last executing test programs: 20m1.347663863s ago: executing program 32 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1b7) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) io_setup(0xde1, &(0x7f0000000040)) 14m34.962086317s ago: executing program 2 (id=649): socket(0x11, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe8, 0x7ffffdbd}]}) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 14m34.159235188s ago: executing program 5 (id=659): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m32.928589466s ago: executing program 4 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@random={'btrfs.', '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81'}, 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x100000001, &(0x7f0000006680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="244000000104124a2e740000000000000200000005000100010000000800054007010000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) 14m32.85662781s ago: executing program 2 (id=666): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x129642, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 14m32.446886071s ago: executing program 2 (id=667): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000002a82, 0x0) read(r0, &(0x7f0000000480)=""/4096, 0x1000) 14m32.350091206s ago: executing program 2 (id=668): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000002600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000026c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x3f81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002740), 0x0, 0x0) read$msr(r3, &(0x7f0000002780)=""/102392, 0x18ff8) r4 = fanotify_init(0x4, 0x802) fanotify_mark(r4, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c, 0x80800) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 14m30.704869441s ago: executing program 5 (id=670): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) 14m30.536949629s ago: executing program 1 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 14m30.40834685s ago: executing program 4 (id=672): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000006c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/176, 0x0, 0xffff1000}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000800)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000880)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000008c0)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000900)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 14m30.244832439s ago: executing program 1 (id=673): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x101783) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x181041, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 14m30.215305494s ago: executing program 0 (id=674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x1a, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 14m25.069959552s ago: executing program 1 (id=675): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 14m20.514733879s ago: executing program 0 (id=676): socket(0x11, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe8, 0x7ffffdbd}]}) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 14m20.337717084s ago: executing program 2 (id=677): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x129642, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 14m20.217077341s ago: executing program 5 (id=678): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000002a82, 0x0) read(r0, &(0x7f0000000480)=""/4096, 0x1000) 14m20.097008916s ago: executing program 4 (id=679): prlimit64(0x0, 0xe, &(0x7f0000004800)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000004880)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe000001a}) read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000034c0)={0x60000018}) epoll_pwait(r1, &(0x7f0000003500)=[{}], 0x1, 0xff4, 0x0, 0x0) 14m19.84146152s ago: executing program 0 (id=680): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m19.784876283s ago: executing program 5 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc094}, 0x808) sendmsg$NFT_BATCH(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 14m19.605796638s ago: executing program 4 (id=682): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(0x0, 0x2, 0x842) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000003c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, r3, 0x72b}, 0x71}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4) 14m19.592530116s ago: executing program 1 (id=683): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3, 0x1500}]}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000040)=""/150, 0x36, 0x96, 0x1}, 0x28) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14m18.301456924s ago: executing program 5 (id=684): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$tipc(r0, &(0x7f0000002900)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x204}}, 0x10) openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x123482, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000003180)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000031c0), 0x2, 0x1) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x0, 0x9, 0x3, &(0x7f0000000000)={0x21, "adedd4611800b0df06658ecfb540f258bf8d2321a2ab92784f9096193e242e4d34"}}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 14m18.288897776s ago: executing program 1 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000140001002bbd7000fadbdf250e0801ff", @ANYRES32=0x0, @ANYBLOB="14000200ff01000000000000000000000000000108"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c65) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r4, r4, 0x0, 0x8000000f3aa6ea) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched_retired(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {0x4, 0xfff1}, {0x9, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 14m18.032498466s ago: executing program 4 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) 14m17.400831223s ago: executing program 4 (id=687): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000002600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000026c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x3f81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002740), 0x0, 0x0) read$msr(r3, &(0x7f0000002780)=""/102392, 0x18ff8) r4 = fanotify_init(0x4, 0x802) fanotify_mark(r4, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c, 0x80800) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 14m15.367396998s ago: executing program 0 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000001c0)='10', 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') socket$inet6(0xa, 0x2, 0x0) 14m15.104422896s ago: executing program 2 (id=689): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000006c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/176, 0x0, 0xffff1000}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000800)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000880)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000008c0)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000900)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 14m14.55259014s ago: executing program 0 (id=690): socket(0x11, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe8, 0x7ffffdbd}]}) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 14m14.551984355s ago: executing program 5 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, 0x0, 0x0) 14m9.332036648s ago: executing program 0 (id=692): prlimit64(0x0, 0xe, &(0x7f0000004800)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000004880)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe000001a}) read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000034c0)={0x60000018}) epoll_pwait(r1, &(0x7f0000003500)=[{}], 0x1, 0xff4, 0x0, 0x0) 14m7.942520597s ago: executing program 1 (id=693): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 14m1.168415771s ago: executing program 33 (id=687): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000002600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000026c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x3f81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002740), 0x0, 0x0) read$msr(r3, &(0x7f0000002780)=""/102392, 0x18ff8) r4 = fanotify_init(0x4, 0x802) fanotify_mark(r4, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c, 0x80800) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 13m57.160253803s ago: executing program 34 (id=689): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000006c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/176, 0x0, 0xffff1000}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000800)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000880)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000008c0)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000900)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 13m39.779884008s ago: executing program 35 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, 0x0, 0x0) 13m39.19419174s ago: executing program 36 (id=692): prlimit64(0x0, 0xe, &(0x7f0000004800)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000004880)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004980), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe000001a}) read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000034c0)={0x60000018}) epoll_pwait(r1, &(0x7f0000003500)=[{}], 0x1, 0xff4, 0x0, 0x0) 13m38.854321141s ago: executing program 37 (id=693): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 37.939164271s ago: executing program 3 (id=1743): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005280)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x18}}, 0x4000) 37.84414668s ago: executing program 3 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, 0x0, &(0x7f00000010c0)) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000f00), 0x56) sendmsg$kcm(r6, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 34.99482011s ago: executing program 3 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)={0x18, r1, 0x301, 0x70bd25, 0x4, {0x4e}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x18}}, 0x20000884) 34.564784587s ago: executing program 3 (id=1747): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 34.231971267s ago: executing program 3 (id=1749): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) 33.654828467s ago: executing program 3 (id=1750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ppoll(&(0x7f0000000100)=[{r0, 0x1044}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0xf0f046}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) tkill(r2, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x1, r8}, 0xc) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000280)=0xb, 0x4) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000008060300000000000000000003000000090000000900020073797a31000000797a31000100000900020073797a32000000000500010007000000050001000700"/92], 0x5c}, 0x1, 0x0, 0x0, 0x44010}, 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/191, 0xbf}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/1, 0xd}, 0x3}], 0x400000000000177, 0x3, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 32.953391415s ago: executing program 8 (id=1752): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b700000002"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xd, 0x0, &(0x7f0000000500)="0100000500cd960000c85df0e9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000003c0)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000480)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r2, &(0x7f00000006c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08000500070000004b2f05eea241efb4cc45f51d3f99d6795a1e551dd971dd5d3503295bb83035642e152be01be8a31a9c34cf2ec379310adf5102e860c511e7e6dae0e61a8086dc5637d44d056d0764d2346f0465730dbe00b94a662d126b06821a40b9bd5a748a8d886d3821e777e79e45583c75ee19df30b0701528efed06ce7c6852fb329b"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000001800000008000300", @ANYRES32=r5, @ANYBLOB="0af4050008021100"], 0x28}}, 0x0) listen(0xffffffffffffffff, 0xfffffffc) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r7, 0x89e0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x1e, 0xe, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57c, 0x0, 0x0, 0x0, 0x13}, [@call={0x85, 0x0, 0x0, 0xc1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0xd, 0x3, 0x2, 0x30, 0xfffffffffffffffc}, @tail_call, @map_fd={0x18, 0x9}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0xff, &(0x7f0000000940)=""/255, 0x41100, 0x80, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001ac0)={0x2, 0x2, 0x80000001, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/20, @ANYRESHEX=r1], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) 30.753301478s ago: executing program 8 (id=1753): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000140)='big_key\x00', 0x0, &(0x7f0000000180)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r3, &(0x7f0000000dc0)=""/4096, 0x1000) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000840)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000880)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed82, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 29.079570899s ago: executing program 8 (id=1754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 28.368965261s ago: executing program 8 (id=1755): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) socket(0x2, 0x2, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 18.533757738s ago: executing program 38 (id=1750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ppoll(&(0x7f0000000100)=[{r0, 0x1044}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0xf0f046}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) tkill(r2, 0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x1, r8}, 0xc) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000280)=0xb, 0x4) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000008060300000000000000000003000000090000000900020073797a31000000797a31000100000900020073797a32000000000500010007000000050001000700"/92], 0x5c}, 0x1, 0x0, 0x0, 0x44010}, 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/191, 0xbf}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/1, 0xd}, 0x3}], 0x400000000000177, 0x3, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 17.268513888s ago: executing program 8 (id=1757): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d02"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001dc0)={0x26c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x220, 0x8, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0xffffffc5}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @private2, 0x8003}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x10a, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x29) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)=@x86={0x8, 0x1, 0xd, 0x0, 0x7fff, 0x8, 0xb, 0x5, 0xff, 0x8, 0x1, 0xff, 0x0, 0xfffffffb, 0xc, 0xd1, 0x16, 0xb, 0xa7, '\x00', 0x1, 0xffffffffffffffff}) openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x108000, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 15.459930154s ago: executing program 8 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 0s ago: executing program 39 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) kernel console output (not intermixed with test programs): atadv0: Adding interface: batadv_slave_1 [ 945.670600][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.670621][T12420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.902923][ T5602] Bluetooth: hci2: command tx timeout [ 945.957129][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 946.669828][T12420] hsr_slave_0: entered promiscuous mode [ 946.672334][T12420] hsr_slave_1: entered promiscuous mode [ 946.857680][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.857818][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.858043][T12447] bridge_slave_0: entered allmulticast mode [ 946.871252][T12447] bridge_slave_0: entered promiscuous mode [ 947.045815][T12447] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.045908][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.046117][T12447] bridge_slave_1: entered allmulticast mode [ 947.072979][T12447] bridge_slave_1: entered promiscuous mode [ 947.591318][T12447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.694202][T12447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.536685][ T5862] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 948.716137][T12447] team0: Port device team_slave_0 added [ 948.720534][ T5862] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 948.732689][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.732720][ T5862] usb 9-1: config 0 has no interfaces? [ 948.735215][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.735246][ T5862] usb 9-1: Product: syz [ 948.735262][ T5862] usb 9-1: Manufacturer: syz [ 948.735286][ T5862] usb 9-1: SerialNumber: syz [ 948.780080][ T5862] usb 9-1: config 0 descriptor?? [ 948.892483][T12447] team0: Port device team_slave_1 added [ 948.993107][ T8905] usb 9-1: USB disconnect, device number 38 [ 949.324116][T12209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 949.362158][T12209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.365522][T12447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.365538][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.365559][T12447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.379374][ T5862] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 949.606839][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 949.607806][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 949.609399][ T5862] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 949.609454][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 949.609477][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 949.609502][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 949.609527][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.609569][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.922471][ T5862] usb 4-1: usb_control_msg returned -32 [ 949.922525][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 949.922851][T12569] netlink: 276 bytes leftover after parsing attributes in process `syz.8.1293'. [ 950.134196][T12209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 950.188095][T12209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 950.190232][T12447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.190250][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.190282][T12447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.269448][T12209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 950.312927][T12209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.654723][T12576] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1295'. [ 951.728318][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.372355][ T8905] usb 4-1: USB disconnect, device number 49 [ 952.618469][T12209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 952.779691][T12209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 953.463171][T12598] loop9: detected capacity change from 0 to 7 [ 953.514737][T12598] Dev loop9: unable to read RDB block 7 [ 953.514790][T12598] loop9: unable to read partition table [ 953.515022][T12598] loop9: partition table beyond EOD, truncated [ 953.515043][T12598] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 953.872626][ T8905] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 953.930023][T12447] hsr_slave_0: entered promiscuous mode [ 953.931329][T12447] hsr_slave_1: entered promiscuous mode [ 953.935575][T12447] debugfs: 'hsr0' already exists in 'hsr' [ 953.935605][T12447] Cannot create hsr debugfs directory [ 954.128170][ T8905] usb 4-1: Using ep0 maxpacket: 32 [ 954.133525][ T8905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 954.133597][ T8905] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 954.140197][ T8905] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 954.140278][ T8905] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 954.140343][ T8905] usb 4-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 954.140402][ T8905] usb 4-1: config 7 has no interface number 0 [ 954.140538][ T8905] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 954.140619][ T8905] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 954.140692][ T8905] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 954.140774][ T8905] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 954.140856][ T8905] usb 4-1: config 7 interface 128 has no altsetting 0 [ 954.254598][ T8905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.254635][ T8905] usb 4-1: Product: syz [ 954.254655][ T8905] usb 4-1: Manufacturer: syz [ 954.254673][ T8905] usb 4-1: SerialNumber: syz [ 954.310697][T12598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 954.672019][ T8905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 954.672084][ T8905] usb 4-1: MIDIStreaming interface descriptor not found [ 955.343092][ T8905] usb 4-1: USB disconnect, device number 50 [ 956.465655][T12627] input: syz0 as /devices/virtual/input/input21 [ 957.503668][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.046714][ T8905] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 958.756726][ T8905] usb 4-1: Using ep0 maxpacket: 32 [ 958.787183][ T8905] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 958.791688][ T8905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.791749][ T8905] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 958.830350][ T8905] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 958.830383][ T8905] usb 4-1: Product: syz [ 958.830400][ T8905] usb 4-1: Manufacturer: syz [ 958.830417][ T8905] usb 4-1: SerialNumber: syz [ 958.872884][ T8905] usb 4-1: config 0 descriptor?? [ 959.104832][ T8905] usb 4-1: USB disconnect, device number 51 [ 959.672013][T12209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.792559][T12209] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.076238][ T2879] bridge_slave_1: left allmulticast mode [ 960.076282][ T2879] bridge_slave_1: left promiscuous mode [ 960.076704][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.268085][T12650] loop9: detected capacity change from 0 to 7 [ 960.307325][T12650] Dev loop9: unable to read RDB block 7 [ 960.307380][T12650] loop9: unable to read partition table [ 960.307639][T12650] loop9: partition table beyond EOD, truncated [ 960.314873][T12650] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 960.368822][ T2879] bridge_slave_0: left allmulticast mode [ 960.368869][ T2879] bridge_slave_0: left promiscuous mode [ 960.369191][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.596698][T10256] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 960.667387][ T2879] bridge_slave_1: left allmulticast mode [ 960.667913][ T2879] bridge_slave_1: left promiscuous mode [ 960.668189][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.746684][T10256] usb 9-1: Using ep0 maxpacket: 32 [ 960.750593][T10256] usb 9-1: unable to get BOS descriptor or descriptor too short [ 960.750665][T10256] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 960.752021][T10256] usb 9-1: config 7 has an invalid interface number: 128 but max is 0 [ 960.752050][T10256] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 960.752070][T10256] usb 9-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 960.752092][T10256] usb 9-1: config 7 has no interface number 0 [ 960.752132][T10256] usb 9-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 960.752155][T10256] usb 9-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 960.752174][T10256] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 960.752195][T10256] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 960.752216][T10256] usb 9-1: config 7 interface 128 has no altsetting 0 [ 960.755245][T10256] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.755266][T10256] usb 9-1: Product: syz [ 960.755277][T10256] usb 9-1: Manufacturer: syz [ 960.755289][T10256] usb 9-1: SerialNumber: syz [ 960.920869][T12650] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 960.988480][ T2879] bridge_slave_0: left allmulticast mode [ 960.988526][ T2879] bridge_slave_0: left promiscuous mode [ 960.988805][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.139119][T10256] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 961.139162][T10256] usb 9-1: MIDIStreaming interface descriptor not found [ 961.314565][T10256] usb 9-1: USB disconnect, device number 39 [ 961.491678][T12621] udevd[12621]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 961.777910][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.677628][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.111519][ T2879] bond0 (unregistering): Released all slaves [ 965.185711][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.307331][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.394520][ T2879] bond0 (unregistering): Released all slaves [ 965.448794][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.448893][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.473220][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 965.535526][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.535728][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.671099][T12688] loop9: detected capacity change from 0 to 7 [ 966.756448][T12688] Dev loop9: unable to read RDB block 7 [ 966.757266][T12688] loop9: unable to read partition table [ 966.757458][T12688] loop9: partition table beyond EOD, truncated [ 966.757481][T12688] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 966.769715][ T2879] hsr_slave_0: left promiscuous mode [ 966.821584][ T2879] hsr_slave_1: left promiscuous mode [ 966.822743][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.868554][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.029312][ T2879] hsr_slave_0: left promiscuous mode [ 967.056766][ T5862] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 967.077395][ T2879] hsr_slave_1: left promiscuous mode [ 967.078624][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.117450][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.206754][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 967.209739][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 967.209805][ T5862] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 967.211121][ T5862] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 967.211150][ T5862] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 967.211170][ T5862] usb 4-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 967.211191][ T5862] usb 4-1: config 7 has no interface number 0 [ 967.211233][ T5862] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 967.211254][ T5862] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 967.211280][ T5862] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 967.211301][ T5862] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 967.211322][ T5862] usb 4-1: config 7 interface 128 has no altsetting 0 [ 967.213817][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.213845][ T5862] usb 4-1: Product: syz [ 967.213863][ T5862] usb 4-1: Manufacturer: syz [ 967.213879][ T5862] usb 4-1: SerialNumber: syz [ 967.360569][T12688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 967.599630][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.599706][ T5862] usb 4-1: MIDIStreaming interface descriptor not found [ 967.957313][ T5862] usb 4-1: USB disconnect, device number 52 [ 968.169426][ T5593] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 968.235143][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 968.296675][ T5593] usb 9-1: device descriptor read/64, error -71 [ 968.350498][T12700] udevd[12700]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.558236][ T5593] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 968.686779][ T5593] usb 9-1: device descriptor read/64, error -71 [ 968.797362][ T5593] usb usb9-port1: attempt power cycle [ 969.136725][ T5593] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 969.157775][ T5593] usb 9-1: device descriptor read/8, error -71 [ 969.316917][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 969.398285][ T5593] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 969.419987][ T5593] usb 9-1: device descriptor read/8, error -71 [ 969.529979][ T5593] usb usb9-port1: unable to enumerate USB device [ 970.615843][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 970.704507][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 972.193228][T12713] input: syz0 as /devices/virtual/input/input22 [ 974.518929][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.623682][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.644626][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.659033][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.690249][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.843014][ T8905] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 975.176778][ T8905] usb 4-1: Using ep0 maxpacket: 8 [ 975.182984][ T8905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 975.185654][ T8905] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 975.185694][ T8905] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 975.185758][ T8905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.677277][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 977.001122][ T5596] Bluetooth: hci3: command tx timeout [ 977.002616][T12420] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 977.139011][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.179716][T12420] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 977.404595][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.450853][T12420] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 977.522309][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.348169][ T5593] usb 4-1: USB disconnect, device number 53 [ 979.076665][ T5596] Bluetooth: hci3: command tx timeout [ 979.479275][ T5593] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 979.621958][ T5593] usb 4-1: device descriptor read/64, error -71 [ 979.857415][ T5593] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 980.016801][ T5593] usb 4-1: device descriptor read/64, error -71 [ 980.128833][ T5593] usb usb4-port1: attempt power cycle [ 980.507284][ T5593] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 980.530952][ T5593] usb 4-1: device descriptor read/8, error -71 [ 980.776917][ T5593] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 980.808252][ T5593] usb 4-1: device descriptor read/8, error -71 [ 980.917290][ T5593] usb usb4-port1: unable to enumerate USB device [ 981.156875][ T5596] Bluetooth: hci3: command tx timeout [ 981.256152][T12420] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 981.291927][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.447266][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 983.236984][ T5596] Bluetooth: hci3: command tx timeout [ 984.454396][T12844] syzkaller1: entered promiscuous mode [ 984.454427][T12844] syzkaller1: entered allmulticast mode [ 988.197872][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.489222][T12447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 990.541945][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 990.561883][T12447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 990.807278][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 990.841829][T12447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 991.191078][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.215601][T12447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 991.291884][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.204256][T10132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 994.318488][ T2879] bridge_slave_1: left allmulticast mode [ 994.318535][ T2879] bridge_slave_1: left promiscuous mode [ 994.318838][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.957241][ T2879] bridge_slave_0: left allmulticast mode [ 994.957297][ T2879] bridge_slave_0: left promiscuous mode [ 994.958475][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.514558][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 996.596730][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 996.625814][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 996.647614][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 996.650293][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 997.814435][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 997.872795][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 997.878691][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 997.910836][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 997.916074][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.629883][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.629974][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.109786][ T5596] Bluetooth: hci0: command tx timeout [ 999.325290][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1000.289428][ T5596] Bluetooth: hci5: command tx timeout [ 1001.138786][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.156718][ T5596] Bluetooth: hci0: command tx timeout [ 1001.219296][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.402520][ T2879] bond0 (unregistering): Released all slaves [ 1002.250132][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.250649][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.251372][T12750] bridge_slave_0: entered allmulticast mode [ 1002.356900][ T5596] Bluetooth: hci5: command tx timeout [ 1002.432769][T12750] bridge_slave_0: entered promiscuous mode [ 1003.138354][T12960] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1354'. [ 1003.246686][ T5596] Bluetooth: hci0: command tx timeout [ 1003.815576][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.815713][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.815931][T12750] bridge_slave_1: entered allmulticast mode [ 1003.845574][T12750] bridge_slave_1: entered promiscuous mode [ 1004.386669][ T2879] hsr_slave_0: left promiscuous mode [ 1004.428748][ T2879] hsr_slave_1: left promiscuous mode [ 1004.429810][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.436636][ T5596] Bluetooth: hci5: command tx timeout [ 1004.459710][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.728487][ T175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1005.757844][ T5596] Bluetooth: hci0: command tx timeout [ 1006.516634][ T5596] Bluetooth: hci5: command tx timeout [ 1006.893226][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1007.868734][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1008.724911][T12750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.232005][T12750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.028945][T12750] team0: Port device team_slave_0 added [ 1010.070437][T12750] team0: Port device team_slave_1 added [ 1010.597740][T12750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.597761][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.597787][T12750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.682751][T12750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.682769][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.682791][T12750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.200537][T12750] hsr_slave_0: entered promiscuous mode [ 1011.202037][T12750] hsr_slave_1: entered promiscuous mode [ 1011.203141][T12750] debugfs: 'hsr0' already exists in 'hsr' [ 1011.203169][T12750] Cannot create hsr debugfs directory [ 1011.314566][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1011.815105][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1366'. [ 1014.084822][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1014.646751][ T8734] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1014.890472][ T8734] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1014.892732][ T8734] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1014.892776][ T8734] usb 9-1: can't read configurations, error -71 [ 1017.168088][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1017.679489][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.679637][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.679858][T12923] bridge_slave_0: entered allmulticast mode [ 1017.682707][T12923] bridge_slave_0: entered promiscuous mode [ 1018.211204][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.211330][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.211529][T12923] bridge_slave_1: entered allmulticast mode [ 1018.216061][T12923] bridge_slave_1: entered promiscuous mode [ 1018.804652][T13095] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1374'. [ 1021.257046][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.289934][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.927850][T12907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.928013][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.928202][T12907] bridge_slave_0: entered allmulticast mode [ 1021.930472][T12907] bridge_slave_0: entered promiscuous mode [ 1022.085263][T12923] team0: Port device team_slave_0 added [ 1022.137082][ T5599] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1022.222778][ T38] audit: type=1326 audit(1791832391.270:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.222843][ T38] audit: type=1326 audit(1791832391.270:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.222915][ T38] audit: type=1326 audit(1791832391.270:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.222970][ T38] audit: type=1326 audit(1791832391.270:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.223007][ T38] audit: type=1326 audit(1791832391.270:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.223041][ T38] audit: type=1326 audit(1791832391.270:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.223077][ T38] audit: type=1326 audit(1791832391.270:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.223405][ T38] audit: type=1326 audit(1791832391.270:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.223581][ T38] audit: type=1326 audit(1791832391.270:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.223786][ T38] audit: type=1326 audit(1791832391.270:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.3.1379" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4d8fcde1d9 code=0x7ffc0000 [ 1022.438440][ T5599] usb 9-1: not running at top speed; connect to a high speed hub [ 1022.438486][ T5599] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1022.486759][ T5599] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1022.557085][ T5599] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1022.557120][ T5599] usb 9-1: Product: syz [ 1022.557135][ T5599] usb 9-1: Manufacturer: syz [ 1022.644256][ T5599] usb 9-1: USB2VGA dongle found at address 46 [ 1022.685289][ T5599] usb 9-1: Allocated 8 output buffers [ 1022.685326][ T5599] usb 9-1: Not attached to USB 2.0 hub, deferring init [ 1022.767568][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1022.854373][T13111] usb 9-1: Device not attached to USB 2.0 hub [ 1022.882696][ T5599] usb 9-1: USB disconnect, device number 46 [ 1022.895429][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.895615][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.895880][T12907] bridge_slave_1: entered allmulticast mode [ 1022.896858][ T5705] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1022.944790][T12907] bridge_slave_1: entered promiscuous mode [ 1022.961746][T12923] team0: Port device team_slave_1 added [ 1023.098423][ T5705] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1023.142318][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.142357][ T5705] usb 4-1: Product: syz [ 1023.142377][ T5705] usb 4-1: Manufacturer: syz [ 1023.142395][ T5705] usb 4-1: SerialNumber: syz [ 1023.545339][T12907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.559724][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.559747][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.559779][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.867420][ T5705] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1023.867477][ T5705] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1023.868235][ T5705] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1023.881224][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.881251][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.881334][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.023778][ T5705] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1024.031138][T12907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.133102][ T5705] usb 4-1: USB disconnect, device number 58 [ 1024.674940][T12907] team0: Port device team_slave_0 added [ 1024.784029][T12907] team0: Port device team_slave_1 added [ 1024.831830][T12923] hsr_slave_0: entered promiscuous mode [ 1024.833904][T12923] hsr_slave_1: entered promiscuous mode [ 1024.844367][T12923] debugfs: 'hsr0' already exists in 'hsr' [ 1024.844400][T12923] Cannot create hsr debugfs directory [ 1026.486861][T12907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.486879][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.486900][T12907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.840843][T12907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.840864][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.840896][T12907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.836243][ T8905] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1027.860001][T12907] hsr_slave_0: entered promiscuous mode [ 1027.861202][T12907] hsr_slave_1: entered promiscuous mode [ 1027.862008][T12907] debugfs: 'hsr0' already exists in 'hsr' [ 1027.862038][T12907] Cannot create hsr debugfs directory [ 1027.887816][ T9324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1028.801050][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 1028.816705][ T8905] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1028.822415][ T8905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.822448][ T8905] usb 9-1: Product: syz [ 1028.822464][ T8905] usb 9-1: Manufacturer: syz [ 1028.822482][ T8905] usb 9-1: SerialNumber: syz [ 1028.868957][T13157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 1028.900350][ T8905] usb 9-1: config 0 descriptor?? [ 1028.924261][ T8905] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1028.946395][ T8905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1028.961766][ T8905] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1028.961842][ T8905] usb 9-1: media controller created [ 1029.021565][ T8905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1029.090009][T12750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1029.115023][ T8905] DVB: Unable to find symbol mt352_attach() [ 1029.148765][T12750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.224278][T12750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1029.271434][T12750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.305644][ T8905] DVB: Unable to find symbol nxt6000_attach() [ 1029.305666][ T8905] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1029.333055][ T8905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24 [ 1029.377960][ T8905] dvb-usb: schedule remote query interval to 1000 msecs. [ 1029.377990][ T8905] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1029.378014][ T8905] dvb-usb: bulk message failed: -22 (7/0) [ 1029.378034][ T8905] dvb-usb: bulk message failed: -22 (7/0) [ 1029.381961][ T8905] usb 9-1: USB disconnect, device number 47 [ 1029.492455][T12750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1029.687338][T12750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.793786][T12750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1029.815570][ T8905] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1029.995603][T12750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.963517][T13176] input: syz0 as /devices/virtual/input/input25 [ 1032.193334][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 1032.340280][T13193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 1033.689063][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1035.756690][ T8905] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1036.367210][ T8905] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1036.705694][ T8905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.705730][ T8905] usb 4-1: Product: syz [ 1036.705742][ T8905] usb 4-1: Manufacturer: syz [ 1036.705754][ T8905] usb 4-1: SerialNumber: syz [ 1036.909398][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.987401][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.991030][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1036.992428][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.123027][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.745591][ T8905] usb 4-1: config 0 descriptor?? [ 1037.897756][ T8905] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1038.004270][ T8905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1038.005224][ T8905] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1038.005300][ T8905] usb 4-1: media controller created [ 1038.104334][ T8905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.350215][ T8905] DVB: Unable to find symbol mt352_attach() [ 1038.446878][ T8905] DVB: Unable to find symbol nxt6000_attach() [ 1038.446901][ T8905] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1038.451727][ T8905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 1038.509411][ T8905] dvb-usb: schedule remote query interval to 1000 msecs. [ 1038.509443][ T8905] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1038.509466][ T8905] dvb-usb: bulk message failed: -22 (7/0) [ 1038.509486][ T8905] dvb-usb: bulk message failed: -22 (7/0) [ 1038.565485][ T8905] usb 4-1: USB disconnect, device number 59 [ 1038.876750][T13217] input: syz0 as /devices/virtual/input/input27 [ 1039.140643][ T8905] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1040.521937][ T5596] Bluetooth: hci1: command tx timeout [ 1040.534088][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.891880][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1410'. [ 1040.948792][T13234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1410'. [ 1041.698904][ T8905] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1041.867368][ T8905] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1041.868768][ T8905] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1041.868796][ T8905] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1041.868826][ T8905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.918668][T13242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1041.945377][ T8905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1042.618507][ T5596] Bluetooth: hci1: command tx timeout [ 1042.977596][ T8905] usb 4-1: USB disconnect, device number 60 [ 1044.678034][ T5596] Bluetooth: hci1: command tx timeout [ 1045.808517][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1046.756745][ T5596] Bluetooth: hci1: command tx timeout [ 1048.150665][T13282] input: syz0 as /devices/virtual/input/input28 [ 1049.946882][ T2879] bridge_slave_1: left allmulticast mode [ 1049.946928][ T2879] bridge_slave_1: left promiscuous mode [ 1049.947239][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.113892][ T2879] bridge_slave_0: left allmulticast mode [ 1050.113924][ T2879] bridge_slave_0: left promiscuous mode [ 1050.118809][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.418188][ T2879] bridge_slave_1: left allmulticast mode [ 1050.418236][ T2879] bridge_slave_1: left promiscuous mode [ 1050.418477][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.590627][ T2879] bridge_slave_0: left allmulticast mode [ 1050.590672][ T2879] bridge_slave_0: left promiscuous mode [ 1050.590940][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.567031][ T1176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.687443][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.797456][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.889591][ T2879] bond0 (unregistering): Released all slaves [ 1052.807846][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.258555][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.930367][ T2879] bond0 (unregistering): Released all slaves [ 1055.043760][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1055.500420][T13329] input: syz0 as /devices/virtual/input/input29 [ 1056.455862][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.507729][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.515454][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.553852][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.564794][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1057.317180][ T1176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.996774][ T2879] hsr_slave_0: left promiscuous mode [ 1058.057497][ T2879] hsr_slave_1: left promiscuous mode [ 1058.061362][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.115175][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.406777][ T2879] hsr_slave_0: left promiscuous mode [ 1058.448947][ T2879] hsr_slave_1: left promiscuous mode [ 1058.465885][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.479726][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.676703][ T5602] Bluetooth: hci2: command tx timeout [ 1059.207525][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1059.287714][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1059.884384][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.884471][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.756763][ T5602] Bluetooth: hci2: command tx timeout [ 1061.573100][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1061.648348][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1061.683365][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1061.685022][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1061.709434][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.976883][T10256] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1062.136662][T10256] usb 4-1: Using ep0 maxpacket: 32 [ 1062.138201][T10256] usb 4-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice=4f.fe [ 1062.140314][T10256] usb 4-1: config 5 has an invalid interface number: 96 but max is 0 [ 1062.140347][T10256] usb 4-1: config 5 has no interface number 0 [ 1062.140382][T10256] usb 4-1: config 5 interface 96 has no altsetting 0 [ 1062.144320][T10256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.144355][T10256] usb 4-1: Product: syz [ 1062.144373][T10256] usb 4-1: Manufacturer: syz [ 1062.144390][T10256] usb 4-1: SerialNumber: syz [ 1062.320298][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1062.357083][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1062.390054][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1062.483873][T10256] usb 4-1: can't set first interface for hiFace device. [ 1062.483954][T10256] snd-usb-hiface 4-1:5.96: probe with driver snd-usb-hiface failed with error -5 [ 1062.540081][T10256] usb 4-1: USB disconnect, device number 61 [ 1062.836685][ T5596] Bluetooth: hci2: command tx timeout [ 1062.837338][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1063.828482][ T5596] Bluetooth: hci3: command tx timeout [ 1064.070165][T13401] syzkaller0: entered promiscuous mode [ 1064.070201][T13401] syzkaller0: entered allmulticast mode [ 1064.898990][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.899162][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.899341][T13204] bridge_slave_0: entered allmulticast mode [ 1064.919956][T13204] bridge_slave_0: entered promiscuous mode [ 1064.928781][ T5596] Bluetooth: hci2: command tx timeout [ 1064.977622][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.977762][T13204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.977990][T13204] bridge_slave_1: entered allmulticast mode [ 1064.989188][T13204] bridge_slave_1: entered promiscuous mode [ 1065.957198][ T5596] Bluetooth: hci3: command tx timeout [ 1066.332193][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.560050][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.885363][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.044430][ T5596] Bluetooth: hci3: command tx timeout [ 1068.189710][T13204] team0: Port device team_slave_0 added [ 1068.285971][T13204] team0: Port device team_slave_1 added [ 1070.779527][ T5596] Bluetooth: hci3: command tx timeout [ 1071.447633][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.447683][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.447713][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.606930][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.606947][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.606969][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.913053][T13444] syzkaller0: entered promiscuous mode [ 1071.913084][T13444] syzkaller0: entered allmulticast mode [ 1073.319068][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1073.795387][T13204] hsr_slave_0: entered promiscuous mode [ 1073.810184][T13204] hsr_slave_1: entered promiscuous mode [ 1079.126727][ T9238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.940761][T13480] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1453'. [ 1083.476688][ T5593] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1083.637622][ T5593] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1083.642771][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.642905][ T5593] usb 4-1: Product: syz [ 1083.642942][ T5593] usb 4-1: Manufacturer: syz [ 1083.642960][ T5593] usb 4-1: SerialNumber: syz [ 1083.676663][ T5862] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1083.697474][ T5593] usb 4-1: config 0 descriptor?? [ 1083.730439][ T5593] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1083.794964][ T5593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1083.796293][ T5593] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1083.796356][ T5593] usb 4-1: media controller created [ 1083.827614][ T5862] usb 9-1: Using ep0 maxpacket: 8 [ 1083.828429][ T5862] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1083.829687][ T5862] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1083.829713][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.829732][ T5862] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.832229][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.832259][ T5862] usb 9-1: Product: syz [ 1083.832276][ T5862] usb 9-1: Manufacturer: syz [ 1083.832293][ T5862] usb 9-1: SerialNumber: syz [ 1083.931443][ T5862] usb 9-1: config 0 descriptor?? [ 1083.950167][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.079192][ T5593] DVB: Unable to find symbol mt352_attach() [ 1084.180791][ T5593] DVB: Unable to find symbol nxt6000_attach() [ 1084.180822][ T5593] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1084.319146][ T8844] usb 9-1: USB disconnect, device number 48 [ 1084.319208][ T5593] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 1084.483113][ T5593] dvb-usb: schedule remote query interval to 1000 msecs. [ 1084.483204][ T5593] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1084.483232][ T5593] dvb-usb: bulk message failed: -22 (7/0) [ 1084.483256][ T5593] dvb-usb: bulk message failed: -22 (7/0) [ 1084.556711][ T5593] usb 4-1: USB disconnect, device number 62 [ 1084.843989][ T9324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.881257][ T5593] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1088.247059][T13551] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1461'. [ 1089.420352][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.420488][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.420708][T13378] bridge_slave_0: entered allmulticast mode [ 1089.448829][T13378] bridge_slave_0: entered promiscuous mode [ 1089.504124][T13338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.504261][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.504507][T13338] bridge_slave_0: entered allmulticast mode [ 1089.547254][T13338] bridge_slave_0: entered promiscuous mode [ 1089.570916][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.571046][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.571218][T13378] bridge_slave_1: entered allmulticast mode [ 1089.574876][T13378] bridge_slave_1: entered promiscuous mode [ 1089.628657][T13338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.628784][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.628993][T13338] bridge_slave_1: entered allmulticast mode [ 1089.664666][T13338] bridge_slave_1: entered promiscuous mode [ 1090.196163][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.482411][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.486317][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.663315][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.012909][T13378] team0: Port device team_slave_0 added [ 1091.037680][T13338] team0: Port device team_slave_0 added [ 1091.041319][T13378] team0: Port device team_slave_1 added [ 1091.064267][T13338] team0: Port device team_slave_1 added [ 1091.354074][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.354096][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.354127][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.412725][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.412748][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.412778][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.571225][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.571251][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.571284][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.574528][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.574549][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.574581][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.947177][ T2879] bridge_slave_1: left allmulticast mode [ 1092.947226][ T2879] bridge_slave_1: left promiscuous mode [ 1092.947569][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.108159][ T2879] bridge_slave_0: left allmulticast mode [ 1093.108203][ T2879] bridge_slave_0: left promiscuous mode [ 1093.108456][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.396907][ T2879] bridge_slave_1: left allmulticast mode [ 1093.396941][ T2879] bridge_slave_1: left promiscuous mode [ 1093.397158][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.496729][ T5593] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1093.518579][ T2879] bridge_slave_0: left allmulticast mode [ 1093.518613][ T2879] bridge_slave_0: left promiscuous mode [ 1093.518824][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.653859][ T5593] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1093.675040][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.675074][ T5593] usb 4-1: Product: syz [ 1093.675085][ T5593] usb 4-1: Manufacturer: syz [ 1093.675096][ T5593] usb 4-1: SerialNumber: syz [ 1093.726171][ T5593] usb 4-1: config 0 descriptor?? [ 1093.747025][ T5593] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1093.752113][ T5593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1093.753055][ T5593] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1093.753120][ T5593] usb 4-1: media controller created [ 1093.808955][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.888328][ T5593] DVB: Unable to find symbol mt352_attach() [ 1093.945379][ T5593] DVB: Unable to find symbol nxt6000_attach() [ 1093.945398][ T5593] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1093.985950][ T5593] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 1094.007229][ T5593] dvb-usb: schedule remote query interval to 1000 msecs. [ 1094.007267][ T5593] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1094.007286][ T5593] dvb-usb: bulk message failed: -22 (7/0) [ 1094.007312][ T5593] dvb-usb: bulk message failed: -22 (7/0) [ 1094.054042][ T5593] usb 4-1: USB disconnect, device number 63 [ 1094.132430][ T5593] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1094.278355][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.357851][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.439249][ T2879] bond0 (unregistering): Released all slaves [ 1094.816936][ T5593] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1094.818246][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.897373][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.959021][ T2879] bond0 (unregistering): Released all slaves [ 1094.972793][ T5593] usb 4-1: Using ep0 maxpacket: 8 [ 1094.973700][ T5593] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1094.975586][ T5593] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1094.975614][ T5593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.975635][ T5593] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1095.009908][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.009945][ T5593] usb 4-1: Product: syz [ 1095.009962][ T5593] usb 4-1: Manufacturer: syz [ 1095.009978][ T5593] usb 4-1: SerialNumber: syz [ 1095.067706][ T5593] usb 4-1: config 0 descriptor?? [ 1095.302049][ T5593] usb 4-1: USB disconnect, device number 64 [ 1096.052636][T13576] syzkaller0: entered promiscuous mode [ 1096.053362][T13576] syzkaller0: entered allmulticast mode [ 1097.030857][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.093817][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.096127][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.113118][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.114014][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.675850][T13378] hsr_slave_0: entered promiscuous mode [ 1097.693325][T13378] hsr_slave_1: entered promiscuous mode [ 1097.694459][T13378] debugfs: 'hsr0' already exists in 'hsr' [ 1097.694488][T13378] Cannot create hsr debugfs directory [ 1098.033773][T13338] hsr_slave_0: entered promiscuous mode [ 1098.043087][T13338] hsr_slave_1: entered promiscuous mode [ 1098.043952][T13338] debugfs: 'hsr0' already exists in 'hsr' [ 1098.043973][T13338] Cannot create hsr debugfs directory [ 1098.782024][ T2879] hsr_slave_0: left promiscuous mode [ 1098.829601][ T2879] hsr_slave_1: left promiscuous mode [ 1098.830569][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.850558][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.938122][ T38] kauditd_printk_skb: 126 callbacks suppressed [ 1098.938139][ T38] audit: type=1326 audit(1791832467.990:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.8.1471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6652e1d9 code=0x7ffc0000 [ 1098.945648][ T38] audit: type=1326 audit(1791832467.990:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.8.1471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6652e1d9 code=0x7ffc0000 [ 1098.948217][ T38] audit: type=1326 audit(1791832467.990:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.8.1471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7eff6652e1d9 code=0x7ffc0000 [ 1099.059399][ T38] audit: type=1326 audit(1791832468.110:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.8.1471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6652e1d9 code=0x7ffc0000 [ 1099.059445][ T38] audit: type=1326 audit(1791832468.110:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13613 comm="syz.8.1471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6652e1d9 code=0x7ffc0000 [ 1099.179808][ T2879] hsr_slave_0: left promiscuous mode [ 1099.196734][ T2879] hsr_slave_1: left promiscuous mode [ 1099.197687][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.396905][ T5596] Bluetooth: hci0: command tx timeout [ 1100.039770][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.841460][ T8734] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1100.937640][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1100.977593][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1100.995509][ T8734] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1101.015791][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.015824][ T8734] usb 4-1: Product: syz [ 1101.015841][ T8734] usb 4-1: Manufacturer: syz [ 1101.015857][ T8734] usb 4-1: SerialNumber: syz [ 1101.055686][ T8734] usb 4-1: config 0 descriptor?? [ 1101.073729][ T8734] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1101.095406][ T8734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1101.107231][ T8734] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1101.107298][ T8734] usb 4-1: media controller created [ 1101.157779][ T8734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1101.242952][ T8734] DVB: Unable to find symbol mt352_attach() [ 1101.302191][ T8734] DVB: Unable to find symbol nxt6000_attach() [ 1101.302212][ T8734] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1101.324999][ T8734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 1101.342175][ T8734] dvb-usb: schedule remote query interval to 1000 msecs. [ 1101.342204][ T8734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1101.342232][ T8734] dvb-usb: bulk message failed: -22 (7/0) [ 1101.342250][ T8734] dvb-usb: bulk message failed: -22 (7/0) [ 1101.378412][ T8734] usb 4-1: USB disconnect, device number 65 [ 1101.476829][ T5602] Bluetooth: hci0: command tx timeout [ 1101.557638][ T8734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1101.871096][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1101.931008][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1102.096806][ T8734] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1102.194368][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1472'. [ 1102.246592][ T8734] usb 4-1: Using ep0 maxpacket: 8 [ 1102.253482][ T8734] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1102.270944][ T8734] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1102.270978][ T8734] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1102.298891][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.298929][ T8734] usb 4-1: Product: syz [ 1102.298940][ T8734] usb 4-1: Manufacturer: syz [ 1102.298953][ T8734] usb 4-1: SerialNumber: syz [ 1102.344300][ T8734] usb 4-1: config 0 descriptor?? [ 1102.554351][ T5599] usb 4-1: USB disconnect, device number 66 [ 1103.586886][ T5596] Bluetooth: hci0: command tx timeout [ 1104.037842][ T1176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.477443][ T8734] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1105.650971][ T5596] Bluetooth: hci0: command tx timeout [ 1105.655452][ T8734] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1105.689798][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.689828][ T8734] usb 4-1: Product: syz [ 1105.689852][ T8734] usb 4-1: Manufacturer: syz [ 1105.689872][ T8734] usb 4-1: SerialNumber: syz [ 1105.727371][ T8734] usb 4-1: config 0 descriptor?? [ 1105.743669][ T8734] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1105.778953][ T8734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1105.782241][ T8734] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1105.782313][ T8734] usb 4-1: media controller created [ 1105.854488][ T8734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1105.944698][ T8734] DVB: Unable to find symbol mt352_attach() [ 1106.026295][ T8734] DVB: Unable to find symbol nxt6000_attach() [ 1106.026316][ T8734] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1106.143244][ T8734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 1106.162693][ T8734] dvb-usb: schedule remote query interval to 1000 msecs. [ 1106.162715][ T8734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1106.162729][ T8734] dvb-usb: bulk message failed: -22 (7/0) [ 1106.162756][ T8734] dvb-usb: bulk message failed: -22 (7/0) [ 1106.203972][ T8734] usb 4-1: USB disconnect, device number 67 [ 1108.069119][T13658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1482'. [ 1108.352851][ T8734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1108.597737][ T8844] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1108.750423][T13595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.750565][T13595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.750806][T13595] bridge_slave_0: entered allmulticast mode [ 1108.756158][ T8844] usb 9-1: Using ep0 maxpacket: 8 [ 1108.757380][T13595] bridge_slave_0: entered promiscuous mode [ 1108.793749][ T8844] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1108.812011][ T8844] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1108.812043][ T8844] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1108.819915][ T8844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.819946][ T8844] usb 9-1: Product: syz [ 1108.819961][ T8844] usb 9-1: Manufacturer: syz [ 1108.819976][ T8844] usb 9-1: SerialNumber: syz [ 1108.833723][ T8844] usb 9-1: config 0 descriptor?? [ 1108.852855][T13595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.853202][T13595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.853817][T13595] bridge_slave_1: entered allmulticast mode [ 1108.904696][T13595] bridge_slave_1: entered promiscuous mode [ 1109.056130][ T8844] usb 9-1: USB disconnect, device number 49 [ 1109.159973][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.345854][T13595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.380264][T13595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.542232][T13595] team0: Port device team_slave_0 added [ 1109.558359][T13595] team0: Port device team_slave_1 added [ 1110.030144][ T2879] bridge_slave_1: left allmulticast mode [ 1110.030187][ T2879] bridge_slave_1: left promiscuous mode [ 1110.030494][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.239457][ T2879] bridge_slave_0: left allmulticast mode [ 1110.239495][ T2879] bridge_slave_0: left promiscuous mode [ 1110.242149][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.486858][ T2879] bridge_slave_1: left allmulticast mode [ 1110.486902][ T2879] bridge_slave_1: left promiscuous mode [ 1110.487183][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.598159][ T2879] bridge_slave_0: left allmulticast mode [ 1110.598206][ T2879] bridge_slave_0: left promiscuous mode [ 1110.598406][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.027449][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.129603][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.208666][ T2879] bond0 (unregistering): Released all slaves [ 1111.458928][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.568731][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.629178][ T2879] bond0 (unregistering): Released all slaves [ 1112.487911][T13595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.487928][T13595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.487949][T13595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.642370][T13595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.642392][T13595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.642423][T13595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.136746][ T2879] hsr_slave_0: left promiscuous mode [ 1113.156875][ T2879] hsr_slave_1: left promiscuous mode [ 1113.158250][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.197478][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.336885][ T2879] hsr_slave_0: left promiscuous mode [ 1113.356838][ T2879] hsr_slave_1: left promiscuous mode [ 1113.357947][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.398999][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.907386][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1113.967364][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1115.155551][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.589359][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1115.627498][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1115.940295][T13595] hsr_slave_0: entered promiscuous mode [ 1115.941521][T13595] hsr_slave_1: entered promiscuous mode [ 1117.273712][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1117.319363][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1117.320911][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1117.322416][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1117.323186][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1119.055153][T13378] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1119.178171][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.181622][T13378] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1119.231110][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.241150][T13378] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1119.412039][ T5596] Bluetooth: hci1: command tx timeout [ 1119.468536][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.949961][T13595] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1119.990674][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1120.004532][T13595] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1120.033494][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1120.036890][T13595] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1120.112132][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1120.159687][T13595] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1120.200445][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1120.678474][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.903336][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1120.940158][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1120.960470][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1120.992128][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1120.993007][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1121.334820][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.334899][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.476700][ T5596] Bluetooth: hci1: command tx timeout [ 1123.141198][ T5596] Bluetooth: hci2: command tx timeout [ 1123.440199][T13710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.440317][T13710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.440499][T13710] bridge_slave_0: entered allmulticast mode [ 1123.442995][T13710] bridge_slave_0: entered promiscuous mode [ 1123.500837][T13710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.500975][T13710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.501229][T13710] bridge_slave_1: entered allmulticast mode [ 1123.504274][T13710] bridge_slave_1: entered promiscuous mode [ 1123.566609][ T5596] Bluetooth: hci1: command tx timeout [ 1123.867912][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1517'. [ 1123.960626][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1517'. [ 1124.973283][T13710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.009627][T13710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.159843][ T5596] Bluetooth: hci2: command tx timeout [ 1125.646809][ T5596] Bluetooth: hci1: command tx timeout [ 1125.748985][T13710] team0: Port device team_slave_0 added [ 1125.828422][T13710] team0: Port device team_slave_1 added [ 1126.226202][T13710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.226224][T13710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.226255][T13710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.413558][T13710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.413580][T13710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.413611][T13710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.439144][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.562624][T13810] tipc: Enabling of bearer rejected, failed to enable media [ 1126.586049][T13595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.104681][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1527'. [ 1127.166360][T13823] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1527'. [ 1127.233025][T13710] hsr_slave_0: entered promiscuous mode [ 1127.234541][T13710] hsr_slave_1: entered promiscuous mode [ 1127.235811][T13710] debugfs: 'hsr0' already exists in 'hsr' [ 1127.235842][T13710] Cannot create hsr debugfs directory [ 1127.236701][ T5596] Bluetooth: hci2: command tx timeout [ 1127.602752][T13595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.886159][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.900200][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.936592][ T203] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1128.086698][ T203] usb 9-1: Using ep0 maxpacket: 8 [ 1128.087604][ T203] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1128.092480][ T203] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1128.092545][ T203] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1128.092572][ T203] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1128.092599][ T203] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1128.092627][ T203] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.092675][ T203] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.197298][ T2879] bridge_slave_1: left allmulticast mode [ 1128.197429][ T2879] bridge_slave_1: left promiscuous mode [ 1128.198416][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.361183][ T2879] bridge_slave_0: left allmulticast mode [ 1128.361230][ T2879] bridge_slave_0: left promiscuous mode [ 1128.412354][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.442802][ T203] usb 9-1: usb_control_msg returned -32 [ 1128.442859][ T203] usbtmc 9-1:16.0: can't read capabilities [ 1129.048298][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.167277][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.229703][ T2879] bond0 (unregistering): Released all slaves [ 1129.258357][T10132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.258475][T10132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.356855][ T5596] Bluetooth: hci2: command tx timeout [ 1129.684006][T13851] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1130.027562][ T2879] hsr_slave_0: left promiscuous mode [ 1130.066747][ T2879] hsr_slave_1: left promiscuous mode [ 1130.068001][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.091581][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.557554][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 1130.608646][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 1130.801384][ T8734] usb 9-1: USB disconnect, device number 50 [ 1132.338690][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.338850][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.339059][T13749] bridge_slave_0: entered allmulticast mode [ 1132.369486][T13749] bridge_slave_0: entered promiscuous mode [ 1132.401822][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.401964][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.402138][T13749] bridge_slave_1: entered allmulticast mode [ 1132.406303][T13749] bridge_slave_1: entered promiscuous mode [ 1132.573003][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.609189][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.842524][T13749] team0: Port device team_slave_0 added [ 1132.965931][T13749] team0: Port device team_slave_1 added [ 1133.235119][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.268915][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.268937][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.268968][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.162926][T13882] netlink: 'syz.8.1536': attribute type 1 has an invalid length. [ 1134.391453][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.391474][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.391502][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.001037][T13882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.159205][T13897] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1538'. [ 1136.004738][T13883] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1136.004975][T13885] tipc: Resetting bearer [ 1136.163270][T13885] tipc: Resetting bearer [ 1136.164905][T13885] tipc: Resetting bearer [ 1136.170408][T13885] bond1: (slave syz_tun): making interface the new active one [ 1136.174614][T13885] tipc: Resetting bearer [ 1136.175801][T13885] syz_tun: entered promiscuous mode [ 1136.193444][T13885] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 1136.228388][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1136.373868][T13886] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1138.619144][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1138.826670][T13919] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1546'. [ 1139.677006][T13749] hsr_slave_0: entered promiscuous mode [ 1139.680669][T13749] hsr_slave_1: entered promiscuous mode [ 1139.683421][T13749] debugfs: 'hsr0' already exists in 'hsr' [ 1139.683443][T13749] Cannot create hsr debugfs directory [ 1142.500399][T13595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.437066][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.255084][T14000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1564'. [ 1150.312349][ T2879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1150.719972][T13595] veth0_vlan: entered promiscuous mode [ 1150.751591][T13595] veth1_vlan: entered promiscuous mode [ 1150.846634][T13595] veth0_macvtap: entered promiscuous mode [ 1150.863823][T13595] veth1_macvtap: entered promiscuous mode [ 1152.146869][T14042] input: syz0 as /devices/virtual/input/input34 [ 1152.770158][T13595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.829408][T13595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.081772][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1572'. [ 1155.877920][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.609522][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.609653][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.609697][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.618470][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.886821][ T2884] bridge_slave_1: left allmulticast mode [ 1157.886865][ T2884] bridge_slave_1: left promiscuous mode [ 1157.887171][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.090013][ T2884] bridge_slave_0: left allmulticast mode [ 1158.090055][ T2884] bridge_slave_0: left promiscuous mode [ 1158.090352][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.368842][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.422681][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.424878][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.444881][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.490216][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.707399][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.778839][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.818556][ T2884] bond0 (unregistering): Released all slaves [ 1160.362764][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1160.918843][ T2879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1161.866579][ T5596] Bluetooth: hci0: command tx timeout [ 1162.026722][ T2884] hsr_slave_0: left promiscuous mode [ 1162.046561][ T2884] hsr_slave_1: left promiscuous mode [ 1162.047881][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.069084][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.457793][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 1162.491691][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 1162.750420][ T8905] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 1162.876719][ T8905] usb 9-1: device descriptor read/64, error -71 [ 1163.122632][ T8905] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1163.359428][ T8905] usb 9-1: device descriptor read/64, error -71 [ 1163.467036][ T8905] usb usb9-port1: attempt power cycle [ 1163.507983][ T1192] syz_tun: left promiscuous mode [ 1163.816619][ T8905] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1163.837438][ T8905] usb 9-1: device descriptor read/8, error -71 [ 1163.876708][ T5602] Bluetooth: hci0: command tx timeout [ 1164.082617][ T8905] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1164.097270][ T8905] usb 9-1: device descriptor read/8, error -71 [ 1164.207010][ T8905] usb usb9-port1: unable to enumerate USB device [ 1165.959326][ T5602] Bluetooth: hci0: command tx timeout [ 1166.116985][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1166.126664][ T8905] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1166.276738][ T8905] usb 9-1: Using ep0 maxpacket: 8 [ 1166.277685][ T8905] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1166.279157][ T8905] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1166.279212][ T8905] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1166.279237][ T8905] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1166.279264][ T8905] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1166.279289][ T8905] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.279331][ T8905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.541078][ T8905] usb 9-1: usb_control_msg returned -32 [ 1166.541125][ T8905] usbtmc 9-1:16.0: can't read capabilities [ 1166.615540][ T2884] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.729622][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1596'. [ 1166.729747][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 1166.853038][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.853409][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.853580][T14115] bridge_slave_0: entered allmulticast mode [ 1166.889319][T14115] bridge_slave_0: entered promiscuous mode [ 1166.906759][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.906865][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.907060][T14115] bridge_slave_1: entered allmulticast mode [ 1166.909444][T14115] bridge_slave_1: entered promiscuous mode [ 1167.079791][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.152779][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.036899][ T5602] Bluetooth: hci0: command tx timeout [ 1168.217540][T14201] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1168.252422][ T2884] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.447162][T13710] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1168.495025][T13710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.671476][T13710] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1168.694936][T13710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1168.712120][T14115] team0: Port device team_slave_0 added [ 1168.918253][ T2884] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.981538][T13710] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1169.034558][T13710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1169.045553][T14115] team0: Port device team_slave_1 added [ 1169.060655][T13710] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1169.104244][T13710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1169.460828][ T8905] usb 9-1: USB disconnect, device number 55 [ 1169.792591][ T2884] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.886127][T14221] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 1170.906125][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.906141][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.906162][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.225283][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.225303][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.225327][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.887897][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1172.390107][T14115] hsr_slave_0: entered promiscuous mode [ 1172.391634][T14115] hsr_slave_1: entered promiscuous mode [ 1172.392671][T14115] debugfs: 'hsr0' already exists in 'hsr' [ 1172.392700][T14115] Cannot create hsr debugfs directory [ 1172.599015][T13749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1172.625211][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1173.063894][T13749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1173.178004][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1173.196652][ T8734] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1173.262387][T13749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1173.550370][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1174.336921][ T8734] usb 9-1: Using ep0 maxpacket: 8 [ 1174.357919][ T8734] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1174.359483][ T8734] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1174.359543][ T8734] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.359575][ T8734] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1174.359603][ T8734] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.359628][ T8734] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.359673][ T8734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.487312][T13749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1174.531342][T13749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1174.703861][ T8734] usb 9-1: usb_control_msg returned -32 [ 1174.703916][ T8734] usbtmc 9-1:16.0: can't read capabilities [ 1175.265051][T14286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1611'. [ 1176.331408][T14295] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1176.430039][ T2884] bridge_slave_1: left allmulticast mode [ 1176.430082][ T2884] bridge_slave_1: left promiscuous mode [ 1176.430382][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.587998][ T2884] bridge_slave_0: left allmulticast mode [ 1176.588031][ T2884] bridge_slave_0: left promiscuous mode [ 1176.588285][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.997048][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1177.398220][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.447414][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.472760][ T2884] bond0 (unregistering): Released all slaves [ 1177.753698][ T1242] usb 9-1: USB disconnect, device number 56 [ 1178.451876][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1178.494457][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1178.534883][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1178.552063][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1178.555070][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1180.406870][T14322] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1618'. [ 1180.837217][ T5596] Bluetooth: hci3: command tx timeout [ 1181.604583][ T2884] hsr_slave_0: left promiscuous mode [ 1181.644159][ T2884] hsr_slave_1: left promiscuous mode [ 1181.655729][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.655763][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.691769][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.691802][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.831840][ T2884] veth1_macvtap: left promiscuous mode [ 1181.845998][ T2884] veth0_macvtap: left promiscuous mode [ 1181.846290][ T2884] veth1_vlan: left promiscuous mode [ 1181.848830][ T2884] veth0_vlan: left promiscuous mode [ 1182.980862][ T5596] Bluetooth: hci3: command tx timeout [ 1183.293444][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.293978][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.605292][ T2879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1183.903592][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1183.961583][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1184.004708][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 1184.052552][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1184.055025][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1184.055048][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 1184.059621][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1185.126941][T14362] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1628'. [ 1186.090857][ T5602] Bluetooth: hci3: command tx timeout [ 1186.366618][ T5596] Bluetooth: hci1: command tx timeout [ 1188.117424][ T5596] Bluetooth: hci3: command tx timeout [ 1188.135516][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1629'. [ 1188.135566][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1629'. [ 1188.436589][ T5596] Bluetooth: hci1: command tx timeout [ 1189.157273][ T1176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1190.516666][ T5596] Bluetooth: hci1: command tx timeout [ 1190.822132][T14394] input: syz0 as /devices/virtual/input/input35 [ 1191.607323][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1192.632976][ T5596] Bluetooth: hci1: command tx timeout [ 1193.139444][T14417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1638'. [ 1193.146632][ T1242] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1193.298025][ T1242] usb 9-1: Using ep0 maxpacket: 8 [ 1193.300019][ T1242] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1193.301560][ T1242] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1193.301620][ T1242] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.301647][ T1242] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1193.301675][ T1242] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1193.301763][ T1242] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.301811][ T1242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.673590][ T1242] usb 9-1: usb_control_msg returned -32 [ 1193.673653][ T1242] usbtmc 9-1:16.0: can't read capabilities [ 1194.746520][ T5596] Bluetooth: hci1: command tx timeout [ 1194.921105][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.134841][T14428] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1195.140488][ T8734] usb 9-1: USB disconnect, device number 57 [ 1197.269799][T14442] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1644'. [ 1200.679660][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.437461][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1207.527842][T14491] Bluetooth: MGMT ver 1.23 [ 1207.527947][T14491] Bluetooth: hci0: invalid len left 17, exp >= 20 [ 1208.175754][ T9324] IPVS: starting estimator thread 0... [ 1208.282256][T14499] IPVS: using max 6 ests per chain, 14400 per kthread [ 1210.030731][T14115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1212.197314][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1212.320631][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1212.995620][T14115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1213.949864][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1213.951714][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.951857][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.952071][T14304] bridge_slave_0: entered allmulticast mode [ 1213.990945][T14304] bridge_slave_0: entered promiscuous mode [ 1214.978002][T14115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1214.998292][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.998910][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.999548][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.999751][T14304] bridge_slave_1: entered allmulticast mode [ 1215.003701][T14304] bridge_slave_1: entered promiscuous mode [ 1215.020496][T14115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1215.104502][T14115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.841376][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.333155][T14596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.457144][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.068421][T14304] team0: Port device team_slave_0 added [ 1219.133136][T14304] team0: Port device team_slave_1 added [ 1219.133700][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.136065][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.162774][T14347] bridge_slave_0: entered allmulticast mode [ 1219.180773][T14347] bridge_slave_0: entered promiscuous mode [ 1219.246259][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.256759][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.257000][T14347] bridge_slave_1: entered allmulticast mode [ 1219.297235][T14347] bridge_slave_1: entered promiscuous mode [ 1219.446023][T14304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.446047][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.446079][T14304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.616126][T14304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.616149][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.616181][T14304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.428754][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1220.561824][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1220.580837][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1220.615610][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1220.667371][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.260336][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.372302][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.774982][T14347] team0: Port device team_slave_0 added [ 1222.981592][ T5596] Bluetooth: hci2: command tx timeout [ 1223.689702][T14347] team0: Port device team_slave_1 added [ 1223.708441][T14304] hsr_slave_0: entered promiscuous mode [ 1223.709946][T14304] hsr_slave_1: entered promiscuous mode [ 1224.916364][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.920410][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.920449][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.987456][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.987480][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.987509][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.999905][ T5596] Bluetooth: hci2: command tx timeout [ 1227.077538][ T5596] Bluetooth: hci2: command tx timeout [ 1229.479701][ T5596] Bluetooth: hci2: command tx timeout [ 1231.141964][T14347] hsr_slave_0: entered promiscuous mode [ 1231.173765][T14347] hsr_slave_1: entered promiscuous mode [ 1231.188042][T14347] debugfs: 'hsr0' already exists in 'hsr' [ 1231.188077][T14347] Cannot create hsr debugfs directory [ 1235.249773][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 1235.249801][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 1236.524327][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1240.694678][T14739] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1712'. [ 1241.557818][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.703701][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1241.765652][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1241.793413][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1241.806824][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1241.827877][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1244.036705][ T5602] Bluetooth: hci0: command tx timeout [ 1244.101553][T14745] bond1: (slave syz_tun): Releasing active interface [ 1244.103679][T14745] tipc: Resetting bearer [ 1244.124387][T14745] tipc: Resetting bearer [ 1244.183100][T14745] tipc: Resetting bearer [ 1244.192191][T14745] bridge0: port 1(syz_tun) entered blocking state [ 1244.192382][T14745] bridge0: port 1(syz_tun) entered disabled state [ 1244.207156][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.239499][T14745] syz_tun: entered promiscuous mode [ 1244.614451][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.614650][T14747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.639892][T14739] bridge0: port 1(syz_tun) entered blocking state [ 1244.640052][T14739] bridge0: port 1(syz_tun) entered forwarding state [ 1244.705910][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1245.982741][T14782] syzkaller0: entered promiscuous mode [ 1245.982773][T14782] syzkaller0: entered allmulticast mode [ 1246.119683][ T5602] Bluetooth: hci0: command tx timeout [ 1246.353751][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.451782][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.469736][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.471138][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.472019][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1246.651611][T14787] netlink: zone id is out of range [ 1246.651632][T14787] netlink: zone id is out of range [ 1246.651642][T14787] netlink: zone id is out of range [ 1246.651652][T14787] netlink: zone id is out of range [ 1246.651662][T14787] netlink: zone id is out of range [ 1246.651672][T14787] netlink: zone id is out of range [ 1246.652118][T14787] netlink: zone id is out of range [ 1246.652131][T14787] netlink: zone id is out of range [ 1246.652141][T14787] netlink: zone id is out of range [ 1246.652151][T14787] netlink: zone id is out of range [ 1247.399958][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1248.339786][ T5602] Bluetooth: hci0: command tx timeout [ 1248.676952][ T5602] Bluetooth: hci5: command tx timeout [ 1250.356574][ T5602] Bluetooth: hci0: command tx timeout [ 1250.756604][ T5602] Bluetooth: hci5: command tx timeout [ 1252.438956][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.836730][ T5602] Bluetooth: hci5: command tx timeout [ 1253.447436][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1254.916577][ T5602] Bluetooth: hci5: command tx timeout [ 1255.673081][T14825] tipc: Enabling of bearer rejected, failed to enable media [ 1256.238969][T14614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.239129][T14614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.239364][T14614] bridge_slave_0: entered allmulticast mode [ 1256.263525][T14614] bridge_slave_0: entered promiscuous mode [ 1256.350663][T14614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.350871][T14614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.351586][T14614] bridge_slave_1: entered allmulticast mode [ 1256.406012][T14614] bridge_slave_1: entered promiscuous mode [ 1256.846695][T14614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.920513][T14614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.884749][T14848] netlink: 'syz.8.1721': attribute type 7 has an invalid length. [ 1258.277198][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.038625][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1265.346850][T14614] team0: Port device team_slave_0 added [ 1265.550353][T14614] team0: Port device team_slave_1 added [ 1265.992734][T14614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.992757][T14614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.992789][T14614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.095571][T14614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.095597][T14614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.095622][T14614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.955986][T14614] hsr_slave_0: entered promiscuous mode [ 1267.965717][T14614] hsr_slave_1: entered promiscuous mode [ 1267.977551][T14614] debugfs: 'hsr0' already exists in 'hsr' [ 1267.977587][T14614] Cannot create hsr debugfs directory [ 1269.159061][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1274.918851][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.518671][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1278.088539][T14927] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.1736'. [ 1279.463231][T14936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1280.037741][T14598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1281.955544][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1282.018484][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1282.089695][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1282.177955][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1282.205843][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1284.997045][ T5602] Bluetooth: hci6: command tx timeout [ 1285.157303][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1287.077048][ T5596] Bluetooth: hci6: command tx timeout [ 1288.691492][ T2884] bridge_slave_1: left allmulticast mode [ 1288.691539][ T2884] bridge_slave_1: left promiscuous mode [ 1288.691892][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.156766][ T5596] Bluetooth: hci6: command tx timeout [ 1290.278991][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1290.503998][ T2884] bridge_slave_0: left allmulticast mode [ 1290.504044][ T2884] bridge_slave_0: left promiscuous mode [ 1290.504435][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.685938][ T2884] bridge_slave_1: left allmulticast mode [ 1290.685984][ T2884] bridge_slave_1: left promiscuous mode [ 1290.686273][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.793927][ T2884] bridge_slave_0: left allmulticast mode [ 1290.793972][ T2884] bridge_slave_0: left promiscuous mode [ 1290.794251][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.236751][ T5596] Bluetooth: hci6: command tx timeout [ 1291.505716][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.569913][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.615738][ T2884] bond0 (unregistering): Released all slaves [ 1292.122158][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.193195][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.244021][ T2884] bond0 (unregistering): Released all slaves [ 1292.300489][T14752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.300636][T14752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.300883][T14752] bridge_slave_0: entered allmulticast mode [ 1292.304162][T14752] bridge_slave_0: entered promiscuous mode [ 1292.571294][T14752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.571437][T14752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.571686][T14752] bridge_slave_1: entered allmulticast mode [ 1292.585580][T14752] bridge_slave_1: entered promiscuous mode [ 1293.314124][T14752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.346961][T14978] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.1748'. [ 1293.434151][T14752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.008965][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1752'. [ 1296.088517][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.695002][T14752] team0: Port device team_slave_0 added [ 1296.707774][T14788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.709012][T14788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.709276][T14788] bridge_slave_0: entered allmulticast mode [ 1296.745392][T14788] bridge_slave_0: entered promiscuous mode [ 1296.791940][T14752] team0: Port device team_slave_1 added [ 1296.792722][T14788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.792857][T14788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.793073][T14788] bridge_slave_1: entered allmulticast mode [ 1296.830201][T14788] bridge_slave_1: entered promiscuous mode [ 1300.916764][ T2884] hsr_slave_0: left promiscuous mode [ 1301.797405][T14591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1302.218782][T15011] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1302.280661][T15011] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1302.300169][T15011] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1302.331878][T15011] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1302.353282][T15011] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1302.606319][T15014] Bluetooth: hci3: command 0x0406 tx timeout [ 1304.516782][T15014] Bluetooth: hci8: command tx timeout [ 1305.644284][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.525827][T15011] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1306.594387][T15011] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1306.613229][T15011] Bluetooth: hci8: command tx timeout [ 1306.667740][T15023] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1306.671344][T15023] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1306.672489][T15023] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1307.557221][ T1446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.811144][T15023] Bluetooth: hci1: command 0x0406 tx timeout [ 1308.686787][T15023] Bluetooth: hci8: command tx timeout [ 1309.863630][ T5596] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1309.928844][ T5596] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1309.978400][ T5596] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1310.005748][ T5596] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1310.017142][ T5596] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1310.248667][ T2884] hsr_slave_1: left promiscuous mode [ 1310.352561][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.756673][T15023] Bluetooth: hci8: command tx timeout [ 1311.027233][ T1242] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1311.183587][ T1242] usb 9-1: not running at top speed; connect to a high speed hub [ 1311.183639][ T1242] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1311.206567][ T1242] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1311.213544][ T1242] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1311.213577][ T1242] usb 9-1: Product: syz [ 1311.213595][ T1242] usb 9-1: Manufacturer: syz [ 1311.309294][ T1242] usb 9-1: USB2VGA dongle found at address 58 [ 1311.328254][ T1242] usb 9-1: Allocated 8 output buffers [ 1311.328285][ T1242] usb 9-1: Not attached to USB 2.0 hub, deferring init [ 1311.504308][T15033] usb 9-1: Device not attached to USB 2.0 hub [ 1311.524211][ T1242] usb 9-1: USB disconnect, device number 58 [ 1312.597398][T14598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1312.917444][ T5596] Bluetooth: hci9: command tx timeout [ 1312.921149][ T5602] Bluetooth: hci10: command tx timeout [ 1314.997222][ T5596] Bluetooth: hci9: command tx timeout [ 1314.997266][ T5596] Bluetooth: hci10: command tx timeout [ 1317.077282][ T5602] Bluetooth: hci9: command tx timeout [ 1317.078056][ T5596] Bluetooth: hci10: command tx timeout [ 1318.438109][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.157479][ T5602] Bluetooth: hci9: command tx timeout [ 1319.157541][ T5596] Bluetooth: hci10: command tx timeout [ 1324.200418][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1328.095675][ T5602] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1328.197295][ T5602] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1328.200831][ T5602] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1328.203128][ T5602] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1328.204510][ T5602] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1328.526316][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.961086][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1330.516741][T12915] Bluetooth: hci11: command tx timeout [ 1332.596890][T12915] Bluetooth: hci11: command tx timeout [ 1334.676826][T12915] Bluetooth: hci11: command tx timeout [ 1335.720322][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1336.756885][T12915] Bluetooth: hci11: command tx timeout [ 1340.163239][ T2884] hsr_slave_0: left promiscuous mode [ 1341.342983][ T2884] hsr_slave_1: left promiscuous mode [ 1341.358429][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.483862][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1341.575456][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.740176][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 1342.969906][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 1343.556639][T12915] Bluetooth: hci2: command 0x0406 tx timeout [ 1343.833765][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1344.007482][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1344.013997][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1344.016274][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1344.045472][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1346.433500][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 1346.444445][ T5596] Bluetooth: hci4: command tx timeout [ 1346.579775][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 1348.516717][ T5596] Bluetooth: hci4: command tx timeout [ 1349.138320][T15038] tipc: Resetting bearer [ 1349.303287][T15038] bridge0: port 1(syz_tun) entered disabled state [ 1350.600317][ T5596] Bluetooth: hci4: command tx timeout [ 1351.177473][T15038] syz_tun (unregistering): left promiscuous mode [ 1351.177684][T15038] bridge0: port 1(syz_tun) entered disabled state [ 1352.560618][T15038] tipc: Disabling bearer [ 1352.676613][ T5596] Bluetooth: hci4: command tx timeout [ 1360.683036][T10132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1363.975236][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1364.044295][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1364.046110][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1364.071698][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1364.073310][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1366.084669][ T5248] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1366.276625][ T5596] Bluetooth: hci0: command tx timeout [ 1366.443174][ T9238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1367.081412][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.356657][ T5596] Bluetooth: hci0: command tx timeout [ 1369.056094][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1369.110997][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1369.116225][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1369.142283][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1369.143103][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1369.994649][ T5602] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1370.073152][ T5602] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1370.075349][ T5602] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1370.079816][ T5602] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1370.085891][ T5602] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1370.436692][ T5596] Bluetooth: hci0: command tx timeout [ 1371.396759][ T5596] Bluetooth: hci5: command tx timeout [ 1371.477953][ T175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1372.516623][ T5596] Bluetooth: hci0: command tx timeout [ 1373.476890][T12915] Bluetooth: hci5: command tx timeout [ 1373.599578][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.599826][T15040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.601470][T15040] bridge_slave_0: entered allmulticast mode [ 1373.639309][T15040] bridge_slave_0: entered promiscuous mode [ 1373.682991][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.683247][T15040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.683499][T15040] bridge_slave_1: entered allmulticast mode [ 1373.720980][T15040] bridge_slave_1: entered promiscuous mode [ 1375.579852][ T5602] Bluetooth: hci5: command tx timeout [ 1376.356626][ T5602] Bluetooth: hci12: command tx timeout [ 1376.516887][T10132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1377.636671][ T5602] Bluetooth: hci5: command tx timeout [ 1378.436747][ T5602] Bluetooth: hci12: command tx timeout [ 1380.516825][ T5602] Bluetooth: hci12: command tx timeout [ 1381.800124][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.596682][ T5602] Bluetooth: hci12: command tx timeout [ 1387.564499][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.442011][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1388.492445][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1388.520517][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1388.552952][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1388.587262][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1390.756814][ T5596] Bluetooth: hci3: command tx timeout [ 1392.838234][ T5602] Bluetooth: hci3: command tx timeout [ 1393.318580][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1394.916612][ T5602] Bluetooth: hci3: command tx timeout [ 1396.996858][ T5602] Bluetooth: hci3: command tx timeout [ 1399.085690][ T1192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.840139][ T175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1405.433718][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1405.483987][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1405.493829][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1405.568192][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1405.569323][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1407.716595][ T5602] Bluetooth: hci6: command tx timeout [ 1409.796539][ T5602] Bluetooth: hci6: command tx timeout [ 1410.597624][T10132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1411.876818][ T5596] Bluetooth: hci6: command tx timeout [ 1413.956774][ T5596] Bluetooth: hci6: command tx timeout [ 1416.358063][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.118144][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.535744][T12915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1425.599720][T12915] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1425.602001][T12915] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1425.650028][T15014] Bluetooth: hci8: command 0x0406 tx timeout [ 1425.654727][T12915] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1425.685693][T12915] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1427.238009][ T169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.796760][ T5602] Bluetooth: hci7: command tx timeout [ 1428.525100][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.796780][ T39] INFO: task syz-executor:14614 blocked for more than 143 seconds. [ 1429.796813][ T39] Not tainted syzkaller #0 [ 1429.796826][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1429.796837][ T39] task:syz-executor state:D stack:22584 pid:14614 tgid:14614 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1429.796906][ T39] Call Trace: [ 1429.796915][ T39] [ 1429.796933][ T39] __schedule+0x16d9/0x5700 [ 1429.797143][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1429.797193][ T39] ? __pfx___schedule+0x10/0x10 [ 1429.797245][ T39] rt_mutex_schedule+0x76/0xf0 [ 1429.797279][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 1429.797352][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1429.797384][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1429.797414][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1429.797464][ T39] ? del_device_store+0xd6/0x370 [ 1429.797529][ T39] ? del_device_store+0xd6/0x370 [ 1429.797554][ T39] mutex_lock_nested+0x168/0x1d0 [ 1429.797581][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 1429.797625][ T39] del_device_store+0xd6/0x370 [ 1429.797652][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 1429.797683][ T39] ? __pfx_del_device_store+0x10/0x10 [ 1429.797711][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 1429.797742][ T39] ? sysfs_kf_write+0x166/0x260 [ 1429.797777][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1429.797806][ T39] kernfs_fop_write_iter+0x3a5/0x540 [ 1429.797840][ T39] vfs_write+0x61e/0xbb0 [ 1429.797884][ T39] ? __pfx_vfs_write+0x10/0x10 [ 1429.797936][ T39] ? do_sys_openat2+0x14e/0x200 [ 1429.798081][ T39] ? kmem_cache_free+0x187/0x6d0 [ 1429.798129][ T39] ksys_write+0x156/0x270 [ 1429.798165][ T39] ? __pfx_ksys_write+0x10/0x10 [ 1429.798212][ T39] do_syscall_64+0x166/0x520 [ 1429.798260][ T39] ? trace_irq_disable+0x3b/0x140 [ 1429.798293][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.798319][ T39] ? clear_bhb_loop+0x70/0xc0 [ 1429.798350][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.798376][ T39] RIP: 0033:0x7ff63c67ea0e [ 1429.798399][ T39] RSP: 002b:00007ffcdbd20978 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1429.798424][ T39] RAX: ffffffffffffffda RBX: 0000555556133500 RCX: 00007ff63c67ea0e [ 1429.798443][ T39] RDX: 0000000000000001 RSI: 00007ffcdbd20a00 RDI: 0000000000000005 [ 1429.798458][ T39] RBP: 00007ff63c75610b R08: 0000000000000000 R09: 0000000000000000 [ 1429.798475][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.798489][ T39] R13: 00007ffcdbd20a00 R14: 00007ff63d474620 R15: 0000000000000003 [ 1429.798528][ T39] [ 1429.798576][ T39] [ 1429.798576][ T39] Showing all locks held in the system: [ 1429.798594][ T39] locks held by ktimers/0/16: 4, last CPU#0: [ 1429.798619][ T39] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1429.798690][ T39] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1429.798757][ T39] #2: ffff8880b84285f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 1429.798823][ T39] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1429.798887][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 1429.798905][ T39] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1429.798970][ T39] locks held by kworker/u8:6/69: 3, on CPU#1: [ 1429.798987][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.799056][ T39] #1: ffffc9000156fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.799123][ T39] #2: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1429.799288][ T39] locks held by kworker/u8:16/2884: 4, on CPU#1: [ 1429.799305][ T39] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.799373][ T39] #1: ffffc9000f99fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.799457][ T39] #2: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1429.799575][ T39] #3: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1429.799716][ T39] locks held by dhcpcd/5248: 2, on CPU#1: [ 1429.799734][ T39] #0: ffff88802b928928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 1429.799848][ T39] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 1429.799915][ T39] locks held by getty/5342: 2, on CPU#0: [ 1429.799932][ T39] #0: ffff88803394c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1429.800028][ T39] #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1429.800090][ T39] locks held by kworker/0:5/5599: 3, last CPU#0: [ 1429.800107][ T39] #0: ffff88813ff2a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.800176][ T39] #1: ffffc90005b5fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.800243][ T39] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1429.800305][ T39] locks held by kworker/0:6/5862: 3, last CPU#0: [ 1429.800322][ T39] #0: ffff88813ff2a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.800390][ T39] #1: ffffc90006417c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.800459][ T39] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x18b0 [ 1429.800581][ T39] locks held by kworker/u8:0/9238: 3, on CPU#1: [ 1429.800604][ T39] #0: ffff8880328e9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.800672][ T39] #1: ffffc900045dfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.800743][ T39] #2: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 1429.800820][ T39] locks held by syz-executor/14304: 1, on CPU#1: [ 1429.800837][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1429.800923][ T39] locks held by syz-executor/14347: 7, on CPU#1: [ 1429.800941][ T39] #0: ffff888035eb4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1429.801013][ T39] #1: ffff88805f909878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1429.801074][ T39] #2: ffff88802a36cf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1429.801141][ T39] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1429.801201][ T39] #4: ffff888061f66160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1429.801323][ T39] #5: ffff88806424e310 (&devlink->lock_key#39){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1429.801421][ T39] #6: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1429.801507][ T39] locks held by kworker/u8:22/14598: 6, last CPU#0: [ 1429.801524][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.801599][ T39] #1: ffffc900059efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.801670][ T39] #2: ffff888026df2310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1429.801746][ T39] #3: ffff888057815120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1429.801816][ T39] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1429.801876][ T39] #5: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1429.801941][ T39] locks held by syz-executor/14614: 4, on CPU#1: [ 1429.801959][ T39] #0: ffff888035eb4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1429.802028][ T39] #1: ffff888060d0a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1429.802087][ T39] #2: ffff88802a36cf08 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1429.802154][ T39] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1429.802214][ T39] locks held by kworker/0:1/14640: 10, last CPU#0: [ 1429.802231][ T39] #0: ffff8880342d6538 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.802305][ T39] #1: ffffc9000588fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1429.802373][ T39] #2: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1429.802439][ T39] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1429.802510][ T39] #4: ffff88803e912ce8 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1429.802567][ T39] #5: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 1429.802634][ T39] #6: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1429.802701][ T39] #7: ffffffff8f1c3d60 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 1429.802759][ T39] #8: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1429.802827][ T39] #9: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 1429.802886][ T39] locks held by syz.3.1750/15002: 2, last CPU#0: [ 1429.802903][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1429.802959][ T39] #1: ffffffff8f311970 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1429.803029][ T39] locks held by syz-executor/15010: 2, on CPU#1: [ 1429.803047][ T39] #0: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1429.803106][ T39] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x18/0x60 [ 1429.803170][ T39] locks held by syz-executor/15020: 1, on CPU#1: [ 1429.803188][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1429.803246][ T39] locks held by syz-executor/15028: 1, on CPU#1: [ 1429.803263][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1429.803320][ T39] locks held by syz-executor/15040: 1, on CPU#1: [ 1429.803338][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1429.803401][ T39] locks held by syz-executor/15051: 2, on CPU#1: [ 1429.803419][ T39] #0: ffffffff90b3f088 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1429.803491][ T39] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1429.803554][ T39] locks held by syz-executor/15102: 2, on CPU#1: [ 1429.803571][ T39] #0: ffffffff90b250b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1429.803648][ T39] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1429.803712][ T39] locks held by syz-executor/15127: 2, on CPU#1: [ 1429.803729][ T39] #0: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1429.803788][ T39] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 1429.803903][ T39] locks held by syz-executor/15133: 2, on CPU#1: [ 1429.803921][ T39] #0: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1429.803980][ T39] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 1429.804037][ T39] locks held by syz-executor/15160: 1, on CPU#1: [ 1429.804055][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1429.804153][ T39] locks held by syz-executor/15168: 1, on CPU#1: [ 1429.804170][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1429.804239][ T39] locks held by syz-executor/15176: 1, on CPU#1: [ 1429.804256][ T39] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1429.804328][ T39] [ 1429.804335][ T39] ============================================= [ 1429.804335][ T39] [ 1429.804348][ T39] NMI backtrace for cpu 1 [ 1429.804368][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1429.804395][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1429.804410][ T39] Call Trace: [ 1429.804421][ T39] [ 1429.804431][ T39] dump_stack_lvl+0xe8/0x150 [ 1429.804470][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1429.804530][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1429.804558][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1429.804596][ T39] sys_info+0x135/0x170 [ 1429.804621][ T39] watchdog+0xfd7/0x1030 [ 1429.804664][ T39] ? watchdog+0x1c7/0x1030 [ 1429.804706][ T39] kthread+0x38b/0x470 [ 1429.804732][ T39] ? __pfx_watchdog+0x10/0x10 [ 1429.804763][ T39] ? __pfx_kthread+0x10/0x10 [ 1429.804789][ T39] ret_from_fork+0x514/0xb70 [ 1429.804817][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.804842][ T39] ? __switch_to+0xc89/0x1420 [ 1429.804882][ T39] ? __pfx_kthread+0x10/0x10 [ 1429.804909][ T39] ret_from_fork_asm+0x1a/0x30 [ 1429.804952][ T39] [ 1429.804962][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1429.805000][ C0] NMI backtrace for cpu 0 [ 1429.805017][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1429.805040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1429.805052][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1429.805089][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 c0 cc e7 09 cc 89 f6 31 d2 e9 e6 e2 96 03 66 0f 1f 44 00 [ 1429.805108][ C0] RSP: 0018:ffffc90000157bd0 EFLAGS: 00000046 [ 1429.805125][ C0] RAX: 0000000000000079 RBX: ffff8880b8423c80 RCX: 0000000000000838 [ 1429.805140][ C0] RDX: 0000000000000000 RSI: 0000000000000079 RDI: 0000000000000838 [ 1429.805153][ C0] RBP: ffffc90000157c88 R08: 0000000000000100 R09: 0000000000000100 [ 1429.805167][ C0] R10: 0000000000000100 R11: ffffffff81755500 R12: 0000000000000079 [ 1429.805180][ C0] R13: dffffc0000000000 R14: 0000000010007215 R15: 0000000000000020 [ 1429.805195][ C0] FS: 0000000000000000(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 1429.805212][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.805226][ C0] CR2: 00007fc688699008 CR3: 0000000038086000 CR4: 00000000003526f0 [ 1429.805243][ C0] Call Trace: [ 1429.805252][ C0] [ 1429.805259][ C0] lapic_next_event+0x11/0x20 [ 1429.805283][ C0] clockevents_program_event+0x385/0x630 [ 1429.805309][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1429.805334][ C0] ? tick_program_event+0x8f/0x120 [ 1429.805364][ C0] hrtimer_run_softirq+0x259/0x2e0 [ 1429.805393][ C0] handle_softirqs+0x1da/0x6d0 [ 1429.805427][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1429.805456][ C0] run_ktimerd+0x6a/0x100 [ 1429.805487][ C0] smpboot_thread_fn+0x565/0xa70 [ 1429.805518][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1429.805553][ C0] kthread+0x38b/0x470 [ 1429.805574][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1429.805605][ C0] ? __pfx_kthread+0x10/0x10 [ 1429.805626][ C0] ret_from_fork+0x514/0xb70 [ 1429.805647][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.805668][ C0] ? __switch_to+0xc89/0x1420 [ 1429.805698][ C0] ? __pfx_kthread+0x10/0x10 [ 1429.805719][ C0] ret_from_fork_asm+0x1a/0x30 [ 1429.805748][ C0] [ 1429.806005][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1431.288774][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1431.298444][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1431.308555][ T39] Call Trace: [ 1431.311869][ T39] [ 1431.314833][ T39] vpanic+0x56d/0xa60 [ 1431.318864][ T39] ? __pfx_vpanic+0x10/0x10 [ 1431.323410][ T39] ? console_srcu_read_unlock+0x3a/0x60 [ 1431.329010][ T39] panic+0xc5/0xd0 [ 1431.332787][ T39] ? __pfx_panic+0x10/0x10 [ 1431.337259][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 1431.342352][ T39] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1431.348564][ T39] watchdog+0x1030/0x1030 [ 1431.352973][ T39] ? watchdog+0x1c7/0x1030 [ 1431.357475][ T39] kthread+0x38b/0x470 [ 1431.361585][ T39] ? __pfx_watchdog+0x10/0x10 [ 1431.366311][ T39] ? __pfx_kthread+0x10/0x10 [ 1431.370953][ T39] ret_from_fork+0x514/0xb70 [ 1431.375591][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1431.380745][ T39] ? __switch_to+0xc89/0x1420 [ 1431.385512][ T39] ? __pfx_kthread+0x10/0x10 [ 1431.390144][ T39] ret_from_fork_asm+0x1a/0x30 [ 1431.395110][ T39] [ 1431.398784][ T39] Kernel Offset: disabled [ 1431.403140][ T39] Rebooting in 86400 seconds..