Port device team_slave_1 added [ 1245.543553][T19630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.543570][T19630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.543596][T19630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.545917][T19630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.545931][T19630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.545957][T19630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.344282][T19630] hsr_slave_0: entered promiscuous mode [ 1246.345955][T19630] hsr_slave_1: entered promiscuous mode [ 1246.347231][T19630] debugfs: 'hsr0' already exists in 'hsr' [ 1246.347254][T19630] Cannot create hsr debugfs directory [ 1246.412341][ T5806] Bluetooth: hci17: command tx timeout [ 1247.222863][T19630] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.604520][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1247.604555][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1247.762817][T19630] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.208914][T19630] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.501031][T12634] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1248.505152][T12634] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1248.537617][T12634] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1248.538848][T12634] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1248.567945][T19794] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1248.648545][ T5806] Bluetooth: hci17: command tx timeout [ 1248.832966][T19630] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.995409][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4281'. [ 1250.057206][T19792] chnl_net:caif_netlink_parms(): no params data found [ 1250.127340][T19630] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1250.219927][T19630] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1250.316418][T19630] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1250.400361][T19630] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1250.860175][ T5805] Bluetooth: hci17: command tx timeout [ 1250.860184][T19794] Bluetooth: hci18: command tx timeout [ 1250.974690][T19792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.974811][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.975170][T19792] bridge_slave_0: entered allmulticast mode [ 1250.986838][T19792] bridge_slave_0: entered promiscuous mode [ 1251.006533][T19792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.006644][T19792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.006791][T19792] bridge_slave_1: entered allmulticast mode [ 1251.008305][T19792] bridge_slave_1: entered promiscuous mode [ 1251.228729][T19792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.233727][T19792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.360592][T19792] team0: Port device team_slave_0 added [ 1251.392750][T19792] team0: Port device team_slave_1 added [ 1251.547496][T19794] Bluetooth: hci5: command 0x0406 tx timeout [ 1252.336322][T19792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.336339][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.336365][T19792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.348983][T19792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.349000][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.349025][T19792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.510916][T19792] hsr_slave_0: entered promiscuous mode [ 1252.511934][T19792] hsr_slave_1: entered promiscuous mode [ 1252.512586][T19792] debugfs: 'hsr0' already exists in 'hsr' [ 1252.512601][T19792] Cannot create hsr debugfs directory [ 1252.528868][T19630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.991042][T19630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.084374][ T5806] Bluetooth: hci18: command tx timeout [ 1253.084402][ T5806] Bluetooth: hci17: command tx timeout [ 1253.152292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.152436][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.277149][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.277266][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.698757][T19792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.237854][T19792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.670000][T19792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.318784][ T5806] Bluetooth: hci18: command tx timeout [ 1256.950336][ T5806] Bluetooth: hci6: command 0x0406 tx timeout [ 1257.531914][ T5806] Bluetooth: hci18: command tx timeout [ 1257.797658][T19792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.934628][T19630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.520666][T19792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1258.629469][T19792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1258.676792][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.681245][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.681331][T19792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1258.753350][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.753657][T19792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1258.835978][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.026984][T19630] veth0_vlan: entered promiscuous mode [ 1259.089275][T19630] veth1_vlan: entered promiscuous mode [ 1259.160751][T20029] usb usb8: usbfs: process 20029 (syz.6.4370) did not claim interface 0 before use [ 1259.161046][T20029] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1259.164369][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4370'. [ 1259.241663][T19630] veth0_macvtap: entered promiscuous mode [ 1259.256886][T19630] veth1_macvtap: entered promiscuous mode [ 1260.485545][T19630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.501248][T19630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.610014][T19792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.620248][ T135] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.625170][ T135] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.651037][ T135] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.670275][ T135] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.817811][T19792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.999747][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.999943][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.116117][ T4159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.116261][ T4159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.198122][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.198143][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.396900][T10956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.396921][T10956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.944045][T19792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.120766][T19792] veth0_vlan: entered promiscuous mode [ 1262.139460][T19792] veth1_vlan: entered promiscuous mode [ 1262.340122][T19792] veth0_macvtap: entered promiscuous mode [ 1262.356751][T19792] veth1_macvtap: entered promiscuous mode [ 1262.400419][T19792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.403661][T19792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.449659][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.452193][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.453927][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.460570][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.668936][T19794] Bluetooth: hci7: command 0x0406 tx timeout [ 1263.156231][T10032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.156252][T10032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.417416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.417437][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.446621][T20091] tap0: tun_chr_ioctl cmd 35111 [ 1263.929584][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4404'. [ 1265.465503][ T1791] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1265.573756][T20164] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4430'. [ 1265.628366][ T1791] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1265.628433][ T1791] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1265.628457][ T1791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1265.628480][ T1791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1265.628506][ T1791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1265.628581][ T1791] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1265.628603][ T1791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.639037][ T1791] usb 3-1: config 0 descriptor?? [ 1265.640039][T20148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1266.080527][ T1791] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1266.080564][ T1791] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1266.080592][ T1791] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1266.080619][ T1791] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1266.080645][ T1791] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1266.080670][ T1791] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1266.250920][ T1791] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1266.268850][T20182] tap0: tun_chr_ioctl cmd 1074025688 [ 1266.417670][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4441'. [ 1266.538152][ T1791] usb 3-1: USB disconnect, device number 8 [ 1266.818141][T20202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.465819][T19794] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1269.483001][T19794] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1269.495653][T19794] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1269.510805][T19794] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1269.511494][T19794] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1269.927954][T20301] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 1271.731058][ T5806] Bluetooth: hci19: command tx timeout [ 1271.779874][T20282] chnl_net:caif_netlink_parms(): no params data found [ 1272.032315][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4524'. [ 1272.228626][T20282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.263026][T20282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.263753][T20282] bridge_slave_0: entered allmulticast mode [ 1272.304224][T20282] bridge_slave_0: entered promiscuous mode [ 1272.326398][T20282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.327114][T20282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.328873][T20282] bridge_slave_1: entered allmulticast mode [ 1272.360260][T20282] bridge_slave_1: entered promiscuous mode [ 1272.719599][T20282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.724871][T20282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.956270][T20282] team0: Port device team_slave_0 added [ 1272.992645][T20282] team0: Port device team_slave_1 added [ 1273.207984][T20282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.208001][T20282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.208027][T20282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.210395][T20282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.210408][T20282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.210432][T20282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.355973][ T5806] Bluetooth: hci8: command 0x0406 tx timeout [ 1273.528257][T20282] hsr_slave_0: entered promiscuous mode [ 1273.530059][T20282] hsr_slave_1: entered promiscuous mode [ 1273.531092][T20282] debugfs: 'hsr0' already exists in 'hsr' [ 1273.531114][T20282] Cannot create hsr debugfs directory [ 1273.965280][T19794] Bluetooth: hci19: command tx timeout [ 1275.028724][T20282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.239207][ T37] INFO: task syz-executor:10286 blocked for more than 143 seconds. [ 1275.239232][ T37] Tainted: G L syzkaller #0 [ 1275.239243][ T37] "echo 0 > /proc/sys/kerne[ 1275.239243][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1275.239251][ T37] task:syz-executor state:D stack:22560 pid:10286 tgid:10286 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1275.239308][ T37] Call Trace: [ 1275.239314][ T37] [ 1275.239327][ T37] __schedule+0x1553/0x5240 [ 1275.239479][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.239504][ T37] ? __pfx___schedule+0x10/0x10 [ 1275.239550][ T37] rt_mutex_schedule+0x76/0xf0 [ 1275.239586][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1275.239651][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1275.239675][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1275.239697][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1275.239736][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1275.239867][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1275.239895][ T37] mutex_lock_nested+0x168/0x1d0 [ 1275.239921][ T37] nfsd_shutdown_threads+0x4e/0xd0 [ 1275.239951][ T37] nfsd_umount+0x41/0x60 [ 1275.239972][ T37] deactivate_locked_super+0xbc/0x130 [ 1275.240062][ T37] cleanup_mnt+0x437/0x4d0 [ 1275.240138][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1275.240168][ T37] task_work_run+0x1d9/0x270 [ 1275.240195][ T37] ? __pfx_task_work_run+0x10/0x10 [ 1275.240227][ T37] exit_to_user_mode_loop+0xed/0x480 [ 1275.240257][ T37] ? rcu_is_watching+0x15/0xb0 [ 1275.240283][ T37] do_syscall_64+0x32d/0xf80 [ 1275.240310][ T37] ? trace_irq_disable+0x3b/0x150 [ 1275.240333][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.240353][ T37] ? clear_bhb_loop+0x40/0x90 [ 1275.240378][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.240398][ T37] RIP: 0033:0x7fbaf24dd9d7 [ 1275.240416][ T37] RSP: 002b:00007ffdde9d08e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1275.240437][ T37] RAX: 0000000000000000 RBX: 00007fbaf2571f90 RCX: 00007fbaf24dd9d7 [ 1275.240452][ T37] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdde9d09a0 [ 1275.240464][ T37] RBP: 00007ffdde9d09a0 R08: 00007ffdde9d19a0 R09: 00000000ffffffff [ 1275.240478][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdde9d1a30 [ 1275.240491][ T37] R13: 00007fbaf2571f90 R14: 0000000000106058 R15: 00007ffdde9d1a70 [ 1275.240528][ T37] [ 1275.240558][ T37] INFO: task syz-executor:15079 blocked for more than 143 seconds. [ 1275.240573][ T37] Tainted: G L syzkaller #0 [ 1275.240584][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1275.240591][ T37] task:syz-executor state:D stack:22120 pid:15079 tgid:15079 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1275.240643][ T37] Call Trace: [ 1275.240650][ T37] [ 1275.240661][ T37] __schedule+0x1553/0x5240 [ 1275.240709][ T37] ? __pfx___schedule+0x10/0x10 [ 1275.240744][ T37] rt_mutex_schedule+0x76/0xf0 [ 1275.240764][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1275.240793][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1275.240817][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1275.240840][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1275.240863][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1275.240902][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1275.240939][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1275.240967][ T37] mutex_lock_nested+0x168/0x1d0 [ 1275.240992][ T37] nfsd_shutdown_threads+0x4e/0xd0 [ 1275.241023][ T37] nfsd_umount+0x41/0x60 [ 1275.241044][ T37] deactivate_locked_super+0xbc/0x130 [ 1275.241072][ T37] cleanup_mnt+0x437/0x4d0 [ 1275.241099][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1275.241129][ T37] task_work_run+0x1d9/0x270 [ 1275.241154][ T37] ? __pfx_task_work_run+0x10/0x10 [ 1275.241187][ T37] exit_to_user_mode_loop+0xed/0x480 [ 1275.241215][ T37] ? rcu_is_watching+0x15/0xb0 [ 1275.241241][ T37] do_syscall_64+0x32d/0xf80 [ 1275.241266][ T37] ? trace_irq_disable+0x3b/0x150 [ 1275.241287][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.241303][ T37] ? clear_bhb_loop+0x40/0x90 [ 1275.241324][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.241341][ T37] RIP: 0033:0x7f624993d9d7 [ 1275.241358][ T37] RSP: 002b:00007ffc888240c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1275.241377][ T37] RAX: 0000000000000000 RBX: 00007f62499d1f90 RCX: 00007f624993d9d7 [ 1275.241391][ T37] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc88824180 [ 1275.241404][ T37] RBP: 00007ffc88824180 R08: 00007ffc88825180 R09: 00000000ffffffff [ 1275.241418][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc88825210 [ 1275.241431][ T37] R13: 00007f62499d1f90 R14: 0000000000104b92 R15: 00007ffc88825250 [ 1275.241463][ T37] [ 1275.241477][ T37] INFO: task syz.4.2682:15864 blocked for more than 143 seconds. [ 1275.241494][ T37] Tainted: G L syzkaller #0 [ 1275.241505][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1275.241514][ T37] task:syz.4.2682 state:D stack:24480 pid:15864 tgid:15863 ppid:5800 task_flags:0x400140 flags:0x00080002 [ 1275.241580][ T37] Call Trace: [ 1275.241586][ T37] [ 1275.241595][ T37] __schedule+0x1553/0x5240 [ 1275.241638][ T37] ? __pfx___schedule+0x10/0x10 [ 1275.241676][ T37] rt_mutex_schedule+0x76/0xf0 [ 1275.241700][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1275.241733][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1275.241755][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1275.241778][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1275.241799][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1275.241833][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1275.241865][ T37] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1275.241889][ T37] mutex_lock_nested+0x168/0x1d0 [ 1275.241915][ T37] nfsd_shutdown_threads+0x4e/0xd0 [ 1275.241943][ T37] nfsd_umount+0x41/0x60 [ 1275.241962][ T37] deactivate_locked_super+0xbc/0x130 [ 1275.241989][ T37] cleanup_mnt+0x437/0x4d0 [ 1275.242015][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1275.242045][ T37] task_work_run+0x1d9/0x270 [ 1275.242069][ T37] ? __pfx_task_work_run+0x10/0x10 [ 1275.242101][ T37] exit_to_user_mode_loop+0xed/0x480 [ 1275.242127][ T37] ? rcu_is_watching+0x15/0xb0 [ 1275.242151][ T37] do_syscall_64+0x32d/0xf80 [ 1275.242174][ T37] ? trace_irq_disable+0x3b/0x150 [ 1275.242193][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.242213][ T37] ? clear_bhb_loop+0x40/0x90 [ 1275.242236][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.242254][ T37] RIP: 0033:0x7f0253edc799 [ 1275.242270][ T37] RSP: 002b:00007f0252136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1275.242289][ T37] RAX: fffffffffffffffe RBX: 00007f0254155fa0 RCX: 00007f0253edc799 [ 1275.242303][ T37] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 1275.242315][ T37] RBP: 00007f0253f72bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1275.242327][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.242338][ T37] R13: 00007f0254156038 R14: 00007f0254155fa0 R15: 00007ffe2efb5a48 [ 1275.242370][ T37] [ 1275.242472][ T37] [ 1275.242472][ T37] Showing all locks held in the system: [ 1275.242483][ T37] 4 locks held by rcuc/0/20: [ 1275.242497][ T37] 1 lock held by khungtaskd/37: [ 1275.242507][ T37] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1275.242584][ T37] 2 locks held by kworker/u8:2/39: [ 1275.242620][ T37] 1 lock held by udevd/5165: [ 1275.242631][ T37] 2 locks held by getty/5562: [ 1275.242641][ T37] #0: ffff8880321d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1275.242757][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1275.242840][ T37] 2 locks held by syz-executor/10286: [ 1275.242851][ T37] #0: ffff88805e4740d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.242906][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.242963][ T37] 2 locks held by syz-executor/10398: [ 1275.242973][ T37] #0: ffff88805a67c0d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243026][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243083][ T37] 5 locks held by kworker/u8:22/10960: [ 1275.243095][ T37] 2 locks held by syz.3.2119/14588: [ 1275.243105][ T37] #0: ffffffff8f1c8820 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1275.243201][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1690 [ 1275.243247][ T37] 2 locks held by syz-executor/15079: [ 1275.243258][ T37] #0: ffff88805bdce0d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243321][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243377][ T37] 2 locks held by syz-executor/15857: [ 1275.243387][ T37] #0: ffff8880257760d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243446][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243500][ T37] 2 locks held by syz.4.2682/15864: [ 1275.243509][ T37] #0: ffff88805d4480d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243568][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243623][ T37] 2 locks held by syz-executor/16062: [ 1275.243634][ T37] #0: ffff88802d7540d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243687][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243749][ T37] 2 locks held by syz-executor/16329: [ 1275.243760][ T37] #0: ffff8880608600d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243811][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243867][ T37] 2 locks held by syz-executor/17058: [ 1275.243878][ T37] #0: ffff88808816c0d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.243931][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.243993][ T37] 2 locks held by syz-executor/17181: [ 1275.244004][ T37] #0: ffff888037c080d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.244056][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.244112][ T37] 4 locks held by kworker/u8:6/17449: [ 1275.244124][ T37] 2 locks held by syz-executor/17483: [ 1275.244134][ T37] #0: ffff888037c240d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.244187][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.244242][ T37] 2 locks held by syz-executor/17566: [ 1275.244254][ T37] #0: ffff8880337fe0d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.244308][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.244372][ T37] 2 locks held by syz-executor/18704: [ 1275.244383][ T37] #0: ffff8880345de0d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.244436][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.244487][ T37] 2 locks held by syz-executor/18805: [ 1275.244498][ T37] #0: ffff888073a740d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.244560][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.244619][ T37] 2 locks held by syz-executor/19266: [ 1275.244629][ T37] #0: ffff888037b440d0 (&type->s_umount_key#97){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1275.244682][ T37] #1: ffffffff8e0e7078 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1275.244738][ T37] 5 locks held by syz-executor/19630: [ 1275.244752][ T37] 7 locks held by syz-executor/20282: [ 1275.244762][ T37] #0: ffff888036f94480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1275.244849][ T37] #1: ffff88806dfb1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1275.257592][ T37] #2: ffff888027fc0b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1275.257678][ T37] #3: ffffffff8e9c7dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1275.257838][ T37] #4: ffff88803550a0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1275.257931][ T37] #5: ffff8880244b0300 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1275.257994][ T37] #6: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1275.258045][ T37] 1 lock held by syz.6.4567/20467: [ 1275.258057][ T37] #0: ffff88813fe17d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 1275.258135][ T37] [ 1275.258140][ T37] ============================================= [ 1275.258140][ T37] [ 1275.258154][ T37] NMI backtrace for cpu 0 [ 1275.258171][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1275.258197][ T37] Tainted: [L]=SOFTLOCKUP [ 1275.258203][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1275.258215][ T37] Call Trace: [ 1275.258222][ T37] [ 1275.258230][ T37] dump_stack_lvl+0xe8/0x150 [ 1275.258260][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1275.258317][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1275.258356][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1275.258380][ T37] sys_info+0x135/0x170 [ 1275.258407][ T37] watchdog+0xfd9/0x1030 [ 1275.258436][ T37] ? watchdog+0x21a/0x1030 [ 1275.258464][ T37] kthread+0x388/0x470 [ 1275.258484][ T37] ? __pfx_watchdog+0x10/0x10 [ 1275.258504][ T37] ? __pfx_kthread+0x10/0x10 [ 1275.258524][ T37] ret_from_fork+0x51e/0xb90 [ 1275.258564][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1275.258588][ T37] ? __switch_to+0xc7d/0x1450 [ 1275.258624][ T37] ? __pfx_kthread+0x10/0x10 [ 1275.258644][ T37] ret_from_fork_asm+0x1a/0x30 [ 1275.258677][ T37] [ 1275.258693][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1275.258720][ C1] NMI backtrace for cpu 1 [ 1275.258736][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1275.258760][ C1] Tainted: [L]=SOFTLOCKUP [ 1275.258766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1275.258777][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1275.258851][ C1] Code: e8 de 12 95 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 26 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 78 f6 05 cc 44 89 f9 80 e1 07 [ 1275.258867][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1275.258880][ C1] RAX: 1ffffffff3329e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1275.258891][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1275.258901][ C1] RBP: ffffffff9994f730 R08: 0000000000000000 R09: 0000000000000000 [ 1275.258911][ C1] R10: dffffc0000000000 R11: ffffffff852f3940 R12: dffffc0000000000 [ 1275.258924][ C1] R13: 0000000000000000 R14: ffffffff9994f4a0 R15: 0000000000000000 [ 1275.258936][ C1] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 1275.258950][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1275.258962][ C1] CR2: 000055557720ba28 CR3: 0000000038c32000 CR4: 00000000003526f0 [ 1275.258977][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1275.258988][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1275.258999][ C1] Call Trace: [ 1275.259005][ C1] [ 1275.259014][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1275.259065][ C1] serial8250_console_write+0x120d/0x1b90 [ 1275.259093][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1275.259118][ C1] ? console_flush_one_record+0x48f/0xb90 [ 1275.259147][ C1] console_flush_one_record+0x68b/0xb90 [ 1275.259175][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1275.259203][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1275.259230][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1275.259256][ C1] legacy_kthread_func+0x1b6/0x250 [ 1275.259282][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1275.259308][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1275.259334][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1275.259364][ C1] kthread+0x388/0x470 [ 1275.259380][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1275.259404][ C1] ? __pfx_kthread+0x10/0x10 [ 1275.259422][ C1] ret_from_fork+0x51e/0xb90 [ 1275.259446][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1275.259468][ C1] ? __switch_to+0xc7d/0x1450 [ 1275.259489][ C1] ? __pfx_kthread+0x10/0x10 [ 1275.259506][ C1] ret_from_fork_asm+0x1a/0x30 [ 1275.259529][ C1] [ 1275.267648][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1275.267669][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1275.267696][ T37] Tainted: [L]=SOFTLOCKUP [ 1275.267703][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1275.267715][ T37] Call Trace: [ 1275.267723][ T37] [ 1275.267731][ T37] vpanic+0x56c/0xa60 [ 1275.267766][ T37] ? __pfx___schedule+0x10/0x10 [ 1275.267791][ T37] ? __pfx_vpanic+0x10/0x10 [ 1275.267827][ T37] panic+0xc5/0xd0 [ 1275.267853][ T37] ? __pfx_panic+0x10/0x10 [ 1275.267882][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 1275.267910][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1275.267935][ T37] watchdog+0x1023/0x1030 [ 1275.267963][ T37] ? watchdog+0x21a/0x1030 [ 1275.267992][ T37] kthread+0x388/0x470 [ 1275.268013][ T37] ? __pfx_watchdog+0x10/0x10 [ 1275.268033][ T37] ? __pfx_kthread+0x10/0x10 [ 1275.268053][ T37] ret_from_fork+0x51e/0xb90 [ 1275.268084][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1275.268107][ T37] ? __switch_to+0xc7d/0x1450 [ 1275.268134][ T37] ? __pfx_kthread+0x10/0x10 [ 1275.268154][ T37] ret_from_fork_asm+0x1a/0x30 [ 1275.268187][ T37] [ 1275.268698][ T37] Kernel Offset: disabled