last executing test programs: 3m25.648277548s ago: executing program 4 (id=1344): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m53.004688384s ago: executing program 4 (id=1344): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m26.90721744s ago: executing program 4 (id=1344): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m40.177760861s ago: executing program 4 (id=1344): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m1.651097385s ago: executing program 4 (id=1344): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 32.298412894s ago: executing program 4 (id=1344): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 17.418100697s ago: executing program 1 (id=2407): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = semget$private(0x0, 0x1, 0x4) semctl$SEM_INFO(r4, 0x4, 0x13, &(0x7f00000000c0)=""/111) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008402"]) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r7}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sigaltstack(&(0x7f00000015c0)={0x0, 0x80000002}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) 16.747999851s ago: executing program 0 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x100, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0xe4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@gcr_ga={0xbd, 0x6}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x45, 0x80, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x21}}, @measure_req={0x26, 0x31, {0x8, 0x5, 0xd, "53ba1c1a637dd2ab05df5ee56efc902e6953932b6285b7a5f7387c8409cfbf8a43e4bbd262a35d9be5b278362845"}}, @channel_switch={0x25, 0x3, {0x1, 0x1, 0x26}}]}, @NL80211_ATTR_BEACON_HEAD={0x89, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @random="e8b6a44faba4", {0x8, 0x9}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x7, @default, 0x104, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x9, 0x8, 0xc}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x20}}, @void, [{0xdd, 0x3f, "526867e91375215b291fea80eb24654b71f2b213d0506d56ea88434255844efae28a322791568b2142f5b249ce758d260de2c356a2773f88994f694d239e4a"}]}}]]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8008020}, 0x8000) 14.967696035s ago: executing program 0 (id=2411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r4 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r2) close(r4) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r5, &(0x7f0000000440)="bb8f1ad1bf2a", 0x6, 0x10, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 14.382226876s ago: executing program 1 (id=2413): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 12.218883793s ago: executing program 2 (id=2414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 11.730272308s ago: executing program 0 (id=2416): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101) dup3(0xffffffffffffffff, r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) dup(r1) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x627, 0x4c1, 0x9, 0x0, 0x0) 11.566863015s ago: executing program 3 (id=2417): connect$llc(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 10.972118382s ago: executing program 1 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x4b, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x2000c0c0) r5 = semget$private(0x0, 0x5, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0x5, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x8, 0x200, 0xfffffff8], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0xd, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x403, 0x3, 0x6, 0x100fffd, 0x2005, 0x0, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x6, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) semtimedop(r5, &(0x7f0000000080)=[{0x0, 0x7c, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000400)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_dev$ndb(0x0, 0x0, 0x82) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01bf061438b1fd685b241f002dbd", @ANYRES32, @ANYBLOB="14005e8008000200000000000800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) semctl$IPC_INFO(r5, 0x4, 0x3, 0x0) 9.942203711s ago: executing program 0 (id=2419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b80)=""/102400, 0x19000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x14, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x80000, 0x100, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='afs_cell\x00', r4, 0x0, 0x3}, 0x18) r5 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000001a40)={0x8, 0x6, 0x0, 0x8000, '\x00', '\x00', '\x00', 0x0, 0x2, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) ptrace(0x10, r3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 8.147761736s ago: executing program 1 (id=2420): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 8.114122007s ago: executing program 0 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xda5c, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 8.087840431s ago: executing program 3 (id=2422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x8, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) 7.892534798s ago: executing program 2 (id=2423): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, &(0x7f0000000300)=0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000}) fcntl$lock(r3, 0x26, &(0x7f0000000440)={0x2, 0x0, 0x85a, 0x9a8}) fcntl$lock(r3, 0x25, &(0x7f0000000640)={0x0, 0x2, 0x4, 0xc806}) 5.952955821s ago: executing program 3 (id=2424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x0, 0x4040004, 0x0, 0x0) shutdown(r4, 0x1) 5.950850557s ago: executing program 2 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r4 = syz_io_uring_setup(0x417d, &(0x7f0000000080)={0x0, 0x1e4d, 0x1, 0x0, 0x10f}, 0x0, &(0x7f0000000140)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x4000000c}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 4.860623365s ago: executing program 3 (id=2426): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000001380)=0x57, 0x4) syz_emit_ethernet(0x83, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_emit_ethernet(0xfffffffffffffe8c, &(0x7f0000000140)=ANY=[], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read$FUSE(r2, &(0x7f0000006280)={0x2020}, 0x2020) 4.481510511s ago: executing program 2 (id=2427): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x7, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x1, [0x0, 0x80, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x42, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x80000000000, 0x79, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffffffffffd, 0x4000000000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34, 0x0, 0x4, 0x0, 0x400, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x20b50d5b]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18) epoll_pwait(0xffffffffffffffff, &(0x7f0000000c80)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000cc0)={[0x1dd]}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) landlock_create_ruleset(0x0, 0x0, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.386030282s ago: executing program 1 (id=2428): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.560686434s ago: executing program 3 (id=2429): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) unshare(0x2c020400) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 3.536963928s ago: executing program 2 (id=2430): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x4b, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r4, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x2000c0c0) r5 = semget$private(0x0, 0x5, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0x5, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x8, 0x200, 0xfffffff8], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0xd, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x403, 0x3, 0x6, 0x100fffd, 0x2005, 0x0, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x6, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) semtimedop(r5, &(0x7f0000000080)=[{0x0, 0x7c, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000400)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_dev$ndb(0x0, 0x0, 0x82) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01bf061438b1fd685b241f002dbd", @ANYRES32, @ANYBLOB="14005e8008000200000000000800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) semctl$IPC_INFO(r5, 0x4, 0x3, 0x0) 96.25443ms ago: executing program 2 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x6, 0xfffffffffffffffb) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) 93.798215ms ago: executing program 0 (id=2432): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff6382"], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014000000110001"], 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 56.088251ms ago: executing program 1 (id=2433): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x4) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000240)='[-$*\x00', 0x5) pipe2$9p(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 0s ago: executing program 3 (id=2434): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, r3, 0x80000}) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d2901"], 0xdd12}], 0x1}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) kernel console output (not intermixed with test programs): invalid descriptor of length 0, skipping remainder of the config [ 566.939528][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 566.951364][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.970732][ T5888] usb 3-1: config 0 descriptor?? [ 566.986209][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 567.304580][T12174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 567.459038][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 567.466203][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 567.485522][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 567.495129][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 567.528483][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 567.545349][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 567.557554][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 567.636727][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 567.769521][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 567.784357][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 567.784424][T12191] chnl_net:caif_netlink_parms(): no params data found [ 567.793624][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 567.810013][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 567.892645][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.899849][T12191] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.909438][T12191] bridge_slave_0: entered allmulticast mode [ 567.917889][T12191] bridge_slave_0: entered promiscuous mode [ 567.928761][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.933032][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 567.962090][T12191] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.978100][T12191] bridge_slave_1: entered allmulticast mode [ 567.978979][ T24] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 567.993793][T12191] bridge_slave_1: entered promiscuous mode [ 567.999035][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.008880][ T24] usb 1-1: Product: syz [ 568.017542][ T24] usb 1-1: Manufacturer: syz [ 568.022660][ T24] usb 1-1: SerialNumber: syz [ 568.028650][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 568.042629][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 568.050500][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 568.062964][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 568.069543][ T24] usb 1-1: config 0 descriptor?? [ 568.076919][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 568.088720][ T5888] pwc: Registered as video103. [ 568.096724][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86 [ 568.108046][T12191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.122546][ T5888] usb 3-1: USB disconnect, device number 57 [ 568.150009][T12191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.230309][T12191] team0: Port device team_slave_0 added [ 568.248986][T12191] team0: Port device team_slave_1 added [ 568.388464][T12191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.412383][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.447365][T12191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.464647][T12191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.471612][T12191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.504721][T12191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.572960][ T5822] Bluetooth: hci2: command tx timeout [ 568.876776][T12191] hsr_slave_0: entered promiscuous mode [ 569.017654][T12191] hsr_slave_1: entered promiscuous mode [ 569.173526][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.224388][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.123225][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 570.146219][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 570.176745][T12227] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 570.179636][ T24] asix 1-1:0.0: probe with driver asix failed with error -71 [ 570.216142][ T24] usb 1-1: USB disconnect, device number 50 [ 570.223228][T12227] overlayfs: statfs failed on './file0' [ 570.666808][ T5822] Bluetooth: hci2: command tx timeout [ 571.537257][ T5888] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 572.109837][T12191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 572.209703][T12191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 572.321818][T12191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 572.338830][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 572.422822][T12191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 572.444895][T12248] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 572.451706][T12248] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 572.680272][T12248] vhci_hcd vhci_hcd.0: Device attached [ 572.701161][T12247] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 572.707796][T12247] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 572.732063][ T5822] Bluetooth: hci2: command tx timeout [ 572.752101][ T5904] vhci_hcd: vhci_device speed not set [ 572.762259][T12252] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 572.768897][T12252] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 572.812541][ T5904] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 572.835973][T12262] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 572.842617][T12262] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.915735][T12262] vhci_hcd vhci_hcd.0: Device attached [ 572.931244][ T5822] Bluetooth: Wrong link type (-71) [ 572.931300][T12252] vhci_hcd vhci_hcd.0: Device attached [ 572.984583][T12247] vhci_hcd vhci_hcd.0: Device attached [ 573.245536][T12251] vhci_hcd: connection closed [ 573.282989][T12263] vhci_hcd: connection closed [ 573.317395][T12249] vhci_hcd: connection reset by peer [ 573.330633][T12256] vhci_hcd: connection closed [ 573.438813][ T6001] vhci_hcd: stop threads [ 573.702747][ T6001] vhci_hcd: release socket [ 573.926953][ T6001] vhci_hcd: disconnect device [ 574.131561][ T6001] vhci_hcd: stop threads [ 574.164692][ T6001] vhci_hcd: release socket [ 574.218309][ T6001] vhci_hcd: disconnect device [ 574.286803][T12191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.346735][ T6001] vhci_hcd: stop threads [ 574.351041][ T6001] vhci_hcd: release socket [ 574.402638][ T6001] vhci_hcd: disconnect device [ 574.450292][ T6001] vhci_hcd: stop threads [ 574.455770][ T6001] vhci_hcd: release socket [ 574.469852][T12191] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.479835][ T6001] vhci_hcd: disconnect device [ 574.490110][ T30] audit: type=1326 audit(1750786401.362:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12268 comm="syz.3.1958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8315f8e929 code=0x0 [ 574.607762][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.614968][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.706632][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.713859][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.812707][ T5822] Bluetooth: hci2: command tx timeout [ 576.161315][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1963'. [ 576.562131][T11502] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 576.658226][T12191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.264280][T11502] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 577.277889][T11502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.290110][T11502] usb 1-1: config 0 descriptor?? [ 577.848734][T12191] veth0_vlan: entered promiscuous mode [ 577.864680][T12191] veth1_vlan: entered promiscuous mode [ 577.911915][T12191] veth0_macvtap: entered promiscuous mode [ 577.926349][T12191] veth1_macvtap: entered promiscuous mode [ 577.942007][ T5904] vhci_hcd: vhci_device speed not set [ 577.948869][T11502] usb 1-1: Cannot set autoneg [ 577.954046][T11502] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 577.968874][T11502] usb 1-1: USB disconnect, device number 51 [ 577.969289][T12191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.997577][T12191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.315221][T12191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.338702][T12191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.348849][T12191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.360996][T12191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.459049][ T30] audit: type=1326 audit(1750786405.302:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12309 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8315f8e929 code=0x7fc00000 [ 578.542019][ T5888] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 578.561030][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.584889][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.114150][T12328] binder: 12321:12328 ioctl c018620c 200000000000 returned -1 [ 579.268791][ T5888] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 579.494985][T11226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.512999][T11226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.642775][ T5888] usb 3-1: config 0 has no interfaces? [ 579.783077][ T5888] usb 3-1: config 0 has no interfaces? [ 579.872716][ T5888] usb 3-1: config 0 has no interfaces? [ 579.879577][ T5888] usb 3-1: config 0 has no interfaces? [ 579.886751][ T5888] usb 3-1: config 0 has no interfaces? [ 579.898204][ T5888] usb 3-1: config 0 has no interfaces? [ 579.917897][ T5888] usb 3-1: config 0 has no interfaces? [ 579.925745][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 579.941506][ T5888] usb 3-1: config 0 has no interfaces? [ 579.962258][ T5888] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 579.980932][ T5888] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 580.005552][ T5888] usb 3-1: Product: syz [ 580.018833][ T5888] usb 3-1: Manufacturer: syz [ 580.025164][ T5888] usb 3-1: SerialNumber: syz [ 580.033217][ T5888] usb 3-1: config 0 descriptor?? [ 580.277889][ T1169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.714296][ T5888] usb 3-1: USB disconnect, device number 58 [ 580.980426][ T1169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.177495][ T1169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.246422][ T1169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.360346][ T1169] bridge_slave_1: left allmulticast mode [ 581.367509][ T1169] bridge_slave_1: left promiscuous mode [ 581.377208][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.386269][ T1169] bridge_slave_0: left allmulticast mode [ 581.392366][ T1169] bridge_slave_0: left promiscuous mode [ 581.398120][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.709464][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.720080][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.729947][ T1169] bond0 (unregistering): Released all slaves [ 581.929705][ T1169] hsr_slave_0: left promiscuous mode [ 581.938490][ T1169] hsr_slave_1: left promiscuous mode [ 581.944615][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.952279][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.960009][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.967847][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.989048][ T1169] veth1_macvtap: left promiscuous mode [ 581.994665][ T1169] veth0_macvtap: left promiscuous mode [ 582.000231][ T1169] veth1_vlan: left promiscuous mode [ 582.005598][ T1169] veth0_vlan: left promiscuous mode [ 586.164183][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.173798][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.182935][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.192012][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.199721][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 586.420607][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 586.467927][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 588.283190][ T5826] Bluetooth: hci2: command tx timeout [ 588.326265][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 588.542696][ T5880] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 589.102723][ T5880] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 589.988793][T12322] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 590.079643][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.090201][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.100999][ T5880] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 590.110617][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 590.119021][ T5880] usb 1-1: SerialNumber: syz [ 590.325337][T12419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (10 ns). Using initial count to start timer. [ 590.356759][ T5826] Bluetooth: hci2: command tx timeout [ 590.359468][ T5880] usb 1-1: 0:2 : does not exist [ 590.391548][ T5880] usb 1-1: unit 255 not found! [ 590.444861][ T5880] usb 1-1: 5:0: cannot get min/max values for control 17 (id 5) [ 590.454186][T12376] chnl_net:caif_netlink_parms(): no params data found [ 591.326253][ T5880] usb 1-1: USB disconnect, device number 52 [ 591.561182][T12376] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.578055][T12376] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.591285][T12376] bridge_slave_0: entered allmulticast mode [ 591.599268][T12376] bridge_slave_0: entered promiscuous mode [ 591.619415][T12376] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.626765][T12376] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.634631][T12376] bridge_slave_1: entered allmulticast mode [ 591.641558][T12376] bridge_slave_1: entered promiscuous mode [ 591.653202][T12441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2003'. [ 591.668511][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2003'. [ 591.680540][T12441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2003'. [ 591.696626][T12376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.711021][T12376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.721151][T12441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2003'. [ 591.777481][T12376] team0: Port device team_slave_0 added [ 591.789464][T12376] team0: Port device team_slave_1 added [ 591.821974][ T5896] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 592.412331][ T5826] Bluetooth: hci2: command tx timeout [ 592.901691][T12376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.912736][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.940409][T12376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.953359][T12376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.960767][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.063967][T12376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.092300][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.101992][ T5880] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 593.111972][ T5896] usb 2-1: config 0 has no interfaces? [ 593.117610][ T5896] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 593.141671][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.298556][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 593.313285][ T5880] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 593.314199][ T5896] usb 2-1: config 0 descriptor?? [ 593.441027][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.567434][T12376] hsr_slave_0: entered promiscuous mode [ 593.593287][ T5880] usb 4-1: config 0 descriptor?? [ 593.602962][T12376] hsr_slave_1: entered promiscuous mode [ 593.716475][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.732368][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.778195][ T5896] usb 2-1: USB disconnect, device number 51 [ 594.082595][ T5880] aquacomputer_d5next 0003:0C70:F011.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 594.502069][ T5826] Bluetooth: hci2: command tx timeout [ 594.684612][ T5880] usb 4-1: USB disconnect, device number 55 [ 595.948926][ T5896] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 596.112611][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 596.140305][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 596.647341][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 596.661300][ T5896] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 596.676937][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.679919][T12376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.687975][ T5896] usb 2-1: Product: syz [ 596.699943][ T5896] usb 2-1: Manufacturer: syz [ 596.704662][ T5896] usb 2-1: SerialNumber: syz [ 596.712162][ T5896] usb 2-1: config 0 descriptor?? [ 596.720909][ T5896] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 596.744880][ T5896] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 596.758348][T12376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.778361][T12376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 596.918491][T12376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 597.581975][ T5896] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 597.914708][T12489] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2016'. [ 598.172120][ T5880] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 598.337786][ T5880] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 598.366794][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.467722][ T5880] usb 3-1: config 0 has no interface number 0 [ 598.486196][ T5880] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.639293][ T5880] usb 3-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 598.674478][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.702837][ T5880] usb 3-1: Product: syz [ 598.711794][ T5880] usb 3-1: Manufacturer: syz [ 598.719893][ T5880] usb 3-1: SerialNumber: syz [ 598.740902][ T5880] usb 3-1: config 0 descriptor?? [ 598.902438][ T5880] qmi_wwan 3-1:0.4: probe with driver qmi_wwan failed with error -22 [ 599.839665][ T5896] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 599.880658][ T5888] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 599.982080][ T5896] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 599.999342][ T5896] em28xx 2-1:0.0: No AC97 audio processor [ 600.016231][ T5896] usb 2-1: USB disconnect, device number 52 [ 600.016556][ T5880] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 600.023550][ T5896] em28xx 2-1:0.0: Disconnecting em28xx [ 600.037095][ T5896] em28xx 2-1:0.0: Freeing device [ 600.096525][T12376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.115775][T12376] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.128371][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.135558][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.148869][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.156081][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.182575][ T5888] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 600.342029][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 600.351287][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.376871][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 600.391172][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 600.423195][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 600.445231][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.467972][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.496134][ T5888] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 600.511613][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.533593][T12376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.542205][ T5888] usb 1-1: Product: syz [ 600.549502][ T5888] usb 1-1: Manufacturer: syz [ 600.556548][ T5888] usb 1-1: SerialNumber: syz [ 600.567097][ T5888] usb 1-1: config 0 descriptor?? [ 600.576220][T12497] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 600.591361][ T5888] iuu_phoenix 1-1:0.0: required endpoints missing [ 600.948764][T11502] usb 3-1: USB disconnect, device number 59 [ 600.964343][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.984019][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.053188][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.062300][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.095979][ T5888] usb 1-1: USB disconnect, device number 53 [ 601.189117][T12376] veth0_vlan: entered promiscuous mode [ 601.209019][T12376] veth1_vlan: entered promiscuous mode [ 601.273159][T12376] veth0_macvtap: entered promiscuous mode [ 601.428575][T12376] veth1_macvtap: entered promiscuous mode [ 601.468457][T12376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.509783][T12376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.522149][T12376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.532919][T12376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.543433][T12376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.552477][T12376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.770256][T11226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.792389][T11226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.827794][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.865467][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.182951][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 606.728174][T12560] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 606.905761][T12564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2036'. [ 606.928425][T12564] vlan2: entered promiscuous mode [ 606.933746][T12564] bridge0: entered promiscuous mode [ 610.760752][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.931176][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.056151][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.150638][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.260166][ T36] bridge_slave_1: left allmulticast mode [ 611.266706][ T36] bridge_slave_1: left promiscuous mode [ 611.274403][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.296316][ T36] bridge_slave_0: left allmulticast mode [ 611.302369][ T36] bridge_slave_0: left promiscuous mode [ 611.309106][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.649194][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.660953][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.671178][ T36] bond0 (unregistering): Released all slaves [ 611.897696][ T36] hsr_slave_0: left promiscuous mode [ 611.903708][ T36] hsr_slave_1: left promiscuous mode [ 611.909442][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.916993][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.925056][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.932559][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.951613][ T36] veth1_macvtap: left promiscuous mode [ 611.957255][ T36] veth0_macvtap: left promiscuous mode [ 611.963327][ T36] veth1_vlan: left promiscuous mode [ 611.968606][ T36] veth0_vlan: left promiscuous mode [ 612.322577][T12576] binder: 12575:12576 ioctl 541b 200000000140 returned -22 [ 614.216831][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 614.230655][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 614.240056][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 614.250373][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 614.259218][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 614.287532][ T36] team0 (unregistering): Port device team_slave_1 removed [ 614.469180][ T36] team0 (unregistering): Port device team_slave_0 removed [ 616.373217][ T5822] Bluetooth: hci2: command tx timeout [ 617.051941][ T5904] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 617.878708][T12322] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 618.092051][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 618.120501][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 618.191930][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.276880][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.335725][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.344460][ T5904] usb 2-1: Product: syz [ 618.348642][ T5904] usb 2-1: Manufacturer: syz [ 618.353786][ T5904] usb 2-1: SerialNumber: syz [ 618.376395][ T5904] usb 2-1: config 0 descriptor?? [ 618.394880][ T5904] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 618.412905][ T5904] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 618.415140][ T5822] Bluetooth: hci2: command tx timeout [ 618.503638][T12630] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 618.648075][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.814022][T12322] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 618.859055][T12633] macvtap1: entered promiscuous mode [ 618.895661][T12633] bond0: entered promiscuous mode [ 618.900895][T12633] macvtap1: entered allmulticast mode [ 618.932426][T12633] bond0: entered allmulticast mode [ 619.016245][T12633] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 619.307277][ T5904] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 619.435783][ T5904] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 619.505286][T12630] bond0: (slave gretap1): making interface the new active one [ 619.570532][T12630] gretap1: entered promiscuous mode [ 619.576899][T12630] gretap1: entered allmulticast mode [ 619.584467][T12630] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 619.659445][T12600] chnl_net:caif_netlink_parms(): no params data found [ 620.502154][ T5822] Bluetooth: hci2: command tx timeout [ 620.674849][ T5904] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 620.731021][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 620.769238][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 620.821443][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 620.856104][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.892620][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 620.900700][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.913984][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 620.929670][T12600] bridge_slave_0: entered allmulticast mode [ 620.940180][T12600] bridge_slave_0: entered promiscuous mode [ 620.951241][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.960068][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.969852][T12600] bridge_slave_1: entered allmulticast mode [ 620.979665][T12600] bridge_slave_1: entered promiscuous mode [ 621.204137][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 621.230990][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 621.252960][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 621.305416][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 621.312338][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.338994][ T5904] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 621.368281][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.386517][ T5904] usb 2-1: USB disconnect, device number 53 [ 621.495249][T12600] team0: Port device team_slave_0 added [ 621.516524][T12600] team0: Port device team_slave_1 added [ 621.609054][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.625655][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.658968][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.847683][T12672] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2060'. [ 622.549644][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.562050][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.587946][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.600983][ T5822] Bluetooth: hci2: command tx timeout [ 622.624028][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.782017][ T5896] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 623.176293][T12600] hsr_slave_0: entered promiscuous mode [ 623.183967][T12600] hsr_slave_1: entered promiscuous mode [ 623.184344][ T5896] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 623.215211][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.256529][ T5896] usb 3-1: config 0 has no interface number 0 [ 623.313616][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 623.506705][ T5896] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.546802][ T5896] usb 3-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 624.237365][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.256306][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.263952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.499663][ T5896] usb 3-1: Product: syz [ 624.621218][ T5896] usb 3-1: Manufacturer: syz [ 624.633980][ T5896] usb 3-1: SerialNumber: syz [ 624.927092][T12689] loop6: detected capacity change from 0 to 524287999 [ 624.932801][ T5896] usb 3-1: config 0 descriptor?? [ 624.946066][ T5896] usb 3-1: can't set config #0, error -71 [ 624.975425][ T5896] usb 3-1: USB disconnect, device number 60 [ 626.335793][T12702] NILFS (nullb0): couldn't find nilfs on the device [ 626.631915][T12692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 627.619545][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 627.629229][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 628.219525][T12721] netlink: 'syz.1.2075': attribute type 4 has an invalid length. [ 628.227577][T12721] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2075'. [ 629.479088][T12731] netlink: 588 bytes leftover after parsing attributes in process `syz.1.2077'. [ 630.092880][ T5896] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 630.605294][ T5896] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 630.622457][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.643167][ T5896] usb 2-1: config 0 has no interface number 0 [ 630.649297][ T5896] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.949374][ T5896] usb 2-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 631.167124][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.392826][ T5896] usb 2-1: Product: syz [ 631.658221][ T5896] usb 2-1: Manufacturer: syz [ 631.679336][T12734] kvm: kvm [12733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3050 [ 631.688562][ T5896] usb 2-1: SerialNumber: syz [ 631.702938][ T5896] usb 2-1: config 0 descriptor?? [ 631.726137][ T5896] qmi_wwan 2-1:0.4: probe with driver qmi_wwan failed with error -22 [ 631.779562][T12600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 631.799409][T12734] kvm: kvm [12733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4034 [ 631.817615][T12600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 631.832556][T12734] kvm: kvm [12733]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 631.850178][T12600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.899391][T12600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 632.002584][T12322] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 632.110377][T12600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.154977][T12600] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.325485][T12322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 632.336288][T12322] usb 4-1: not running at top speed; connect to a high speed hub [ 632.350291][T12322] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 632.357210][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.365880][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.367024][T12322] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 632.712787][T12322] usb 4-1: config 253 has no interface number 0 [ 632.712913][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.719243][T12322] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.726341][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.751313][T12322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 632.761276][T12322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.770518][T12322] usb 4-1: Product: syz [ 632.778235][T12322] usb 4-1: Manufacturer: syz [ 632.786735][T12322] usb 4-1: SerialNumber: syz [ 633.023296][ T10] usb 2-1: USB disconnect, device number 54 [ 633.092580][T12745] delete_channel: no stack [ 633.364006][T12322] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 633.388965][T12322] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 633.724343][T12322] usb 4-1: USB disconnect, device number 56 [ 634.105417][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.307024][T12600] veth0_vlan: entered promiscuous mode [ 636.583827][T12600] veth1_vlan: entered promiscuous mode [ 636.737494][T12600] veth0_macvtap: entered promiscuous mode [ 636.852682][T12600] veth1_macvtap: entered promiscuous mode [ 636.871287][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.881554][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.891551][T12600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.904740][T12600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.467564][T12600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.476639][T12600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.749558][T12812] random: crng reseeded on system resumption [ 638.035850][T12812] Restarting kernel threads ... [ 638.042602][T12812] Done restarting kernel threads. [ 638.124601][T11226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.132495][T11226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.253967][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.287568][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.052107][T12828] input: syz1 as /devices/virtual/input/input87 [ 640.231459][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 642.188651][ T10] usb 4-1: device descriptor read/all, error -71 [ 642.189646][T11226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.377986][T11226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.450862][T11226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.529092][T11226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.618520][T11226] bridge_slave_1: left allmulticast mode [ 642.624221][T11226] bridge_slave_1: left promiscuous mode [ 642.630989][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.640037][T11226] bridge_slave_0: left allmulticast mode [ 642.645757][T11226] bridge_slave_0: left promiscuous mode [ 642.651459][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.945038][T11226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.955814][T11226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.966364][T11226] bond0 (unregistering): Released all slaves [ 643.220503][T11226] hsr_slave_0: left promiscuous mode [ 643.227157][T11226] hsr_slave_1: left promiscuous mode [ 643.235411][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.242892][T11226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.250553][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.258569][T11226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.276834][T11226] veth1_macvtap: left promiscuous mode [ 643.282485][T11226] veth0_macvtap: left promiscuous mode [ 643.288044][T11226] veth1_vlan: left promiscuous mode [ 643.293671][T11226] veth0_vlan: left promiscuous mode [ 643.672395][T11226] team0 (unregistering): Port device team_slave_1 removed [ 643.714532][T11226] team0 (unregistering): Port device team_slave_0 removed [ 644.830852][T12852] kvm: kvm [12848]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 644.860277][T12852] kvm: kvm [12848]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 644.880801][T12852] kvm: kvm [12848]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 645.245960][T12870] input: syz1 as /devices/virtual/input/input88 [ 647.494761][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 647.506218][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 647.514711][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 647.535986][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.158065][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 650.429703][ T5826] Bluetooth: hci2: command tx timeout [ 651.402398][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2117'. [ 651.782147][ T5888] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 651.924694][T12886] chnl_net:caif_netlink_parms(): no params data found [ 652.115659][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.126932][ T5888] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 652.137799][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.532567][ T5826] Bluetooth: hci2: command tx timeout [ 652.654878][ T5888] usb 2-1: config 0 descriptor?? [ 652.671827][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.681693][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 652.692639][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.699834][T12886] bridge_slave_0: entered allmulticast mode [ 652.742318][T12886] bridge_slave_0: entered promiscuous mode [ 652.832237][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.842403][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.849680][T12886] bridge_slave_1: entered allmulticast mode [ 652.858415][T12886] bridge_slave_1: entered promiscuous mode [ 652.925057][ T1169] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 652.952577][ T5904] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.047473][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.062268][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.097059][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 653.130646][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.144737][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 653.158375][T12936] random: crng reseeded on system resumption [ 653.165934][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 653.180054][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 653.192047][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.196049][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 653.219753][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 653.230164][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 653.238398][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 653.252663][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 653.260373][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 653.289671][ T5888] pwc: recv_control_msg error -32 req 02 val 2400 [ 653.298875][ T5888] pwc: recv_control_msg error -32 req 02 val 2600 [ 653.982872][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.043810][T12886] team0: Port device team_slave_0 added [ 654.052090][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.166513][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 654.186551][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 654.207445][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 654.293869][ T1169] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.374640][ T1169] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.403404][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.413631][ T5888] pwc: Registered as video103. [ 654.499456][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input89 [ 654.547628][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 654.548167][T12886] team0: Port device team_slave_1 added [ 654.560273][ T5888] usb 2-1: USB disconnect, device number 55 [ 654.572366][ T5826] Bluetooth: hci2: command tx timeout [ 654.709814][T12947] netlink: 'syz.3.2128': attribute type 2 has an invalid length. [ 655.184073][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.186546][T12949] netfs: Couldn't get user pages (rc=-14) [ 655.202370][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.265117][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.278085][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.285264][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.430022][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.832088][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 656.155450][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 656.162344][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.174785][ T24] usb 4-1: config 0 has no interfaces? [ 656.182574][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 656.193998][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.202687][ T24] usb 4-1: Product: syz [ 656.206985][ T24] usb 4-1: Manufacturer: syz [ 656.211706][ T24] usb 4-1: SerialNumber: syz [ 656.264558][T12886] hsr_slave_0: entered promiscuous mode [ 656.270635][ T24] usb 4-1: config 0 descriptor?? [ 656.305451][T12886] hsr_slave_1: entered promiscuous mode [ 656.421995][ T5904] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 656.485830][ T10] usb 4-1: USB disconnect, device number 59 [ 656.585949][ T5904] usb 1-1: config 0 has no interfaces? [ 656.605880][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.616710][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.626345][ T5904] usb 1-1: Product: syz [ 656.634238][ T5904] usb 1-1: Manufacturer: syz [ 656.648779][ T5904] usb 1-1: SerialNumber: syz [ 656.652188][ T5826] Bluetooth: hci2: command tx timeout [ 656.658338][ T5904] usb 1-1: config 0 descriptor?? [ 657.074547][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.094037][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.150714][ T5888] usb 1-1: USB disconnect, device number 54 [ 657.900154][T12886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 657.911488][T12886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 657.925381][T12886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 657.937340][T12886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.212012][ C0] net_ratelimit: 4 callbacks suppressed [ 658.212027][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 658.492077][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 658.515100][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.550587][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.851178][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.858306][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.884278][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.891421][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.935456][T12886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.950921][T12886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.222017][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 660.182013][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 660.681130][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.242019][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 661.459958][T12886] veth0_vlan: entered promiscuous mode [ 661.478880][T12886] veth1_vlan: entered promiscuous mode [ 661.529413][T12886] veth0_macvtap: entered promiscuous mode [ 661.545582][T12886] veth1_macvtap: entered promiscuous mode [ 661.573441][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.594947][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.609939][T12886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.623300][T12886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.632868][T12886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.642559][T12886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.693301][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 661.775117][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 662.077432][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 662.087551][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.114657][ T10] usb 2-1: config 0 descriptor?? [ 662.309471][T11226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.340515][T11226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.348426][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 662.816232][ T10] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x6 [ 662.850149][T11226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.858733][ T10] mcp2221 0003:04D8:00DD.001F: item fetching failed at offset 4/5 [ 662.893879][T11226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.928027][ T10] mcp2221 0003:04D8:00DD.001F: can't parse reports [ 663.387296][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 663.450207][ T10] mcp2221 0003:04D8:00DD.001F: probe with driver mcp2221 failed with error -22 [ 663.473270][ T10] usb 2-1: USB disconnect, device number 56 [ 663.606964][T13049] syz.2.2154 (13049): drop_caches: 2 [ 664.352049][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 664.910792][T13071] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 665.532072][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 666.456449][ T1169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.472261][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 666.492445][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 666.637280][ T1169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.871059][ T1169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.997779][ T1169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.124009][ T1169] bridge_slave_1: left allmulticast mode [ 667.129714][ T1169] bridge_slave_1: left promiscuous mode [ 667.135876][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.147827][ T1169] bridge_slave_0: left allmulticast mode [ 667.153908][ T1169] bridge_slave_0: left promiscuous mode [ 667.159656][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.510074][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.512081][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 667.529260][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.539229][ T1169] bond0 (unregistering): Released all slaves [ 667.778668][ T1169] hsr_slave_0: left promiscuous mode [ 667.784699][ T1169] hsr_slave_1: left promiscuous mode [ 667.791078][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.798614][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.806831][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.814392][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.835098][ T1169] veth1_macvtap: left promiscuous mode [ 667.840620][ T1169] veth0_macvtap: left promiscuous mode [ 667.846341][ T1169] veth1_vlan: left promiscuous mode [ 667.851680][ T1169] veth0_vlan: left promiscuous mode [ 668.308065][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 668.612047][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 668.922163][ T5880] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 669.320219][ T5880] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.567403][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 669.583463][ T5880] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 669.615819][ T5880] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 669.626189][ T5880] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 669.632021][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 669.641738][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.661085][ T5880] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.395119][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.407256][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 670.501182][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 670.512862][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 670.520510][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.661988][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 671.651977][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 671.911944][ T5880] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 672.001493][ T5880] usb 3-1: USB disconnect, device number 61 [ 672.682176][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 672.974952][ T5826] Bluetooth: hci2: command tx timeout [ 673.712016][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 674.004038][T13146] input: syz1 as /devices/virtual/input/input90 [ 674.782129][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 675.092176][ T5826] Bluetooth: hci2: command tx timeout [ 675.772171][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 676.832282][T13120] chnl_net:caif_netlink_parms(): no params data found [ 676.872116][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 677.132388][ T5826] Bluetooth: hci2: command tx timeout [ 677.891997][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 677.933566][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.954897][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.967148][T13120] bridge_slave_0: entered allmulticast mode [ 678.113415][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 678.113605][T13184] loop7: detected capacity change from 0 to 16384 [ 678.463486][T13120] bridge_slave_0: entered promiscuous mode [ 678.482232][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.489461][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.517023][T13120] bridge_slave_1: entered allmulticast mode [ 678.533944][T13120] bridge_slave_1: entered promiscuous mode [ 678.932089][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 679.279329][ T5826] Bluetooth: hci2: command tx timeout [ 679.293023][T13201] input: syz1 as /devices/virtual/input/input91 [ 679.332024][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 679.405106][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.456002][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.562332][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 679.580069][ T10] usb 1-1: config 0 has no interfaces? [ 679.588751][T13120] team0: Port device team_slave_0 added [ 679.592583][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 679.600664][T13120] team0: Port device team_slave_1 added [ 679.606700][T13209] netlink: 'syz.1.2197': attribute type 1 has an invalid length. [ 679.618783][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.628727][ T10] usb 1-1: Product: syz [ 679.633907][ T10] usb 1-1: Manufacturer: syz [ 679.638589][ T10] usb 1-1: SerialNumber: syz [ 679.649138][ T10] usb 1-1: config 0 descriptor?? [ 679.754242][T13209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.777766][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.787472][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.830764][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.843581][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.875054][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.900981][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.001983][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 680.532021][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.618332][T13184] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 680.631668][T13184] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 680.650926][T13184] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.670249][T13184] buffer_io_error: 1082 callbacks suppressed [ 680.670266][T13184] Buffer I/O error on dev loop7, logical block 96, async page read [ 680.692401][T13184] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.694552][T13209] bond1: (slave gretap1): making interface the new active one [ 680.710103][T13184] Buffer I/O error on dev loop7, logical block 97, async page read [ 680.718888][T13184] I/O error, dev loop7, sector 784 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.729596][T13184] Buffer I/O error on dev loop7, logical block 98, async page read [ 680.747406][T13184] I/O error, dev loop7, sector 792 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.757445][T13184] Buffer I/O error on dev loop7, logical block 99, async page read [ 680.765794][T13184] I/O error, dev loop7, sector 800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.777802][T13184] Buffer I/O error on dev loop7, logical block 100, async page read [ 680.780207][T13209] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 680.786378][T13184] I/O error, dev loop7, sector 808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.808753][T13184] Buffer I/O error on dev loop7, logical block 101, async page read [ 680.817430][T13184] I/O error, dev loop7, sector 816 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.827275][T13184] Buffer I/O error on dev loop7, logical block 102, async page read [ 680.846332][T13184] I/O error, dev loop7, sector 824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 680.871688][T13184] Buffer I/O error on dev loop7, logical block 103, async page read [ 680.898615][T13184] Buffer I/O error on dev loop7, logical block 104, async page read [ 680.910865][T13184] Buffer I/O error on dev loop7, logical block 105, async page read [ 680.982003][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 681.591233][ T24] usb 1-1: USB disconnect, device number 55 [ 681.956498][T13120] hsr_slave_0: entered promiscuous mode [ 681.964411][T13120] hsr_slave_1: entered promiscuous mode [ 682.022001][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 682.862298][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 683.132128][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 683.201994][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 683.562015][ T43] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 683.782800][T13252] input: syz1 as /devices/virtual/input/input92 [ 684.172012][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 684.605022][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.614996][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.628103][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.637244][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.685024][T13255] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 685.237756][ T43] usb 4-1: usb_control_msg returned -32 [ 685.249531][ T43] usbtmc 4-1:16.0: can't read capabilities [ 685.281986][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 685.694613][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.701189][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.192016][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 687.332172][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 688.176488][ T24] usb 4-1: USB disconnect, device number 60 [ 688.262430][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 688.872064][ T43] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 689.044157][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 689.052806][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 689.069602][ T43] usb 2-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.111899][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 689.137449][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 689.149013][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.213112][ T43] usb 2-1: Product: syz [ 689.219345][ T43] usb 2-1: Manufacturer: syz [ 689.233235][ T43] usb 2-1: SerialNumber: syz [ 689.292096][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 690.341995][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 691.452059][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 691.612354][T13315] input: syz1 as /devices/virtual/input/input93 [ 691.898114][T13319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2219'. [ 692.449958][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input94 [ 692.502017][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 692.529885][ T5174] bcm5974 2-1:1.0: could not read from device [ 693.512011][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 694.053348][ T43] usb 2-1: USB disconnect, device number 57 [ 694.572316][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 695.652041][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 695.918016][T13120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.056056][T13120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.078891][T13120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.622000][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 696.681689][T13120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 697.559545][T13120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.731995][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 697.773044][T13120] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.473479][T13382] input: syz1 as /devices/virtual/input/input95 [ 698.484228][T13387] ALSA: mixer_oss: invalid OSS volume '' [ 698.687461][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.694655][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.812021][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 699.383266][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.390447][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.426151][T13120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.752000][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 700.851987][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 701.045015][T13120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.772295][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 702.861991][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 703.324863][T13441] sp0: Synchronizing with TNC [ 703.335981][T13441] bio_check_eod: 2 callbacks suppressed [ 703.335997][T13441] syz.0.2241: attempt to access beyond end of device [ 703.335997][T13441] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 703.354615][T13441] vxfs: unable to read disk superblock at 1 [ 703.362670][T13441] syz.0.2241: attempt to access beyond end of device [ 703.362670][T13441] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 703.380221][T13441] vxfs: unable to read disk superblock at 8 [ 703.386337][T13441] vxfs: can't find superblock. [ 703.451263][T13443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.891993][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 704.952000][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 705.961991][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 706.207839][T13461] input: syz1 as /devices/virtual/input/input96 [ 706.220383][ T10] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 706.534177][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 706.545778][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 706.743991][ T10] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 706.762484][ T10] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 706.782531][ T10] usb 4-1: config 253 has no interface number 0 [ 707.051986][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 707.351110][ T10] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.371340][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 707.381040][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.486014][T13120] veth0_vlan: entered promiscuous mode [ 707.522249][ T10] usb 4-1: Product: syz [ 707.526455][ T10] usb 4-1: Manufacturer: syz [ 707.533364][ T10] usb 4-1: SerialNumber: syz [ 707.556725][T13120] veth1_vlan: entered promiscuous mode [ 707.712879][T13120] veth0_macvtap: entered promiscuous mode [ 707.834550][T13450] delete_channel: no stack [ 707.935857][T13120] veth1_macvtap: entered promiscuous mode [ 708.022154][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 708.043053][ T10] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 708.152569][ T10] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 708.178423][ T10] usb 4-1: USB disconnect, device number 61 [ 708.184350][T13120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.206462][T13120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.253355][ T5822] Bluetooth: hci2: command 0x0405 tx timeout [ 708.275608][T13120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.296967][T13120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.307123][T13120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.316690][T13120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.047285][T13500] input: syz1 as /devices/virtual/input/input97 [ 709.181998][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 710.012071][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.032117][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.152029][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 710.608010][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.743986][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.171975][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 712.252136][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 713.232224][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 714.381997][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 714.426642][ T3564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.659384][ T3564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.782507][ T3564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.949184][ T3564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.185050][ T3564] bridge_slave_1: left allmulticast mode [ 715.191035][ T3564] bridge_slave_1: left promiscuous mode [ 715.199780][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.215146][ T3564] bridge_slave_0: left allmulticast mode [ 715.225381][ T3564] bridge_slave_0: left promiscuous mode [ 715.241433][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.332013][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 715.782059][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 715.898223][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.909538][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.920152][ T3564] bond0 (unregistering): Released all slaves [ 716.140946][ T3564] hsr_slave_0: left promiscuous mode [ 716.146814][ T3564] hsr_slave_1: left promiscuous mode [ 716.153254][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.160667][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.169563][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.177360][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.196614][ T3564] veth1_macvtap: left promiscuous mode [ 716.202368][ T3564] veth0_macvtap: left promiscuous mode [ 716.207924][ T3564] veth1_vlan: left promiscuous mode [ 716.213412][ T3564] veth0_vlan: left promiscuous mode [ 716.402023][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 717.391985][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 717.736755][ T10] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 717.973171][T13580] kvm: kvm [13579]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 717.990103][T13580] kvm: kvm [13579]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 718.120773][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 718.132194][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 718.143460][ T10] usb 1-1: config 253 has an invalid interface number: 140 but max is 0 [ 718.156047][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 718.159779][ T10] usb 1-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 718.183104][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.208148][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.225438][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.231922][ T10] usb 1-1: config 253 has no interface number 0 [ 718.240257][ T10] usb 1-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.273427][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.274576][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 718.300980][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.301184][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.317952][ T10] usb 1-1: Product: syz [ 718.325372][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 718.325687][ T10] usb 1-1: Manufacturer: syz [ 718.400638][ T10] usb 1-1: SerialNumber: syz [ 718.432073][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 719.184757][T13575] delete_channel: no stack [ 719.219737][ T10] usbtest 1-1:253.140: couldn't get endpoints, -22 [ 719.242487][ T10] usbtest 1-1:253.140: probe with driver usbtest failed with error -22 [ 719.342136][ T10] usb 1-1: USB disconnect, device number 56 [ 719.502007][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 720.413198][ T5822] Bluetooth: hci2: command tx timeout [ 720.562001][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 721.606564][T13617] vivid-001: ================= START STATUS ================= [ 721.617048][T13617] vivid-001: Radio HW Seek Mode: Bounded [ 721.623220][T13617] vivid-001: Radio Programmable HW Seek: false [ 721.629584][T13617] vivid-001: RDS Rx I/O Mode: Block I/O [ 721.635414][T13617] vivid-001: Generate RBDS Instead of RDS: false [ 721.643105][T13617] vivid-001: RDS Reception: true [ 721.648336][T13617] vivid-001: RDS Program Type: 0 inactive [ 721.656977][T13617] vivid-001: RDS PS Name: inactive [ 721.662893][T13617] vivid-001: RDS Radio Text: inactive [ 721.668694][T13617] vivid-001: RDS Traffic Announcement: false inactive [ 721.684612][T13617] vivid-001: RDS Traffic Program: false inactive [ 721.691262][T13617] vivid-001: RDS Music: false inactive [ 721.697459][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 721.704822][T13617] vivid-001: ================== END STATUS ================== [ 722.492065][ T5822] Bluetooth: hci2: command tx timeout [ 722.625368][T13623] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 722.631969][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 723.083499][T13614] syz.1.2275 (13614): drop_caches: 2 [ 723.661976][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 724.578160][ T5822] Bluetooth: hci2: command tx timeout [ 724.672008][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 724.762668][T13592] chnl_net:caif_netlink_parms(): no params data found [ 724.818759][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 725.852794][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 726.658231][ T5822] Bluetooth: hci2: command tx timeout [ 726.746699][T13653] delete_channel: no stack [ 726.852615][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 727.922108][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 728.714422][T13592] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.734563][T13592] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.773782][T13592] bridge_slave_0: entered allmulticast mode [ 728.822177][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 728.929935][T13592] bridge_slave_0: entered promiscuous mode [ 728.944556][T13592] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.969234][T13592] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.978201][T13592] bridge_slave_1: entered allmulticast mode [ 729.552973][T13592] bridge_slave_1: entered promiscuous mode [ 729.772435][T13592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.882184][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 729.927130][T13592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.828153][T13692] loop6: detected capacity change from 0 to 524287999 [ 730.902061][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 731.240622][T13592] team0: Port device team_slave_0 added [ 731.343998][T13592] team0: Port device team_slave_1 added [ 731.992246][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 732.454532][T13592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.988606][T13592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.014558][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.014822][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 733.040017][T13592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.020156][T13714] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 734.031990][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 734.078295][T13711] netlink: 588 bytes leftover after parsing attributes in process `syz.1.2300'. [ 734.106980][T13592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.114261][T13592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.283286][T13592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.555422][T13592] hsr_slave_0: entered promiscuous mode [ 734.562148][T13592] hsr_slave_1: entered promiscuous mode [ 734.572481][ T5904] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 734.820650][ T5904] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 734.924495][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.118069][ T5904] usb 2-1: config 0 has no interface number 0 [ 735.195774][ T5904] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.222044][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 735.254013][ T5904] usb 2-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 735.277560][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.302087][ T5904] usb 2-1: Product: syz [ 735.328072][ T5904] usb 2-1: Manufacturer: syz [ 735.364580][ T5904] usb 2-1: SerialNumber: syz [ 735.603369][ T5904] usb 2-1: config 0 descriptor?? [ 735.624703][ T5904] usb 2-1: can't set config #0, error -71 [ 735.632445][ T5904] usb 2-1: USB disconnect, device number 58 [ 736.142031][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 737.292015][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 737.489643][T13745] trusted_key: encrypted_key: insufficient parameters specified [ 738.222007][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 738.557537][T13592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.820558][T13592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 739.221986][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 739.254353][T13592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 739.328197][T13592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 740.323429][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.331306][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.372258][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 741.165310][T13592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.198430][T13592] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.232314][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.239486][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.333330][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.340491][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.372396][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 741.735511][T13786] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2317'. [ 742.018001][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 742.027314][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2315'. [ 742.332091][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 743.383638][T13592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.432041][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 743.605280][ T5904] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 744.452111][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 744.567599][ T5904] usb 3-1: unable to read config index 0 descriptor/all [ 744.621880][ T5904] usb 3-1: can't read configurations, error -71 [ 744.852719][ T5888] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 745.111681][ T5888] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 745.139927][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.251067][ T5888] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 745.462022][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 745.523941][ T5888] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 745.525260][T13592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.562927][ T5888] usb 4-1: Manufacturer: syz [ 745.579959][ T5888] usb 4-1: config 0 descriptor?? [ 746.483089][ T5904] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 746.541963][ T5888] rc_core: IR keymap rc-hauppauge not found [ 746.542063][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 746.552839][ T5888] Registered IR keymap rc-empty [ 746.577165][ T5888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 746.618587][ T5888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input100 [ 746.639049][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 746.649850][ T5888] usb 4-1: USB disconnect, device number 62 [ 746.662477][ T5904] usb 1-1: device descriptor read/64, error -71 [ 746.799510][T13592] veth0_vlan: entered promiscuous mode [ 746.817713][T13592] veth1_vlan: entered promiscuous mode [ 746.848019][T13592] veth0_macvtap: entered promiscuous mode [ 746.858867][T13592] veth1_macvtap: entered promiscuous mode [ 746.886629][T13592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.909516][T13592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.917406][ T5904] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 746.946740][T13592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.959689][T13592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.969443][T13592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.984299][T13592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.052245][ T5904] usb 1-1: device descriptor read/64, error -71 [ 747.084780][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.093414][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.134887][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.561949][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 747.716894][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.901570][ T5904] usb usb1-port1: attempt power cycle [ 747.969773][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.982278][ T30] audit: type=1326 audit(1750786574.822:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13844 comm="syz.3.2327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8315f8e929 code=0x0 [ 747.986506][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.302128][ T5904] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 748.353860][ T5904] usb 1-1: device descriptor read/8, error -71 [ 748.652070][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 749.573770][ T5904] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 749.633323][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 749.794339][ T5904] usb 1-1: device not accepting address 60, error -71 [ 749.803651][ T5904] usb usb1-port1: unable to enumerate USB device [ 750.291407][T13868] netlink: 588 bytes leftover after parsing attributes in process `syz.1.2332'. [ 750.722001][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 751.457862][ T5904] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 751.644740][ T5904] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 751.712055][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 751.751664][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.789587][ T5904] usb 2-1: config 0 has no interface number 0 [ 751.808350][ T5904] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.660925][ T5904] usb 2-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 752.762028][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 752.789254][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.812121][ T5904] usb 2-1: Product: syz [ 752.822123][ T5904] usb 2-1: Manufacturer: syz [ 752.838853][ T5904] usb 2-1: SerialNumber: syz [ 752.862601][ T5904] usb 2-1: config 0 descriptor?? [ 752.883802][ T5904] qmi_wwan 2-1:0.4: probe with driver qmi_wwan failed with error -22 [ 753.511247][ T1169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.637621][ T1169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.715370][ T1169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.786309][ T1169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.897668][ T1169] bridge_slave_1: left allmulticast mode [ 753.903751][ T1169] bridge_slave_1: left promiscuous mode [ 753.909657][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.919410][ T1169] bridge_slave_0: left allmulticast mode [ 753.925693][ T1169] bridge_slave_0: left promiscuous mode [ 753.931564][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.942201][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 754.155672][ T10] usb 2-1: USB disconnect, device number 59 [ 754.305213][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.315861][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.326271][ T1169] bond0 (unregistering): Released all slaves [ 754.547376][ T1169] hsr_slave_0: left promiscuous mode [ 754.553784][ T1169] hsr_slave_1: left promiscuous mode [ 754.559546][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.568369][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.576557][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.584692][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.638099][ T1169] veth1_macvtap: left promiscuous mode [ 754.660937][ T1169] veth0_macvtap: left promiscuous mode [ 754.670278][ T1169] veth1_vlan: left promiscuous mode [ 754.679081][ T1169] veth0_vlan: left promiscuous mode [ 754.851964][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 755.498669][ T5904] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 755.858103][ T5904] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 755.887246][ T5904] usb 4-1: config 0 has no interface number 0 [ 755.901202][ T5904] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 755.933286][ T5904] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 755.943453][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 755.978715][ T5904] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 755.999547][ T5904] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 756.170103][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.721319][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 756.931972][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 757.002802][ T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 757.063475][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.095683][ T43] usb 3-1: config 0 descriptor?? [ 757.215852][ T5904] usb 4-1: config 0 descriptor?? [ 757.227893][ T5904] gspca_main: spca561-2.14.0 probing abcd:cdee [ 757.981953][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 758.240862][ T5904] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 758.269637][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.281281][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.289659][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.299457][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.341961][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.355136][ T5904] usb 4-1: MIDIStreaming interface descriptor not found [ 758.380075][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.850504][ T5904] usb 4-1: USB disconnect, device number 63 [ 759.071967][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 759.133480][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 759.834385][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 759.962208][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 760.021964][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 760.812214][ T5826] Bluetooth: hci2: command tx timeout [ 760.822647][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.843831][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 760.890593][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.921340][ T24] usb 1-1: config 0 descriptor?? [ 760.937162][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 761.082433][T13932] netlink: 588 bytes leftover after parsing attributes in process `syz.3.2348'. [ 761.151994][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 761.696179][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 761.704526][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 761.718943][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 761.726934][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 761.738781][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 761.747362][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 761.759250][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 761.764884][ T5904] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 761.770796][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 761.781262][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 761.793464][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 761.801886][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 761.818992][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 761.837355][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 761.849637][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 761.937524][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 761.955077][ T24] pwc: Registered as video103. [ 761.967776][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input102 [ 762.052579][ T5904] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 762.060677][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.172020][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 763.132266][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 763.164130][ T5826] Bluetooth: hci2: command tx timeout [ 763.722627][ T24] usb 1-1: USB disconnect, device number 61 [ 763.923993][ T5904] usb 4-1: config 0 has no interface number 0 [ 763.930142][ T5904] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.008054][ T5904] usb 4-1: string descriptor 0 read error: -71 [ 764.042014][ T5904] usb 4-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 764.075262][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.170561][ T5904] usb 4-1: config 0 descriptor?? [ 764.182120][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 764.263064][T13911] delete_channel: no stack [ 765.231849][ T5826] Bluetooth: hci2: command tx timeout [ 765.233638][ T5904] usb 4-1: can't set config #0, error -71 [ 765.249806][ T43] usb 3-1: USB disconnect, device number 64 [ 765.301972][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 765.337721][ T5904] usb 4-1: USB disconnect, device number 64 [ 765.910214][T13906] chnl_net:caif_netlink_parms(): no params data found [ 766.281956][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 767.361974][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 767.483786][ T5826] Bluetooth: hci2: command tx timeout [ 767.591754][T13906] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.601269][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.608800][T13906] bridge_slave_0: entered allmulticast mode [ 767.646855][T13906] bridge_slave_0: entered promiscuous mode [ 767.660318][T13906] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.669462][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.754596][T13906] bridge_slave_1: entered allmulticast mode [ 767.783735][T13906] bridge_slave_1: entered promiscuous mode [ 767.966629][T13906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.016671][T13906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.394305][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 769.087913][T13906] team0: Port device team_slave_0 added [ 769.327900][T13992] netlink: 588 bytes leftover after parsing attributes in process `syz.3.2361'. [ 769.452012][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 769.718013][T13906] team0: Port device team_slave_1 added [ 769.798838][ T5904] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 770.452753][T13906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.459731][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.492839][T13906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.505831][T13906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.513134][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.539641][T13906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.562046][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 770.704315][ T5904] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 770.712618][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.732125][ T5904] usb 4-1: config 0 has no interface number 0 [ 770.737755][T13906] hsr_slave_0: entered promiscuous mode [ 770.738229][ T5904] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.756838][T13906] hsr_slave_1: entered promiscuous mode [ 771.095063][ T5904] usb 4-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 771.117052][T13997] input: syz1 as /devices/virtual/input/input104 [ 771.117183][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.172754][ T5904] usb 4-1: Product: syz [ 771.176929][ T5904] usb 4-1: Manufacturer: syz [ 771.199305][ T5904] usb 4-1: SerialNumber: syz [ 771.219190][ T5904] usb 4-1: config 0 descriptor?? [ 771.312894][ T5904] qmi_wwan 4-1:0.4: probe with driver qmi_wwan failed with error -22 [ 771.492102][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 772.552144][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 772.726182][ T43] usb 4-1: USB disconnect, device number 65 [ 773.652260][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 773.677929][T14016] netlink: 'syz.2.2368': attribute type 16 has an invalid length. [ 773.686588][T14016] netlink: 'syz.2.2368': attribute type 17 has an invalid length. [ 773.841850][ T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 774.095880][T14020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.110912][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 774.127434][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 774.151258][ T9] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 774.161448][ T9] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 774.188879][ T9] usb 4-1: config 253 has no interface number 0 [ 774.205431][ T9] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.263455][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 774.280653][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.289652][ T9] usb 4-1: Product: syz [ 774.294156][ T9] usb 4-1: Manufacturer: syz [ 774.299576][ T9] usb 4-1: SerialNumber: syz [ 774.392539][T13906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 774.403855][T13906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 774.415598][T13906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 774.427915][T13906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 774.517923][T13906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.526211][T14011] delete_channel: no stack [ 774.537148][ T9] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 774.555154][ T9] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 774.568319][T13906] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.578083][ T9] usb 4-1: USB disconnect, device number 66 [ 774.590175][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.597359][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.631048][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.638269][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.711938][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 775.791947][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 776.051982][T14044] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 776.061357][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 776.589060][T13906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.762007][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 776.765923][T14056] netlink: 588 bytes leftover after parsing attributes in process `syz.0.2378'. [ 777.582416][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 777.871987][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 778.346466][T14071] input: syz1 as /devices/virtual/input/input105 [ 778.374465][ T10] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 778.412612][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.455486][ T10] usb 1-1: config 0 has no interface number 0 [ 778.467061][ T10] usb 1-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.501087][ T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 778.530198][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.552066][ T10] usb 1-1: Product: syz [ 778.556259][ T10] usb 1-1: Manufacturer: syz [ 778.561306][ T10] usb 1-1: SerialNumber: syz [ 778.576752][ T10] usb 1-1: config 0 descriptor?? [ 778.589884][ T10] qmi_wwan 1-1:0.4: probe with driver qmi_wwan failed with error -22 [ 778.635880][T13906] veth0_vlan: entered promiscuous mode [ 778.665957][T13906] veth1_vlan: entered promiscuous mode [ 778.720470][T13906] veth0_macvtap: entered promiscuous mode [ 778.721161][T14073] kvm: kvm [14072]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 778.737222][T13906] veth1_macvtap: entered promiscuous mode [ 778.752226][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 778.767495][T13906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.782345][ T43] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 778.814389][T13906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.833392][T13906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.844827][T13906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.857333][T13906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.869978][T13906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.948339][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 778.965299][ T43] usb 2-1: config 0 has no interface number 0 [ 778.984435][ T43] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 779.004606][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.013180][ T43] usb 2-1: Product: syz [ 779.025008][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.033216][ T43] usb 2-1: Manufacturer: syz [ 779.041393][ T43] usb 2-1: SerialNumber: syz [ 779.044305][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.055946][ T43] usb 2-1: config 0 descriptor?? [ 779.077262][ T43] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 779.104111][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.120241][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.286580][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.299586][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.609250][ T43] gspca_spca1528: reg_w err -110 [ 779.693560][ T43] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 779.862106][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 779.975343][ T9] usb 1-1: USB disconnect, device number 62 [ 780.249911][ T5888] usb 2-1: USB disconnect, device number 60 [ 780.871985][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 780.882609][ T9] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 781.752372][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 781.882057][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 781.921965][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 781.947325][T11226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.965267][ T9] usb 1-1: config 253 has an invalid interface number: 140 but max is 0 [ 781.975082][ T9] usb 1-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 782.016626][ T9] usb 1-1: config 253 has no interface number 0 [ 782.039934][ T9] usb 1-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.059597][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 782.071147][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.178950][ T9] usb 1-1: Product: syz [ 782.188610][ T9] usb 1-1: Manufacturer: syz [ 782.193743][ T9] usb 1-1: SerialNumber: syz [ 782.370871][T11226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.415098][T14089] delete_channel: no stack [ 782.423546][ T9] usbtest 1-1:253.140: couldn't get endpoints, -22 [ 782.430366][ T9] usbtest 1-1:253.140: probe with driver usbtest failed with error -22 [ 782.444903][ T9] usb 1-1: USB disconnect, device number 63 [ 782.495788][T11226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.587046][T11226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.667762][T11226] bridge_slave_1: left allmulticast mode [ 782.673730][T11226] bridge_slave_1: left promiscuous mode [ 782.679399][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.689367][T11226] bridge_slave_0: left allmulticast mode [ 782.695316][T11226] bridge_slave_0: left promiscuous mode [ 782.700985][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.921976][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 782.982093][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 783.028821][T11226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.039778][T11226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.049619][T11226] bond0 (unregistering): Released all slaves [ 783.246256][T11226] hsr_slave_0: left promiscuous mode [ 783.252206][T11226] hsr_slave_1: left promiscuous mode [ 783.257933][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.265401][T11226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.273935][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.281325][T11226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.305167][T11226] veth1_macvtap: left promiscuous mode [ 783.310667][T11226] veth0_macvtap: left promiscuous mode [ 783.316323][T11226] veth1_vlan: left promiscuous mode [ 783.321591][T11226] veth0_vlan: left promiscuous mode [ 783.717877][T11226] team0 (unregistering): Port device team_slave_1 removed [ 783.759523][T11226] team0 (unregistering): Port device team_slave_0 removed [ 784.022098][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 784.991919][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 785.453932][ T43] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 786.061949][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 786.222048][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 786.286010][ T43] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 786.402002][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 786.413573][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 786.423543][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.433642][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 786.453290][ T43] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 786.477525][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.506443][ T43] usb 1-1: Product: syz [ 786.510643][ T43] usb 1-1: Manufacturer: syz [ 786.661907][ T43] usb 1-1: SerialNumber: syz [ 786.669203][ T43] usb 1-1: config 0 descriptor?? [ 786.679665][T14114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 787.071949][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 787.220690][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.244331][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.257336][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 787.288862][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 787.305508][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 788.132137][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 789.212177][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 789.462715][ T5822] Bluetooth: hci2: command tx timeout [ 789.506363][ T43] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 789.541703][ T43] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 790.023918][ T43] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 790.046227][ T43] usb 1-1: USB disconnect, device number 64 [ 790.172000][ T9] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 790.261986][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 791.231930][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 791.385727][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 791.554739][ T5822] Bluetooth: hci2: command tx timeout [ 792.291909][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 792.980646][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 792.992329][ T9] usb 3-1: can't read configurations, error -71 [ 793.240497][T14171] Device name cannot be null; rc = [-22] [ 793.311958][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 794.411899][ T5822] Bluetooth: hci2: command tx timeout [ 794.501926][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 794.975262][T14133] chnl_net:caif_netlink_parms(): no params data found [ 795.320799][T14186] input: syz1 as /devices/virtual/input/input106 [ 795.461945][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 796.431942][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 796.491983][ T5822] Bluetooth: hci2: command tx timeout [ 797.611951][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 798.157667][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.166034][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.254369][T14133] bridge_slave_0: entered allmulticast mode [ 798.263490][T14133] bridge_slave_0: entered promiscuous mode [ 798.272765][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.279882][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.287095][T14133] bridge_slave_1: entered allmulticast mode [ 798.312896][T14133] bridge_slave_1: entered promiscuous mode [ 798.541951][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 798.827504][T14133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.651940][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 800.701907][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 800.805600][T14133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.967498][T14133] team0: Port device team_slave_0 added [ 800.977813][T14133] team0: Port device team_slave_1 added [ 801.069575][T14133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.077712][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.089117][T14231] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü [ 801.108809][ T5822] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 801.118924][T14133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.129834][ T43] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 801.146278][T14133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.153724][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.179961][T14133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.384265][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 801.432670][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 801.466065][ T43] usb 2-1: config 253 has an invalid interface number: 140 but max is 0 [ 801.493871][ T43] usb 2-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 801.621984][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 801.630465][ T43] usb 2-1: config 253 has no interface number 0 [ 801.640497][ T43] usb 2-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.646938][T14133] hsr_slave_0: entered promiscuous mode [ 801.668171][T14133] hsr_slave_1: entered promiscuous mode [ 801.738091][T14238] loop6: detected capacity change from 0 to 524287999 [ 802.185597][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 802.206582][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.214685][ T43] usb 2-1: Product: syz [ 802.218923][ T43] usb 2-1: Manufacturer: syz [ 802.223667][ T43] usb 2-1: SerialNumber: syz [ 802.234635][ T43] usb 2-1: can't set config #253, error -71 [ 802.251300][ T43] usb 2-1: USB disconnect, device number 61 [ 802.691956][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 803.607438][T14250] input: syz1 as /devices/virtual/input/input107 [ 803.711966][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 804.761961][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 805.144783][ T5822] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 805.153881][ T5822] Bluetooth: hci1: Injecting HCI hardware error event [ 805.164627][ T5826] Bluetooth: hci1: hardware error 0x00 [ 805.801944][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 806.326978][T14265] sp0: Synchronizing with TNC [ 806.821924][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 807.256016][ T5896] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 807.292284][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 807.861951][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 808.714460][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.720819][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.771668][ T5896] usb 2-1: device descriptor read/all, error -71 [ 808.942034][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 809.912215][ T5896] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 809.941946][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 810.080670][T14301] input: syz1 as /devices/virtual/input/input108 [ 811.022453][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 812.153929][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 812.494233][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'. [ 813.072005][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 813.197055][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.230855][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.272067][T14313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.306328][T14318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.307897][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.369670][T14133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 813.401050][T14133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 813.432059][T14133] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 813.519113][T14133] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.251979][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 815.151950][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 816.221972][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 817.222007][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 818.371955][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 819.331936][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 820.351939][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 821.401935][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 822.471944][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 823.521968][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 824.501942][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 825.601976][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 826.621941][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 827.671936][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 828.671950][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 829.741977][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 830.851954][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 831.941947][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 832.811989][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 833.902000][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 835.011954][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 835.991943][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 836.981945][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 838.091931][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 839.161937][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 840.141962][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 841.181950][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 842.191976][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 843.241958][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 844.381936][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 845.371949][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 846.381930][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 847.551946][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 848.441921][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 849.541932][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 850.552005][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 851.611936][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 852.611919][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 853.611941][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 854.761951][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 855.811948][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 856.821930][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 857.801952][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 858.851962][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 859.871945][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 861.031925][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 861.991944][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 863.061931][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 864.061941][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 865.211942][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 866.091946][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 867.222084][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 868.281918][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 869.261908][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 870.391950][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 871.341915][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 872.421934][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 873.471918][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 874.561975][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 875.601984][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 876.541941][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 877.551905][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 878.601922][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 879.651919][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 880.811981][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 881.791948][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 882.781949][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 883.801982][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 884.831936][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 885.931923][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 886.991939][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 888.071916][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 888.991929][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 890.111910][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 891.191969][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 892.192011][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 893.211920][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 894.172080][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 895.321921][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 896.252010][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 897.291904][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 898.451926][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 899.491914][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 900.431931][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 901.471894][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 902.531932][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 903.561894][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 904.691901][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 905.721913][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 906.701933][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 907.711891][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 908.761963][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 909.921918][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 910.861898][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 911.881937][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 912.911884][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 914.011891][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 915.121895][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 916.011899][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 917.052064][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 918.131916][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 919.151747][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 919.158734][ C0] rcu: 1-...!: (1 GPs behind) idle=16e4/1/0x4000000000000000 softirq=82259/82260 fqs=3 [ 919.169659][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11226/1:b..l [ 919.177671][ C0] rcu: (detected by 0, t=10502 jiffies, g=74929, q=198 ncpus=2) [ 919.185402][ C0] Sending NMI from CPU 0 to CPUs 1: [ 919.185437][ C1] NMI backtrace for cpu 1 [ 919.185451][ C1] CPU: 1 UID: 0 PID: 14312 Comm: syz.0.2432 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 919.185471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.185482][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 919.185504][ C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 919.185518][ C1] RSP: 0018:ffffc90000a08d10 EFLAGS: 00000046 [ 919.185531][ C1] RAX: ffffffff81ae9354 RBX: 0000000000000000 RCX: ffffffff81ae936c [ 919.185543][ C1] RDX: 0000000000010000 RSI: 0000000000000008 RDI: ffffffff8f9fe1f0 [ 919.185554][ C1] RBP: ffffc90000a08e90 R08: ffffffff99caacb3 R09: 1ffffffff3395596 [ 919.185566][ C1] R10: dffffc0000000000 R11: fffffbfff3395597 R12: ffff88806f15e340 [ 919.185578][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8727cc0 [ 919.185590][ C1] FS: 0000000000000000(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 919.185603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 919.185614][ C1] CR2: 0000001b2f611ff8 CR3: 0000000050354000 CR4: 00000000003526f0 [ 919.185629][ C1] Call Trace: [ 919.185636][ C1] [ 919.185644][ C1] debug_deactivate+0x5c/0x200 [ 919.185670][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 919.185701][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 919.185721][ C1] ? read_tsc+0x9/0x20 [ 919.185743][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 919.185778][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 919.185801][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 919.185823][ C1] [ 919.185829][ C1] [ 919.185835][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 919.185852][ C1] RIP: 0010:stack_depot_save_flags+0x1aa/0x900 [ 919.185872][ C1] Code: 00 31 f6 4c 89 54 24 18 e8 33 f6 ca ff 4c 8b 54 24 18 8b 74 24 04 85 db 75 62 4d 8b 24 24 4d 39 fc 74 56 41 39 6c 24 10 75 f0 <45> 39 54 24 14 75 e9 31 c0 49 8b 0c c6 49 3b 4c c4 20 75 dc 48 ff [ 919.185885][ C1] RSP: 0018:ffffc90004616f28 EFLAGS: 00000246 [ 919.185898][ C1] RAX: ffff88823ae00000 RBX: 0000000000002000 RCX: 0000000000b52f40 [ 919.185916][ C1] RDX: 000000002c4ddff5 RSI: 0000000000000001 RDI: 000000003e6eb66e [ 919.185927][ C1] RBP: 0000000008eb52f4 R08: 00000000c9350199 R09: 0000000067051705 [ 919.185937][ C1] R10: 000000000000000f R11: ffffffff81ace5b0 R12: ffff8880569b4690 [ 919.185948][ C1] R13: 000000000000000f R14: ffffc90004616fe0 R15: ffff88823b952f40 [ 919.185962][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 919.185984][ C1] ? stack_depot_save_flags+0x40/0x900 [ 919.186006][ C1] save_stack+0x105/0x1f0 [ 919.186026][ C1] ? __pfx_save_stack+0x10/0x10 [ 919.186042][ C1] ? free_unref_folios+0xcd2/0x1570 [ 919.186060][ C1] ? folios_put_refs+0x559/0x640 [ 919.186078][ C1] ? free_pages_and_swap_cache+0x4be/0x520 [ 919.186099][ C1] ? tlb_flush_mmu+0x3a0/0x680 [ 919.186119][ C1] ? unmap_page_range+0x38fd/0x41c0 [ 919.186139][ C1] ? unmap_vmas+0x399/0x580 [ 919.186158][ C1] ? exit_mmap+0x248/0xb50 [ 919.186175][ C1] ? __mmput+0x118/0x420 [ 919.186193][ C1] ? exit_mm+0x1da/0x2c0 [ 919.186208][ C1] ? do_exit+0x648/0x22e0 [ 919.186222][ C1] ? do_group_exit+0x21c/0x2d0 [ 919.186237][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 919.186253][ C1] ? x64_sys_call+0x21ba/0x21c0 [ 919.186268][ C1] ? do_syscall_64+0xfa/0x3b0 [ 919.186288][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.186305][ C1] ? page_ext_put+0x97/0xc0 [ 919.186325][ C1] __reset_page_owner+0x71/0x1f0 [ 919.186345][ C1] free_unref_folios+0xcd2/0x1570 [ 919.186373][ C1] folios_put_refs+0x559/0x640 [ 919.186395][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 919.186412][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 919.186435][ C1] ? free_swap_cache+0x109/0x300 [ 919.186457][ C1] free_pages_and_swap_cache+0x4be/0x520 [ 919.186483][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 919.186504][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x9d2/0xc40 [ 919.186537][ C1] ? rcu_is_watching+0x15/0xb0 [ 919.186566][ C1] ? tlb_table_flush+0x145/0x410 [ 919.186589][ C1] tlb_flush_mmu+0x3a0/0x680 [ 919.186614][ C1] unmap_page_range+0x38fd/0x41c0 [ 919.186660][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 919.186685][ C1] ? unmap_vmas+0x144/0x580 [ 919.186708][ C1] unmap_vmas+0x399/0x580 [ 919.186733][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 919.186766][ C1] exit_mmap+0x248/0xb50 [ 919.186785][ C1] ? uprobe_clear_state+0x20f/0x290 [ 919.186805][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 919.186821][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 919.186864][ C1] ? __pfx_exit_aio+0x10/0x10 [ 919.186887][ C1] ? uprobe_clear_state+0x274/0x290 [ 919.186903][ C1] ? __mmput+0x30/0x420 [ 919.186929][ C1] __mmput+0x118/0x420 [ 919.186950][ C1] exit_mm+0x1da/0x2c0 [ 919.186966][ C1] ? __pfx_exit_mm+0x10/0x10 [ 919.186984][ C1] ? rcu_is_watching+0x15/0xb0 [ 919.187006][ C1] do_exit+0x648/0x22e0 [ 919.187026][ C1] ? preempt_schedule_common+0x83/0xd0 [ 919.187046][ C1] ? preempt_schedule+0xae/0xc0 [ 919.187065][ C1] ? __pfx_do_exit+0x10/0x10 [ 919.187084][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 919.187106][ C1] do_group_exit+0x21c/0x2d0 [ 919.187126][ C1] __x64_sys_exit_group+0x3f/0x40 [ 919.187142][ C1] x64_sys_call+0x21ba/0x21c0 [ 919.187157][ C1] do_syscall_64+0xfa/0x3b0 [ 919.187179][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.187194][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 919.187209][ C1] ? clear_bhb_loop+0x60/0xb0 [ 919.187227][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.187242][ C1] RIP: 0033:0x7f9eafb8e929 [ 919.187258][ C1] Code: Unable to access opcode bytes at 0x7f9eafb8e8ff. [ 919.187267][ C1] RSP: 002b:00007ffc04f6a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 919.187283][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9eafb8e929 [ 919.187294][ C1] RDX: 00007f9eae9f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 919.187304][ C1] RBP: 00007ffc04f6a12c R08: 0000001404f6a1bf R09: 00000000000927c0 [ 919.187315][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000235 [ 919.187325][ C1] R13: 00000000000927c0 R14: 00000000000c677d R15: 00007ffc04f6a180 [ 919.187344][ C1] [ 919.187425][ C0] task:kworker/u8:5 state:R running task stack:19896 pid:11226 tgid:11226 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 919.817136][ C0] Workqueue: bat_events batadv_nc_worker [ 919.822786][ C0] Call Trace: [ 919.826067][ C0] [ 919.829006][ C0] __schedule+0x16a2/0x4cb0 [ 919.833539][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 919.838838][ C0] ? __pfx___schedule+0x10/0x10 [ 919.843709][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 919.848919][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 919.854218][ C0] preempt_schedule_irq+0xb5/0x150 [ 919.859338][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 919.865076][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 919.870900][ C0] irqentry_exit+0x6f/0x90 [ 919.875325][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 919.881311][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x31/0x90 [ 919.888166][ C0] Code: 24 65 48 8b 14 25 08 d0 99 92 65 8b 0d b8 7f d9 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 00 74 52 <8b> 8a 18 16 00 00 83 f9 03 75 47 48 8b 8a 20 16 00 00 44 8b 8a 1c [ 919.907772][ C0] RSP: 0018:ffffc90003767a18 EFLAGS: 00000246 [ 919.913842][ C0] RAX: ffffffff8b2d5c43 RBX: 0000000000000001 RCX: 0000000000000000 [ 919.921818][ C0] RDX: ffff8880356b8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 919.929791][ C0] RBP: ffff88807dc2cf20 R08: 0000000000000000 R09: ffffffff8b2d5c12 [ 919.937760][ C0] R10: dffffc0000000000 R11: ffffffff8b2d5b40 R12: dffffc0000000000 [ 919.945733][ C0] R13: ffffffff8b2d5c12 R14: ffff888031384d80 R15: 00000000000001e4 [ 919.953709][ C0] ? batadv_nc_worker+0xd2/0x610 [ 919.958654][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 919.964033][ C0] ? batadv_nc_worker+0xd2/0x610 [ 919.968975][ C0] ? batadv_nc_worker+0x103/0x610 [ 919.974014][ C0] ? batadv_nc_worker+0xef/0x610 [ 919.978958][ C0] batadv_nc_worker+0x103/0x610 [ 919.983815][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 919.989552][ C0] process_scheduled_works+0xade/0x17b0 [ 919.995133][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 920.001136][ C0] worker_thread+0x8a0/0xda0 [ 920.005735][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 920.012097][ C0] ? __kthread_parkme+0x7b/0x200 [ 920.017055][ C0] kthread+0x70e/0x8a0 [ 920.021131][ C0] ? __pfx_worker_thread+0x10/0x10 [ 920.026252][ C0] ? __pfx_kthread+0x10/0x10 [ 920.030845][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.036053][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.041257][ C0] ? __pfx_kthread+0x10/0x10 [ 920.045856][ C0] ret_from_fork+0x3fc/0x770 [ 920.050459][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 920.055582][ C0] ? __switch_to_asm+0x39/0x70 [ 920.060344][ C0] ? __switch_to_asm+0x33/0x70 [ 920.065107][ C0] ? __pfx_kthread+0x10/0x10 [ 920.069703][ C0] ret_from_fork_asm+0x1a/0x30 [ 920.074487][ C0] [ 920.077506][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g74929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 920.088698][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 920.098665][ C0] rcu: RCU grace-period kthread stack dump: [ 920.104551][ C0] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 920.118045][ C0] Call Trace: [ 920.121322][ C0] [ 920.124273][ C0] __schedule+0x16a2/0x4cb0 [ 920.128812][ C0] ? schedule+0x165/0x360 [ 920.133164][ C0] ? __pfx___schedule+0x10/0x10 [ 920.138041][ C0] ? schedule+0x91/0x360 [ 920.142299][ C0] schedule+0x165/0x360 [ 920.146470][ C0] schedule_timeout+0x12b/0x270 [ 920.151329][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 920.156708][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 920.162611][ C0] ? __pfx_process_timeout+0x10/0x10 [ 920.167916][ C0] ? prepare_to_swait_event+0x341/0x380 [ 920.173475][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 920.178347][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 920.184508][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 920.189798][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 920.195015][ C0] ? finish_swait+0xcd/0x1f0 [ 920.199609][ C0] rcu_gp_kthread+0x99/0x390 [ 920.204207][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 920.209412][ C0] ? __kthread_parkme+0x7b/0x200 [ 920.214356][ C0] ? __kthread_parkme+0x1a1/0x200 [ 920.219397][ C0] kthread+0x70e/0x8a0 [ 920.223469][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 920.228671][ C0] ? __pfx_kthread+0x10/0x10 [ 920.233266][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.238468][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.243673][ C0] ? __pfx_kthread+0x10/0x10 [ 920.248264][ C0] ret_from_fork+0x3fc/0x770 [ 920.252864][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 920.257986][ C0] ? __switch_to_asm+0x39/0x70 [ 920.262751][ C0] ? __switch_to_asm+0x33/0x70 [ 920.267512][ C0] ? __pfx_kthread+0x10/0x10 [ 920.272108][ C0] ret_from_fork_asm+0x1a/0x30 [ 920.276892][ C0] [ 920.279913][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 920.286233][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 920.297858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 920.307913][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 920.313637][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 95 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 920.333244][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 920.339314][ C0] RAX: fc57630822d69d00 RBX: ffffffff81974c68 RCX: fc57630822d69d00 [ 920.347287][ C0] RDX: 0000000000000001 RSI: ffffffff8d96ea60 RDI: ffffffff8be1b9c0 [ 920.355257][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 920.363244][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fe1f0 [ 920.371227][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 920.379202][ C0] FS: 0000000000000000(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000 [ 920.388135][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.394723][ C0] CR2: 0000001b2f717ff8 CR3: 0000000033272000 CR4: 00000000003526f0 [ 920.402701][ C0] Call Trace: [ 920.405988][ C0] [ 920.408923][ C0] default_idle+0x13/0x20 [ 920.413262][ C0] default_idle_call+0x74/0xb0 [ 920.418033][ C0] do_idle+0x1e8/0x510 [ 920.422112][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 920.427747][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.432956][ C0] ? __pfx_do_idle+0x10/0x10 [ 920.437573][ C0] ? do_idle+0x5/0x510 [ 920.441650][ C0] cpu_startup_entry+0x44/0x60 [ 920.446421][ C0] rest_init+0x2de/0x300 [ 920.450665][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 920.456216][ C0] start_kernel+0x47d/0x500 [ 920.460736][ C0] x86_64_start_reservations+0x24/0x30 [ 920.466198][ C0] x86_64_start_kernel+0x143/0x1c0 [ 920.471316][ C0] common_startup_64+0x13e/0x147 [ 920.476273][ C0] [ 920.479874][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 920.651928][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 921.631921][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 922.732034][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 923.621887][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 924.681900][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 925.791961][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 926.751879][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 927.881881][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 928.891937][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected!